> Europol doesn't knock on your door when you train a model on data that doesn't meet the requirements. This is probably designed to make countries introduce laws which will hold Google/OpenAI etc. accountable for their services so they can't just shrug and say "ouppsy, it's not our fault the AI did it".

Your use of “probably” is quite telling. Probably, as in, maybe not, maybe yes, who knows. As the act is phrased today, anyone who publishes a certain type of model, or a derivative of such, is a subject to certain legal obligations. Do you want to risk that Europol or any other task force knocks on your door, or hope every time that you slip under the radar?

Those acts, together with the CRA, are so vague that a lot of people will operate in a grey area. So maybe nobody knocks on your door for a year. Or two. Or five. But when they knock, good luck defending yourself from a legal action based on laws written by people who had so little idea they had to leave so many vague points open to interpretation depending on who doesn’t like you to what extent.