<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Archiving and Interchange DTD v1.0 20120330//EN" "JATS-archivearticle1.dtd">
<article xmlns:xlink="http://www.w3.org/1999/xlink">
  <front>
    <journal-meta />
    <article-meta>
      <title-group>
        <article-title>IDENTIFYING THE “RIGHT” LEVEL OF EXPLANATION IN A GIVEN SITUATION</article-title>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <string-name>Vale´rie Beaudouin</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Isabelle Bloch</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>David Bounie</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Ste´phan Cle´menc¸on</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Florence d'Alche´-Buc</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>James Eagan</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Winston Maxwell</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Pavlo Mozharovskyi</string-name>
        </contrib>
        <contrib contrib-type="author">
          <string-name>Jayneel Parekh</string-name>
        </contrib>
      </contrib-group>
      <abstract>
        <p>We present a framework for defining the “right” level of explainability based on technical, legal and economic considerations. Our approach involves three logical steps: First, define the main contextual factors, such as who is the audience of the explanation, the operational context, the level of harm that the system could cause, and the legal/regulatory framework. This step will help characterize the operational and legal needs for explanation, and the corresponding social benefits. Second, examine the technical tools available, including post-hoc approaches (input perturbation, saliency maps...) and hybrid AI approaches. Third, as function of the first two steps, choose the right levels of global and local explanation outputs, taking into the account the costs involved. We identify seven kinds of costs and emphasize that explanations are socially useful only when total social benefits exceed costs.</p>
      </abstract>
    </article-meta>
  </front>
  <body>
    <sec id="sec-1">
      <title>INTRODUCTION</title>
      <p>
        This paper summarizes the conclusions of a longer paper [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ] on
context-specific explanations using a multidisciplinary approach.
Explainability is both an operational and ethical requirement. The
operational needs for explainability are driven by the need to increase
robustness, particularly for safety-critical applications, as well as
enhance acceptance by system users. The ethical needs for
explainability address harms to fundamental rights and other societal interests
which may be insufficiently addressed by the purely operational
requirements. Existing works on explainable AI focus on the computer
science angle [
        <xref ref-type="bibr" rid="ref18">18</xref>
        ], or on the legal and policy angle [
        <xref ref-type="bibr" rid="ref20">20</xref>
        ]. The
originality of this paper is to integrate technical, legal and economic
approaches into a single methodology for reaching the optimal level of
explainability. The technical dimension helps us understand what
explanations are possible and what the trade-offs are between
explainability and algorithmic performance. However explanations are
necessarily context-dependent, and context depends on the regulatory
environment and a cost-benefit analysis, which we discuss below.
      </p>
      <p>Our approach involves three logical steps: First, define the main
contextual factors, such as who is the audience of the explanation,
the operational context, the level of harm that the system could cause,
and the legal/regulatory framework. This step will help characterize
the operational and legal needs for explanation, and the
corresponding social benefits. Second, examine the technical tools available,
1 Copyright c 2020 for this paper by its authors. Use permitted under
Creative Commons License Attribution 4.0 International (CC BY 4.0).
1. I3, Te´le´com Paris, CNRS, Institut Polytechnique de Paris, France –
2. LTCI, Te´le´com Paris, Institut Polytechnique de Paris, France – email:
isabelle.bloch@telecom-paris.fr
including post-hoc approaches (input perturbation, saliency maps...)
and hybrid AI approaches. Third, as function of the first two steps,
choose the right levels of global and local explanation outputs, taking
into the account the costs involved.</p>
      <p>The use of hybrid solutions, combining machine learning and
symbolic AI, is a promising field of research for safety-critical
applications, and applications such as medicine where important bodies of
domain knowledge must be associated with algorithmic decisions.
As technical solutions to explainability converge toward hybrid AI
approaches, we can expect that the trade-off between explainability
and performance will become less acute. Explainability will become
part of performance. Also, as explainability becomes a requirement
for safety certification, we can expect an alignment between
operational/safety needs for explainability and ethical/human rights needs
for explainability. Some of the solutions for operational
explainability may serve both purposes.
2</p>
    </sec>
    <sec id="sec-2">
      <title>DEFINITIONS</title>
      <p>
        Although several different definitions exist in the literature [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ], we
have treated explainability and interpretability as synonyms [
        <xref ref-type="bibr" rid="ref16">16</xref>
        ],
focusing instead on the key difference between “global” and “local”
explainability/interpretability. Global explainability means the
ability to explain the functioning of the algorithm in its entirety, whereas
local explainability means the ability to explain a particular
algorithmic decision [
        <xref ref-type="bibr" rid="ref7">7</xref>
        ]. Local explainability is also known as “post hoc”
explainability.
      </p>
      <p>
        Transparency is a broader concept than explainability [
        <xref ref-type="bibr" rid="ref6">6</xref>
        ], because
transparency includes the idea of providing access to raw
information whether or not the information is understandable. By contrast,
explainability implies a transformation of raw information in order
to make it understandable by humans. Thus explainability is a
valueadded component of transparency. Transparency and explainability
do not exist for their own sake. Instead, they are enablers of other
functions such as traceability and auditability, which are critical
inputs to accountability. In a sense, accountability is the nirvana of
algorithmic governance [
        <xref ref-type="bibr" rid="ref15">15</xref>
        ] into which other concepts, including
explainability, feed.
3
      </p>
    </sec>
    <sec id="sec-3">
      <title>THREE FACTORS DETERMINING THE “RIGHT” LEVEL OF EXPLANATION</title>
      <p>Our approach identifies three considerations that will help lead to
the right level of explainability: the contextual factors (an input),
the available technical solutions (an input), and the explainability
choices regarding the form and detail of explanations (the outputs).
3.1</p>
    </sec>
    <sec id="sec-4">
      <title>Contextual factors</title>
      <p>
        We have identified four kinds of contextual factors that will help
identify the various reasons why we need explanations and choose
the most appropriate form of explanation (output) as a function of
the technical possibilities and costs. The four contextual factors are:
Audience factors: Who is receiving the explanation? What is their
level of expertise? What are their time constraints? These will
profoundly impact the level of detail and timing of the
explanation [
        <xref ref-type="bibr" rid="ref5 ref7">5, 7</xref>
        ].
      </p>
      <p>
        Impact factors: What harms could the algorithm cause and how
might explanations help? These will determine the level of social
benefits associated with the explanation. Generally speaking, the
higher the impact of the algorithm, the higher the benefits flowing
from explanation [
        <xref ref-type="bibr" rid="ref8">8</xref>
        ].
      </p>
      <p>Regulatory factors: What is the regulatory environment for the
application? What fundamental rights are affected? These factors are
examined in Section 5 and will help characterize the social
benefits associated with an explanation in a given context.</p>
      <p>Operational factors: To what extent is explanation an operational
imperative? For safety certification? For user trust? These factors
may help identify solutions that serve both operational and
ethical/legal purposes.
3.2</p>
    </sec>
    <sec id="sec-5">
      <title>Technical solutions</title>
      <p>
        Another input factor relates to the technical solutions available
for explanations. Post-hoc approaches such as LIME [
        <xref ref-type="bibr" rid="ref18">18</xref>
        ],
KernalSHAP [
        <xref ref-type="bibr" rid="ref14">14</xref>
        ] and saliency maps [
        <xref ref-type="bibr" rid="ref21">21</xref>
        ] generally strive to approximate
the functioning of a black-box model by using a separate explanation
model. Hybrid approaches tend to incorporate the need for
explanation into the model itself. These approaches include:
      </p>
      <p>
        Modifying objective or predictor function;
Producing fuzzy rules, close to natural language;
Output approaches [
        <xref ref-type="bibr" rid="ref22">22</xref>
        ];
Input approaches, which pre-process the inputs to the machine
learning model, making the inputs more meaningful and/or
better structured [
        <xref ref-type="bibr" rid="ref1">1</xref>
        ];
      </p>
      <p>Genetic fuzzy logic.</p>
      <p>The range of potential hybrid approaches, i.e. approaches that
combine machine learning and symbolic or logic-based approaches, is
almost unlimited. The examples above represent only a small
selection. Most of the approaches, whether focused on inputs, outputs, or
constraints within the model, can contribute to explainability, albeit
in different ways. Explainability by design mostly aims at
incorporating explainability in the predictor model.
3.3</p>
    </sec>
    <sec id="sec-6">
      <title>Explanation output choices</title>
      <p>The output of explanation will be what is actually shown to the
relevant explanation audience, whether through global explanation of
the algorithm’s operation, or through local explanation of a
particular decision.</p>
      <p>The output choices for global explanations will include the
following:</p>
      <p>
        Adoption of a “user’s manual” approach to present the functioning
of the algorithm as a whole [
        <xref ref-type="bibr" rid="ref10">10</xref>
        ];
The level of detail to include in the user’s manual;
Whether to provide access to source code, taking into account
trade secret protection and the sometimes limited utility of source
code to the relevant explanation audience [
        <xref ref-type="bibr" rid="ref10 ref20">10, 20</xref>
        ];
Information on training data, including potentially providing a
copy of the training data [
        <xref ref-type="bibr" rid="ref10 ref13 ref17">10, 13, 17</xref>
        ];
Information on the learning algorithm, including its objective
function;
Information on known biases and other inherent weaknesses of the
algorithm; identifying use restrictions and warnings.
      </p>
      <p>The output choices for local explanations will include the
following:</p>
      <p>
        Counterfactual dashboards, with “what if” experimentation
available for end-users [
        <xref ref-type="bibr" rid="ref20 ref24">20, 24</xref>
        ];
Saliency maps to show the main factors contributing to decision;
Defining the level of detail, including how many factors and
relevant weights to present to end-users;
Layered explanation tools, permitting a user to access increasing
levels of complexity;
Access to individual decision logs [
        <xref ref-type="bibr" rid="ref11 ref26">11, 26</xref>
        ];
      </p>
      <p>What information should be stored in logs, and for how long?
4</p>
    </sec>
    <sec id="sec-7">
      <title>EXPLAINABILITY AS AN OPERATIONAL</title>
    </sec>
    <sec id="sec-8">
      <title>REQUIREMENT</title>
      <p>Much of the work on explainability in the 1990s, as well as the
new industrial interest in explainability today, focus on explanations
needed to satisfy users’ operational requirements. For example, the
customer may require explanations as part of the safety validation
and certification process for an AI system, or may ask that the
system provide additional information to help the end user (for example,
a radiologist) put the system’s decision into a clinical context.</p>
      <p>
        These operational requirements for explainability may be required
to obtain certifications for safety-critical applications, since the
system could not go to market without those certifications. Customers
may also insist on explanations in order to make the system more
user-friendly and trusted by users. Knowing which factors cause
certain outcomes increases the system’s utility because the decisions
are accompanied by actionable insights, which can be much more
valuable than simply having highly-accurate but unexplained
predictions [
        <xref ref-type="bibr" rid="ref25">25</xref>
        ]. Understanding causality can also enhance quality by
making models more robust to shifting input domains. Customers
increasingly consider explainability as a quality feature for the AI
system. These operational requirements are distinct from regulatory
demands for explainability, which we examine in Section 5, but may
nevertheless lead to a convergence in the tools used to meet the
various requirements.
      </p>
      <p>
        Explainability has an important role in algorithmic quality
control, both before the system goes to market and afterwards, because
it helps bring to light weaknesses in the algorithm such as bias that
would otherwise go unnoticed [
        <xref ref-type="bibr" rid="ref9">9</xref>
        ]. Explainability contributes to
“total product lifecycle” [
        <xref ref-type="bibr" rid="ref23">23</xref>
        ] or “safety lifecycle” [
        <xref ref-type="bibr" rid="ref12">12</xref>
        ] approaches to
algorithmic quality and safety.
      </p>
      <p>
        The quality of machine learning models is often judged by the
average accuracy rate when analyzing test data. This simple
measure of quality fails to reflect weaknesses affecting the algorithm’s
quality, particularly bias and failure to generalize. Explainability
solutions presented can assist in identifying areas of input data where
the performance of the algorithm is poor, and identify defects in the
learning data that lead to bad predictions. Traditional approaches to
software verification and validation (V&amp;V) are ill-adapted to
neural networks [
        <xref ref-type="bibr" rid="ref17 ref23 ref3">3, 17, 23</xref>
        ]. The challenges relate to neural networks’
non-determinism, which makes it hard to demonstrate the absence
of unintended functionality, and to the adaptive nature of
machinelearning algorithms [
        <xref ref-type="bibr" rid="ref23 ref3">3, 23</xref>
        ]. Specifying a set of requirements that
comprehensively describe the behavior of a neural network is
considered the most difficult challenge with regard to traditional V&amp;V
and certification approaches [
        <xref ref-type="bibr" rid="ref2 ref3">2, 3</xref>
        ]. The absence of complete
requirements poses a problem because one of the objectives of V&amp;V is to
compare the behavior of the software to a document that describes
precisely and comprehensively the system’s intended behavior [
        <xref ref-type="bibr" rid="ref17">17</xref>
        ].
For neural networks, there may remain a degree of uncertainty about
just what will be the output for a given input.
5
      </p>
    </sec>
    <sec id="sec-9">
      <title>EXPLAINABILITY AS A LEGAL</title>
    </sec>
    <sec id="sec-10">
      <title>REQUIREMENT</title>
      <p>The legal approaches to explanation are different for government
decisions and for private sector decisions. The obligation for
governments to give explanations has constitutional underpinnings, for
example the right to due process under the United States Constitution,
and the right to challenge administrative decisions under European
human rights instruments. These rights require that individuals and
courts be able to understand the reasons for algorithmic decisions,
replicate the decisions to test for errors, and evaluate the
proportionality of systems in light of other affected human rights such as the
right to privacy. In the United States, the Houston Teachers case2
illustrates how explainability is linked to the constitutional
guarantee of due process. In Europe, the Hague District Court decision on
the SyLI algorithm3 shows how explainability is closely linked to
the European constitutional principle of proportionality. France has
enacted a law on government-operated algorithms4, which includes
particularly stringent explainability requirements: disclosure of the
degree and manner in which the algorithmic processing contributed
to the decision; the data used for the processing and their source; the
parameters used and their weights in the individual processing; and
the operations effected by the processing.</p>
      <p>For private entities, a duty of explanation generally arises when
the entity becomes subject to a heightened duty of fairness or loyalty,
which can happen when the entity occupies a dominant position
under antitrust law, or when it occupies functions that create a situation
of trust or dependency vis a` vis users. A number of specific laws
impose algorithmic explanations in the private sector. One of the most
recent is Europe’s Platform to Business Regulation (EU) 2018/1150,
which imposes a duty of explanation on online intermediaries and
search engines with regard to ranking algorithms. The language in
the regulation shows the difficult balance between competing
principles: providing complete information, protecting trade secrets,
avoiding giving information that would permit bad faith manipulation of
ranking algorithms by third parties, and making explanations
easily understandable and useful for users. Among other things, online
intermediaries and search engines must provide a “reasoned
description” of the “main parameters” affecting ranking on the platform,
including the “general criteria, processes, specific signals
incorporated into algorithms or other adjustment or demotion mechanisms
2 Local 2415 v. Houston Independent School District, 251 F. Supp. 3d 1168
(S.D. Tex. 2017).
3 NJCM v. the Netherlands, District Court of The Hague, Case n.
C-09550982-HA ZA 18-388, February 5, 2020.
4 French Code of Relations between the Public and the Administration,
articles L. 311-3-1 et seq.
used in connection with the ranking.”5 These requirements are more
detailed than those in Europe’s General Data Protection Regulation
EU 2016/679 (GDPR), which requires only “meaningful
information about the logic involved.”6 In the United States, banks already
have an obligation to provide the principal reasons for any denial of a
loan.7 A proposed bill in the United States called the Algorithmic
Accountability Act would impose explainability obligations on certain
high-impact algorithms, including an obligation to provide “detailed
description of the automated decision system, its design, its training,
data, and its purpose.”8
6</p>
    </sec>
    <sec id="sec-11">
      <title>THE BENEFITS AND COSTS OF</title>
    </sec>
    <sec id="sec-12">
      <title>EXPLANATIONS</title>
      <p>
        Laws and regulations generally impose explanations when doing so
is socially beneficial, that is, when the collective benefits associated
with providing explanations exceed the costs. When considering
algorithmic explainability, where the law has not yet determined
exactly what form of explainability is required and in which context,
the costs and benefits of explanations will help fill the gaps and define
the right level of explanation. The cost-benefit analysis will help
determine when and how explanations should be provided, permitting
various trade-offs to be highlighted and managed. For explanations to
be socially useful, benefits should always exceed the costs. The
benefits of explanations are closely linked to the level of impact of the
algorithm on individual and collective rights [
        <xref ref-type="bibr" rid="ref5 ref8">5, 8</xref>
        ]. For algorithms
with low impact, such as a music recommendation algorithms, the
benefits of explanation will be low. For a high-impact algorithm such
as the image recognition algorithm of an autonomous vehicle, the
benefits of explanation, for example in finding the cause of a crash,
will be high.
      </p>
      <p>Explanations generate many kinds of costs, some of which are not
obvious. We have identified seven categories of costs:</p>
      <p>
        Design and integration costs, which may be high because
explanation requirements will vary among different applications, contexts
and geographies, meaning that a one-size-fits-all explanation
solution will rarely be sufficient [
        <xref ref-type="bibr" rid="ref9">9</xref>
        ];
Sacrificing prediction accuracy for the sake of explainability
can result in lower performance, thereby generating opportunity
costs [
        <xref ref-type="bibr" rid="ref5">5</xref>
        ];
The creation and storage of decision logs create operational costs
but also tensions with data privacy principles which generally
require destruction of logs as soon as possible [
        <xref ref-type="bibr" rid="ref11 ref26">11, 26</xref>
        ];
Forced disclosure of source code or other algorithmic details may
interfere with constitutionally-protected trade secrets [
        <xref ref-type="bibr" rid="ref4">4</xref>
        ];
Detailed explanations on the functioning of an algorithm can
facilitate gaming of the system and result in decreased security;
Explanations create implicit rules and precedents, which the
decision maker will have to take into account in the future, thereby
limiting her decisional flexibility in the future [
        <xref ref-type="bibr" rid="ref19">19</xref>
        ];
Mandating explainability can increase time to market, thereby
slowing innovation [
        <xref ref-type="bibr" rid="ref9">9</xref>
        ].
      </p>
      <p>For high-impact algorithmic decisions, these costs will often be
outweighed by the benefits of explanations. But the costs should
nevertheless be considered in each case to ensure that the form and level
5 Regulation 2018/1150, recital 24.
6 Regulation 2016/679, article 13(2)(f).
7 12 CFR Part 1002.9.
8 Proposed Algorithmic Accountability Act, H.R. 2231, introduced April 10,
2019.
of detail of mandated explanations is adapted to the situation. The net
social benefit (total benefits less total costs) should remain positive.
7</p>
    </sec>
    <sec id="sec-13">
      <title>CONCLUSION: CONTEXT-SPECIFIC AI</title>
    </sec>
    <sec id="sec-14">
      <title>EXPLANATIONS BY DESIGN</title>
      <p>Regulation of AI explainability remains largely unexplored territory,
the most ambitious efforts to date being the French law on the
explainability of government algorithms and the EU regulation on
Platform to Business relations. However, even in those instances, the
law leaves many aspects of explainability open to interpretation. The
form of explanation and the level of detail will be driven by the four
categories of contextual factors described in this paper: audience
factors, impact factors, regulatory factors, and operational factors. The
level of detail of explanations – global or local – would follow a
sliding scale depending on the context, and the costs and benefits at
stake. One of the biggest costs of local explanations will relate to
storage of individual decision logs. The kind of information stored in
the logs, and the duration of storage, will be key questions to address
when determining the right level of explainability. Hybrid solutions
attempt to create explainability by design, mostly by incorporating
explainability in the predictor model. While generally addressing
operational needs, these hybrid approaches may also serve ethical and
legal explainability needs. Our three-step method involving
contextual factors, technical solutions, and explainability outputs will help
lead to the “right” level of explanation in a given situation.</p>
      <p>Future work aims at instantiating the proposed three steps to
realistic and concrete problems, to give insight in the feasibility and
value of the method to provide the right level of explanation.</p>
    </sec>
  </body>
  <back>
    <ref-list>
      <ref id="ref1">
        <mixed-citation>
          [1] Vale´rie Beaudoin, Isabelle Bloch, David Bounie, Ste´phan Cle´mencon, Florence d'Ache´ Buc, James Eagan, Maxwell Winston, Pavlo Mozharovskyi, and Jayneel Parekh, '
          <article-title>Flexible and context-specific AI explainability: a multidisciplinary approach'</article-title>
          ,
          <source>Technical report, ArXiv</source>
          , (
          <year>2020</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref2">
        <mixed-citation>
          [2]
          <string-name>
            <given-names>Siddhartha</given-names>
            <surname>Bhattacharyya</surname>
          </string-name>
          ,
          <string-name>
            <given-names>Darren</given-names>
            <surname>Cofer</surname>
          </string-name>
          ,
          <string-name>
            <given-names>D</given-names>
            <surname>Musliner</surname>
          </string-name>
          ,
          <string-name>
            <given-names>Joseph</given-names>
            <surname>Mueller</surname>
          </string-name>
          , and Eric Engstrom, '
          <article-title>Certification considerations for adaptive systems'</article-title>
          ,
          <source>in 2015 IEEE International Conference on Unmanned Aircraft Systems (ICUAS)</source>
          , pp.
          <fpage>270</fpage>
          -
          <lpage>279</lpage>
          , (
          <year>2015</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref3">
        <mixed-citation>
          [3]
          <string-name>
            <given-names>Markus</given-names>
            <surname>Borg</surname>
          </string-name>
          , Cristofer Englund, Krzysztof Wnuk, Boris Duran, Christoffer Levandowski,
          <string-name>
            <given-names>Shenjian</given-names>
            <surname>Gao</surname>
          </string-name>
          , Yanwen Tan, Henrik Kaijser, Henrik Lo¨ nn, and Jonas To¨ rnqvist, '
          <article-title>Safely entering the deep: A review of verification and validation for machine learning and a challenge elicitation in the automotive industry'</article-title>
          ,
          <source>Journal of Automotive Software Engineering</source>
          ,
          <volume>1</volume>
          (
          <issue>1</issue>
          ),
          <fpage>1</fpage>
          -
          <lpage>19</lpage>
          , (
          <year>2019</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref4">
        <mixed-citation>
          [4]
          <string-name>
            <given-names>Jenna</given-names>
            <surname>Burrell</surname>
          </string-name>
          , '
          <article-title>How the machine 'thinks': Understanding opacity in machine learning algorithms'</article-title>
          ,
          <source>Big Data &amp; Society</source>
          ,
          <volume>3</volume>
          (
          <issue>1</issue>
          ),
          <fpage>2053951715622512</fpage>
          , (
          <year>2016</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref5">
        <mixed-citation>
          [5]
          <string-name>
            <given-names>Finale</given-names>
            <surname>Doshi-Velez</surname>
          </string-name>
          , Mason Kortz, Ryan Budish, Chris Bavitz, Sam Gershman,
          <string-name>
            <surname>David O'Brien</surname>
          </string-name>
          , Stuart Schieber, James Waldo, David Weinberger, and Alexandra Wood, '
          <article-title>Accountability of ai under the law: The role of explanation'</article-title>
          ,
          <source>arXiv preprint arXiv:1711.01134</source>
          , (
          <year>2017</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref6">
        <mixed-citation>
          [6]
          <string-name>
            <given-names>European</given-names>
            <surname>Commission</surname>
          </string-name>
          , '
          <article-title>Communication from the Commission to the European Parliament, the Council, the European Economic and Social Committee and the Committee of the Regions - Building trust in human centric artificial intelligence (com(</article-title>
          <year>2019</year>
          )
          <article-title>168)'</article-title>
          ,
          <string-name>
            <surname>Technical</surname>
            <given-names>report</given-names>
          </string-name>
          , (
          <year>2019</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref7">
        <mixed-citation>
          [7]
          <string-name>
            <given-names>Riccardo</given-names>
            <surname>Guidotti</surname>
          </string-name>
          , Anna Monreale, Salvatore Ruggieri, Franco Turini, Fosca Giannotti, and Dino Pedreschi, '
          <article-title>A survey of methods for explaining black box models'</article-title>
          ,
          <source>ACM Computing Surveys (CSUR)</source>
          ,
          <volume>51</volume>
          (
          <issue>5</issue>
          ),
          <fpage>93</fpage>
          , (
          <year>2018</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref8">
        <mixed-citation>
          [8]
          <string-name>
            <surname>AI</surname>
            <given-names>HLEG</given-names>
          </string-name>
          , '
          <article-title>High-level expert group on artificial intelligence', Ethics Guidelines for Trustworthy AI</article-title>
          , (
          <year>2019</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref9">
        <mixed-citation>
          [9] ICO, '
          <source>Project ExplAIn interim report'</source>
          ,
          <source>Technical report, Information Commissioner's Office</source>
          , (
          <year>2019</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref10">
        <mixed-citation>
          [10] IEEE, '
          <article-title>Ethically aligned design: A vision for prioritizing human wellbeing with autonomous and intelligent systems'</article-title>
          ,
          <source>IEEE Global Initiative on Ethics of Autonomous and Intelligent Systems</source>
          , (
          <year>2019</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref11">
        <mixed-citation>
          [11]
          <string-name>
            <surname>Joshua</surname>
            <given-names>A Kroll</given-names>
          </string-name>
          , Solon Barocas, Edward W Felten, Joel R Reidenberg, David G Robinson, and Harlan Yu, 'Accountable algorithms', U. Pa. L. Rev.,
          <volume>165</volume>
          ,
          <fpage>633</fpage>
          , (
          <year>2016</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref12">
        <mixed-citation>
          [12]
          <string-name>
            <given-names>Zeshan</given-names>
            <surname>Kurd</surname>
          </string-name>
          and Tim Kelly, '
          <article-title>Safety lifecycle for developing safety critical artificial neural networks'</article-title>
          , in Computer Safety, Reliability, and Security, eds.,
          <string-name>
            <surname>Stuart</surname>
            <given-names>Anderson</given-names>
          </string-name>
          ,
          <string-name>
            <given-names>Massimo</given-names>
            <surname>Felici</surname>
          </string-name>
          , and Bev Littlewood, pp.
          <fpage>77</fpage>
          -
          <lpage>91</lpage>
          , Berlin, Heidelberg, (
          <year>2003</year>
          ). Springer Berlin Heidelberg.
        </mixed-citation>
      </ref>
      <ref id="ref13">
        <mixed-citation>
          [13]
          <string-name>
            <given-names>David</given-names>
            <surname>Lehr</surname>
          </string-name>
          and
          <string-name>
            <given-names>Paul</given-names>
            <surname>Ohm</surname>
          </string-name>
          , '
          <article-title>Playing with the data: what legal scholars should learn about machine learning'</article-title>
          ,
          <source>UCDL Rev.</source>
          ,
          <volume>51</volume>
          ,
          <fpage>653</fpage>
          , (
          <year>2017</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref14">
        <mixed-citation>
          [14]
          <string-name>
            <surname>Scott</surname>
            <given-names>M Lundberg</given-names>
          </string-name>
          and
          <string-name>
            <surname>Su-In</surname>
            <given-names>Lee</given-names>
          </string-name>
          , '
          <article-title>A unified approach to interpreting model predictions'</article-title>
          ,
          <source>in Advances in Neural Information Processing Systems</source>
          , pp.
          <fpage>4765</fpage>
          -
          <lpage>4774</lpage>
          , (
          <year>2017</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref15">
        <mixed-citation>
          <source>[15] OECD, Artificial Intelligence in Society</source>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref16">
        <mixed-citation>
          [16]
          <string-name>
            <surname>OECD</surname>
          </string-name>
          ,
          <source>Recommendation of the Council on Artificial Intelligence</source>
          ,
          <year>2019</year>
          .
        </mixed-citation>
      </ref>
      <ref id="ref17">
        <mixed-citation>
          [17]
          <string-name>
            <surname>Gerald</surname>
            <given-names>E Peterson</given-names>
          </string-name>
          , '
          <article-title>Foundation for neural network verification and validation'</article-title>
          ,
          <source>in Science of Artificial Neural Networks II</source>
          , volume
          <year>1966</year>
          , pp.
          <fpage>196</fpage>
          -
          <lpage>207</lpage>
          . International Society for Optics and Photonics, (
          <year>1993</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref18">
        <mixed-citation>
          [18]
          <string-name>
            <given-names>Marco</given-names>
            <surname>Tulio</surname>
          </string-name>
          <string-name>
            <surname>Ribeiro</surname>
          </string-name>
          ,
          <string-name>
            <given-names>Sameer</given-names>
            <surname>Singh</surname>
          </string-name>
          ,
          <string-name>
            <given-names>and Carlos</given-names>
            <surname>Guestrin</surname>
          </string-name>
          , '
          <article-title>Why should I trust you?: Explaining the predictions of any classifier'</article-title>
          ,
          <source>in 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining</source>
          , pp.
          <fpage>1135</fpage>
          -
          <lpage>1144</lpage>
          , (
          <year>2016</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref19">
        <mixed-citation>
          [19]
          <string-name>
            <surname>Frederick</surname>
            <given-names>Schauer</given-names>
          </string-name>
          , 'Giving reasons',
          <source>Stanford Law Review</source>
          ,
          <fpage>633</fpage>
          -
          <lpage>659</lpage>
          , (
          <year>1995</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref20">
        <mixed-citation>
          [20]
          <string-name>
            <given-names>Andrew</given-names>
            <surname>Selbst</surname>
          </string-name>
          and Solon Barocas, '
          <article-title>The intuitive appeal of explainable machines'</article-title>
          ,
          <source>SSRN Electronic Journal</source>
          ,
          <volume>87</volume>
          , (01
          <year>2018</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref21">
        <mixed-citation>
          [21]
          <string-name>
            <surname>Karen</surname>
            <given-names>Simonyan</given-names>
          </string-name>
          , Andrea Vedaldi, and Andrew Zisserman, '
          <article-title>Deep inside convolutional networks: Visualising image classification models and saliency maps'</article-title>
          ,
          <source>arXiv preprint arXiv:1312.6034</source>
          , (
          <year>2013</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref22">
        <mixed-citation>
          [22]
          <string-name>
            <surname>Philip</surname>
            <given-names>S.</given-names>
          </string-name>
          <string-name>
            <surname>Thomas</surname>
          </string-name>
          , Bruno Castro da Silva, Andrew G. Barto, Stephen Giguere, Yuriy Brun, and Emma Brunskill, '
          <article-title>Preventing undesirable behavior of intelligent machines'</article-title>
          ,
          <source>Science</source>
          ,
          <volume>366</volume>
          (
          <issue>6468</issue>
          ),
          <fpage>999</fpage>
          -
          <lpage>1004</lpage>
          , (
          <year>2019</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref23">
        <mixed-citation>
          [23]
          <string-name>
            <given-names>US</given-names>
            <surname>Food and Drug Administration</surname>
          </string-name>
          , '
          <article-title>Proposed regulatory framework for modifications to artificial intelligence/machine learning (AI/ML)-based software as a medical device'</article-title>
          ,
          <source>Technical report</source>
          , (
          <year>2019</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref24">
        <mixed-citation>
          [24]
          <string-name>
            <surname>Sandra</surname>
            <given-names>Wachter</given-names>
          </string-name>
          , Brent Mittelstadt, and Chris Russell, '
          <article-title>Counterfactual explanations without opening the black box: Automated decisions and the gpdr'</article-title>
          ,
          <source>Harv. JL &amp; Tech.</source>
          ,
          <volume>31</volume>
          ,
          <fpage>841</fpage>
          , (
          <year>2017</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref25">
        <mixed-citation>
          [25]
          <string-name>
            <surname>Max</surname>
            <given-names>Welling</given-names>
          </string-name>
          , '
          <article-title>Are ML and statistics complementary?'</article-title>
          ,
          <source>in IMS-ISBA Meeting on 'Data Science in the Next 50 Years</source>
          , (
          <year>2015</year>
          ).
        </mixed-citation>
      </ref>
      <ref id="ref26">
        <mixed-citation>
          [26]
          <string-name>
            <surname>Alan</surname>
            <given-names>FT</given-names>
          </string-name>
          <article-title>Winfield and Marina Jirotka, 'The case for an ethical black box'</article-title>
          ,
          <source>in Annual Conference Towards Autonomous Robotic Systems</source>
          , pp.
          <fpage>262</fpage>
          -
          <lpage>273</lpage>
          . Springer, (
          <year>2017</year>
          ).
        </mixed-citation>
      </ref>
    </ref-list>
  </back>
</article>