Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms

Lucas G. Uberti-Bona Marin; Bram Rijsbosch; Gerasimos Spanakis; Konrad Kollnig

doi:10.1007/978-3-032-19096-3_6

Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms

Lucas G. Uberti-Bona Marin^*
, Bram Rijsbosch
, Gerasimos Spanakis
, Konrad Kollnig

^*Corresponding author for this work

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceeding › Academic › peer-review

5 Downloads (Pure)

Abstract

As Artificial Intelligence becomes increasingly central to corporate strategies, concerns over its risks are growing too. In response, regulators are pushing for greater transparency in how companies identify, report and mitigate AI-related risks. In the US, the Securities and Exchange Commission (SEC) repeatedly warned companies to provide their investors with more accurate disclosures of AI-related risks; recent enforcement and litigation against companies' misleading AI claims reinforce these warnings. In the EU, new laws -- like the AI Act and Digital Services Act -- introduced additional rules on AI risk reporting and mitigation. Given these developments, it is essential to examine if and how companies report AI-related risks to the public.

Original language	English
Title of host publication	Machine Learning and Principles and Practice of Knowledge Discovery in Databases
Subtitle of host publication	ECML PKDD 2025
Editors	Irena Koprinska, João Mendes-Moreira, Paula Branco
Place of Publication	Cham
Publisher	Springer Nature Switzerland AG
Pages	86-106
Number of pages	21
ISBN (Electronic)	978-3-032-19096-3
ISBN (Print)	978-3-032-19095-6
DOIs	https://doi.org/10.1007/978-3-032-19096-3_6
Publication status	Published - 1 Apr 2026

Publication series

Series	Communications in Computer and Information Science
Volume	2839
ISSN	1865-0929

Access to Document

10.1007/978-3-032-19096-3_6

Full TextFinal published version, 2.43 MBLicence: Taverne

Cite this

Uberti-Bona Marin, L. G., Rijsbosch, B., Spanakis, G., & Kollnig, K. (2026). Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms. In I. Koprinska, J. Mendes-Moreira, & P. Branco (Eds.), Machine Learning and Principles and Practice of Knowledge Discovery in Databases: ECML PKDD 2025 (pp. 86-106). Springer Nature Switzerland AG. https://doi.org/10.1007/978-3-032-19096-3_6

Uberti-Bona Marin, Lucas G. ; Rijsbosch, Bram ; Spanakis, Gerasimos et al. / Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms. Machine Learning and Principles and Practice of Knowledge Discovery in Databases: ECML PKDD 2025. editor / Irena Koprinska ; João Mendes-Moreira ; Paula Branco. Cham : Springer Nature Switzerland AG, 2026. pp. 86-106 (Communications in Computer and Information Science, Vol. 2839).

@inproceedings{e98656d94dff490fb7a4fd91cc029cb9,

title = "Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms",

abstract = "As Artificial Intelligence becomes increasingly central to corporate strategies, concerns over its risks are growing too. In response, regulators are pushing for greater transparency in how companies identify, report and mitigate AI-related risks. In the US, the Securities and Exchange Commission (SEC) repeatedly warned companies to provide their investors with more accurate disclosures of AI-related risks; recent enforcement and litigation against companies' misleading AI claims reinforce these warnings. In the EU, new laws -- like the AI Act and Digital Services Act -- introduced additional rules on AI risk reporting and mitigation. Given these developments, it is essential to examine if and how companies report AI-related risks to the public.",

author = "\{Uberti-Bona Marin\}, \{Lucas G.\} and Bram Rijsbosch and Gerasimos Spanakis and Konrad Kollnig",

year = "2026",

month = apr,

day = "1",

doi = "10.1007/978-3-032-19096-3\_6",

language = "English",

isbn = "978-3-032-19095-6",

series = "Communications in Computer and Information Science",

publisher = "Springer Nature Switzerland AG",

pages = "86--106",

editor = "Irena Koprinska and Jo{\~a}o Mendes-Moreira and Paula Branco",

booktitle = "Machine Learning and Principles and Practice of Knowledge Discovery in Databases",

address = "Switzerland",

}

Uberti-Bona Marin, LG , Rijsbosch, B , Spanakis, G & Kollnig, K 2026, Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms. in I Koprinska, J Mendes-Moreira & P Branco (eds), Machine Learning and Principles and Practice of Knowledge Discovery in Databases: ECML PKDD 2025. Springer Nature Switzerland AG, Cham, Communications in Computer and Information Science, vol. 2839, pp. 86-106. https://doi.org/10.1007/978-3-032-19096-3_6

Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms. / Uberti-Bona Marin, Lucas G.; Rijsbosch, Bram ; Spanakis, Gerasimos et al.
Machine Learning and Principles and Practice of Knowledge Discovery in Databases: ECML PKDD 2025. ed. / Irena Koprinska; João Mendes-Moreira; Paula Branco. Cham: Springer Nature Switzerland AG, 2026. p. 86-106 (Communications in Computer and Information Science, Vol. 2839).

Research output: Chapter in Book/Report/Conference proceeding › Conference article in proceeding › Academic › peer-review

TY - GEN

T1 - Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms

AU - Uberti-Bona Marin, Lucas G.

AU - Rijsbosch, Bram

AU - Spanakis, Gerasimos

AU - Kollnig, Konrad

PY - 2026/4/1

Y1 - 2026/4/1

N2 - As Artificial Intelligence becomes increasingly central to corporate strategies, concerns over its risks are growing too. In response, regulators are pushing for greater transparency in how companies identify, report and mitigate AI-related risks. In the US, the Securities and Exchange Commission (SEC) repeatedly warned companies to provide their investors with more accurate disclosures of AI-related risks; recent enforcement and litigation against companies' misleading AI claims reinforce these warnings. In the EU, new laws -- like the AI Act and Digital Services Act -- introduced additional rules on AI risk reporting and mitigation. Given these developments, it is essential to examine if and how companies report AI-related risks to the public.

AB - As Artificial Intelligence becomes increasingly central to corporate strategies, concerns over its risks are growing too. In response, regulators are pushing for greater transparency in how companies identify, report and mitigate AI-related risks. In the US, the Securities and Exchange Commission (SEC) repeatedly warned companies to provide their investors with more accurate disclosures of AI-related risks; recent enforcement and litigation against companies' misleading AI claims reinforce these warnings. In the EU, new laws -- like the AI Act and Digital Services Act -- introduced additional rules on AI risk reporting and mitigation. Given these developments, it is essential to examine if and how companies report AI-related risks to the public.

U2 - 10.1007/978-3-032-19096-3_6

DO - 10.1007/978-3-032-19096-3_6

M3 - Conference article in proceeding

SN - 978-3-032-19095-6

T3 - Communications in Computer and Information Science

SP - 86

EP - 106

BT - Machine Learning and Principles and Practice of Knowledge Discovery in Databases

A2 - Koprinska, Irena

A2 - Mendes-Moreira, João

A2 - Branco, Paula

PB - Springer Nature Switzerland AG

CY - Cham

ER -

Uberti-Bona Marin LG , Rijsbosch B , Spanakis G , Kollnig K. Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms. In Koprinska I, Mendes-Moreira J, Branco P, editors, Machine Learning and Principles and Practice of Knowledge Discovery in Databases: ECML PKDD 2025. Cham: Springer Nature Switzerland AG. 2026. p. 86-106. (Communications in Computer and Information Science, Vol. 2839). doi: 10.1007/978-3-032-19096-3_6

Are Companies Taking AI Risks Seriously? A Systematic Analysis of Companies' AI Risk Disclosures in SEC 10-K Forms

Abstract

Publication series

Access to Document

Fingerprint

Cite this