In terms of the potential obligations we could think of, it would mostly be compliance assessment, but not too much. What we see at the moment, especially in Quebec, is a tendency to put impact assessments in pretty much any legislation. That's a problem. We see that it's not feasible for most organizations. There is also potentially the idea of more accountability documentation or having some procedures and processes internally. Again, the idea of policies and procedures is amazing. Even though I'm a lawyer and I'm a big fan of these documents, it's not sufficient.
Finally, at the end, I think it's more about training within organizations. That's what we see more and more, at least with my clients. There's a goal to really ensure that the staff know and understand the potential AI risks, as well as the potential benefits for their own organization.
