Framework Convention on Artificial Intelligence, Human Rights and Democracy
A legally binding international instrument ensuring AI systems respect human rights, democracy, and the rule of law. Establishes principles for human oversight, transparency, and accountability in AI systems. Includes mechanisms for international cooperation and enforcement.
| Jurisdiction | Technical Standards |
|---|---|
| Category | Technical Standards |
| Status | Active |
| Latest development |
Analysis
Key Requirements
- Human Rights, Democracy, and Rule of Law Alignment All activities within the lifecycle of AI systems must be fully consistent with human rights, democracy, and the rule of law. This includes both public and private actors, with obligations to adopt legislative, administrative, or other measures to ensure compliance. Council of Europe Official Convention Page Official Text of the Convention (PDF) U.S. State Department Summary
- Risk-Based Approach Parties must conduct risk and impact assessments for AI systems, focusing on actual and potential impacts on human rights, democracy, and the rule of law. This process is iterative and must include prevention and mitigation measures. Council of Europe Convention Overview Holistic AI Analysis EU Commission Announcement
- Transparency and Oversight Organizations must ensure transparency in AI operations, including clear documentation, disclosure when individuals interact with AI rather than humans, and making relevant information available to affected persons. Council of Europe Official Convention Page NAVEX Compliance Blog EU Commission Announcement
- Accountability and Remedies Effective procedural guarantees and remedies must be available for individuals affected by AI systems, including the right to lodge complaints and challenge AI-driven decisions. Council of Europe Official Convention Page Official Text of the Convention (PDF) Council of Europe Explanatory Report
- Data Protection and Privacy AI systems must respect privacy and personal data protection, aligning with existing international standards such as the Convention 108+. Council of Europe Official Convention Page EU Commission Announcement Packback Blog Summary
- International Cooperation and Enforcement The Convention establishes mechanisms for international cooperation, monitoring, and enforcement, including a Conference of the Parties to oversee implementation. Council of Europe Official Convention Page Official Text of the Convention (PDF) Council of Europe Explanatory Report
Compliance Challenges
- Broad and Principle-Based Requirements The Convention’s technology-neutral and principle-based approach can create uncertainty for organizations seeking concrete compliance steps, as implementation details are left to national legislation. NAVEX Compliance Blog Holistic AI Analysis FPF Fact Sheet
- Divergence with Regional Laws Organizations operating across multiple jurisdictions may face challenges aligning the Convention’s requirements with more prescriptive regional laws like the EU AI Act, especially regarding risk classification and prohibited uses. EU Commission Announcement NAVEX Compliance Blog FPF Fact Sheet
- Resource Constraints for Risk Assessments Conducting ongoing, iterative risk and impact assessments can be resource-intensive, particularly for smaller organizations or those with limited technical expertise. Holistic AI Analysis Packback Blog Summary Council of Europe Explanatory Report
- Real Example: The education sector faces challenges in implementing transparency and risk assessment requirements, such as explaining AI-driven grading or admissions decisions to students and parents, and updating data protection policies for student information. Packback Blog Summary NAVEX Compliance Blog
Implementation Best Practices
- Establish Multidisciplinary Compliance Teams Form teams including legal, technical, and ethics experts to interpret and implement Convention principles within organizational processes. Holistic AI Analysis FPF Fact Sheet
- Adopt a Risk Management Framework Implement structured risk and impact assessment processes, such as those outlined in the OECD AI Risk Assessment Framework or NIST AI Risk Management Framework. OECD AI Principles NIST AI RMF
- Enhance Transparency and Documentation Develop clear documentation for AI system design, deployment, and decision-making processes. Use tools such as Model Cards and Data Sheets for Datasets to standardize disclosures. Council of Europe Official Convention Page NAVEX Compliance Blog
- Provide Training and Build AI Literacy Train staff on AI ethics, risk management, and compliance obligations. Leverage resources such as the Council of Europe AI Literacy Toolkit and AI Ethics MOOC by UNESCO. Packback Blog Summary Council of Europe AI Literacy
- Engage Stakeholders and Ensure Redress Mechanisms Set up channels for affected individuals to challenge AI-driven decisions and lodge complaints, ensuring compliance with procedural rights and remedies. Council of Europe Official Convention Page Official Text of the Convention (PDF)
Recent Updates
- Adoption and Opening for Signature The Framework Convention was adopted on May 17, 2024, and opened for signature on September 5, 2024. Council of Europe Official Convention Page EU Commission Announcement Library of Congress Global Legal Monitor
- Entry into Force The Convention will enter into force on the first day of the month following three months after five signatories (including at least three Council of Europe member states) express their consent to be bound. Holistic AI Analysis Official Text of the Convention (PDF)
- No Major Amendments Since Adoption As of April 2025, no significant amendments have been announced. Ongoing updates and implementation guidance are expected as more parties ratify the Convention. Council of Europe Official Convention Page EU Commission Announcement
Related Regulations
| Regulation/Standard | Description | Interaction/Overlap | Official Link | |---------------------|-------------|---------------------|--------------| | EU AI Act | Comprehensive, prescriptive regulation for AI in the EU | The Convention is fully compatible with the EU AI Act; both use a risk-based approach and share principles like transparency, accountability, and data protection | EU AI Act Text | | OECD AI Principles | International non-binding principles for trustworthy AI | The Convention’s principles align closely with OECD’s, especially on human rights, transparency, and risk management | OECD AI Principles | | Convention 108+ | Council of Europe treaty on data protection | The Convention references and reinforces data protection obligations under Convention 108+ | Convention 108+ | | UNESCO Recommendation on AI Ethics | Global standard-setting instrument for AI ethics | Shares focus on human rights, transparency, and accountability; complements the Convention’s legal obligations | UNESCO AI Ethics |
Industry Impact
- Global Harmonization of AI Standards The Convention sets a baseline for international AI governance, influencing national and regional regulations and promoting interoperability. FPF Fact Sheet EU Commission Announcement Council of Europe Official Convention Page
- Sector-Specific Effects
- Education: Institutions must update AI ethics policies, risk assessments, and transparency practices, and enhance AI literacy for staff and students. Packback Blog Summary
- Technology and Industry: Companies face increased compliance obligations for risk management, transparency, and documentation, with flexibility for private sector adaptation. NAVEX Compliance Blog Holistic AI Analysis
- Innovation and Safe Development The Convention supports innovation through regulatory sandboxes and encourages safe, trustworthy AI development. EU Commission Announcement Council of Europe Official Convention Page
Sources
- Council of Europe Official Convention Page
- Official Text of the Convention (PDF)
- Council of Europe Explanatory Report
- EU Commission Announcement
- U.S. State Department Summary
- FPF Fact Sheet
- NAVEX Compliance Blog
- Holistic AI Analysis
- Packback Blog Summary
- Library of Congress Global Legal Monitor
- OECD AI Principles
- NIST AI RMF
- Model Cards
- Data Sheets for Datasets
- Council of Europe AI Literacy
- UNESCO AI Ethics
- Convention 108+
- EU AI Act Text
Recent developments
- — The European Commission announced that Vice-President Věra Jourová signed the Council of Europe Framework Convention on Artificial Intelligence on behalf of the EU in Vilnius, expressing the Union’s intention to become a Party to the treaty and aligning it with the EU AI Act.[6] (source)
- — The Commission indicated it will prepare a proposal for a Council decision to conclude the Convention and seek European Parliament consent, signalling forthcoming EU-level ratification and implementation steps using the AI Act as the main vehicle.[6] (source)
- — An ENSURED project analysis on global AI regulation highlighted the Framework Convention as a landmark first binding international AI treaty but warned that exemptions for certain private-sector and national-security uses may weaken its effectiveness and create uneven protection gaps.[3] (source)
- — ENNHRI’s overview of European AI regulatory frameworks positioned the Framework Convention alongside the EU AI Act and Digital Services Act, emphasizing its role in embedding human-rights-centric obligations across the AI lifecycle and complementing EU legislation with a broader international governance layer.[4] (source)
- — A research commentary from Vrije Universiteit Amsterdam underscored that the Framework Convention is the first legally binding international treaty covering all AI applications and discussed how it interacts with existing EU laws, questioning whether current EU instruments alone provide sufficient human-rights protection.[5] (source)
- — The Federal Bar Association analyzed the Convention’s adoption, noting that it embeds AI governance within established human-rights law and focuses on principles like legality, necessity, proportionality, transparency, accountability, and non-discrimination rather than prescribing technical design rules.[2] (source)
- — The Council of Europe updated its official page on the Framework Convention, reiterating that it is the first-ever legally binding international treaty on AI, technology-neutral, and applicable to activities across the AI lifecycle by both public authorities and certain private actors.[1] (source)
- — The U.S. Department of State described the Framework Convention as a key instrument for aligning AI with democratic values and human rights, signalling U.S. support and outlining how the treaty’s principles fit within broader U.S. commitments on responsible AI governance.[8] (source)
- — A Council of Europe communication recalled that the Framework Convention was opened for signature on 5 September 2024 and detailed initial signatories (including several European states, Israel, the United States, and the EU), as well as entry-into-force conditions requiring at least five ratifications including three Council of Europe members.[7] (source)
- — An industry-oriented legal analysis from McDonald Hopkins framed the Convention as a global standard in AI governance, outlining its seven guiding principles and noting that organizations interacting with public authorities will need to adapt compliance programs to new accountability, transparency, and safe-innovation obligations under national implementing laws.[10] (source)
- — Article analyzes the May 2024 adoption of the Framework Convention on AI, Human Rights, Democracy, and Rule of Law as a milestone treaty embedding human rights principles like proportionality and accountability into AI governance across public and private sectors.[2] (source)
Read the full guide to Framework Convention on Artificial Intelligence, Human Rights and Democracy
Related regulations
- OECD Framework for Classifying AI Systems — Technical Standards, Active
- IEEE P7003: Algorithmic Bias Considerations — Technical Standards, Active
- IEEE P2863: Organizational Governance of Artificial Intelligence — Technical Standards, Active
- ISO/IEC 23894: Information Technology — Artificial Intelligence — Risk Management — Technical Standards, Active
- Harmonized Standards for EU AI Act Compliance — Technical Standards, Active
- Development Security Operations Framework — Technical Standards, Active
- Center for Internet Security Critical Security Controls — Technical Standards, Active
- Control Objectives for Information and Related Technologies — Technical Standards, Active
Put it into practice
- Generate the policy: NIST AI RMF policy generator (generatepolicy.com)
- Buy the policy pack: NIST AI RMF Implementation Policy (cyberpolicy.shop)
- Build it yourself: Pillar 06 Companion — The 2026 AI Risk Register (ciso.diy)
Browse all regulations · Compliance deadlines · Latest updates