Skip to content
cisonews.ai
InternationalOpened for signature

Council of Europe AI Framework Convention opens for signature

The Council of Europe's AI treaty opened for signature in Vilnius on 5 September 2024, with the EU and the United States among the first signatories.

Date
2024-09-05
Instrument
Council of Europe Framework Convention on AI
Published
Sources
2

Compiled September 27, 2026 from public records. The events described took place on September 5, 2024.

By the cisonews.ai Desk · Published

The Council of Europe Framework Convention on Artificial Intelligence and human rights, democracy and the rule of law was signed in Vilnius on 5 September 2024, at an informal conference of justice ministers. The European Commission signed for the European Union, the United States signed the same day, and the Commission calls it the first legally binding international instrument on AI.

What it is

Negotiations started in September 2022 under the Council of Europe's Committee on AI, with the Commission speaking for the EU alongside the United States, Canada, Japan, Israel, Australia and others. Signature is only the first step. The State Department called it the start of a process through which the US could become a party, and the Commission said it would propose a Council decision to conclude the treaty, with Parliament's consent also needed. The sources consulted here do not say whether the convention has since entered into force.

What it requires

The treaty applies to AI lifecycle activities by public authorities and private actors working for them. Other private companies must still address AI risks in line with its goals, either by applying its obligations directly or through alternative measures. The State Department listed principles including accountability, non-discrimination, privacy and reliability, plus minimum risk management practices, procedural safeguards and remedies. Research and development and national security are exempt. Inside the EU, the Commission said the AI Act is the implementing vehicle.

What security leaders should do

Because the parties are states, the treaty will reach most companies through national law and public procurement rather than directly. Organisations that sell AI to governments in signatory countries should expect contract terms asking for risk management evidence, documentation and routes for affected people to seek remedies. Build those artefacts once, aligned with any EU AI Act work you already have, and reuse them across public-sector bids.

Sources (2)

  1. [1]
    European Commission
    digital-strategy.ec.europa.euSeptember 5, 2024tier A · Primary
  2. [2]
    US Department of State
    2021-2025.state.govundatedtier A · Primary

Spotted an error? Request a correction. Every fact on this page is tied to a listed source.