EU-AI-Act
Regulation (EU) 2024/1689 — Artificial Intelligence Act
- I. General Provisions
- Art. 1. Subject matter ref
- Art. 2. Scope ref
- Art. 3. Definitions ref
- Art. 4. AI literacy ref
- II. Prohibited AI Practices
- Art. 5. Prohibited artificial intelligence practices ref
- III. High-Risk AI Systems
- Ch. 1 — Classification of AI Systems as High-Risk
- Art. 6. Classification rules for high-risk AI systems (7)
- Art. 7. Amendments to Annex III (12)
- Ch. 2 — Requirements for High-Risk AI Systems
- Art. 8. Compliance with the requirements (5)
- Art. 9. Risk management system (15)
- Art. 10. Data and data governance (20)
- Art. 11. Technical documentation (7)
- Art. 12. Record-keeping (8)
- Art. 13. Transparency and provision of information to deployers (14)
- Art. 14. Human oversight (11)
- Art. 15. Accuracy, robustness and cybersecurity (9)
- Ch. 3 — Obligations of Providers and Deployers of High-Risk AI Systems and Other Parties
- Art. 16. Obligations of providers of high-risk AI systems (12)
- Art. 17. Quality management system (16)
- Art. 18. Documentation keeping (6)
- Art. 19. Automatically generated logs (2)
- Art. 20. Corrective actions and duty of information (5)
- Art. 21. Cooperation with competent authorities (3)
- Art. 22. Duty of providers of high-risk AI systems to inform (2)
- Art. 23. Obligations of importers (12)
- Art. 24. Obligations of distributors (10)
- Art. 25. Responsibilities along the AI value chain (9)
- Ch. 4 — Obligations of Deployers of High-Risk AI Systems
- Art. 26. Obligations of deployers of high-risk AI systems (17)
- Art. 27. Fundamental rights impact assessment for high-risk AI systems (10)
- Ch. 5 — Notifying Authorities and Notified Bodies
- Art. 28. Notifying authorities (8)
- IV. Transparency Obligations for Providers and Deployers of Certain AI Systems
- Art. 50. Transparency obligations for providers and deployers of certain AI systems (9)
- V. General-Purpose AI Models
- Ch. 1 — Classification Rules
- Art. 51. Classification of general-purpose AI models as general-purpose AI models with systemic risk (4)
- Ch. 2 — Obligations for Providers of General-Purpose AI Models
- Art. 53. Obligations for providers of general-purpose AI models (6)
- Art. 54. Authorised representatives of providers of general-purpose AI models (11)
- Art. 55. Obligations for providers of general-purpose AI models with systemic risk (6)
- Art. 56. Codes of practice (8)
- VIII. Post-Market Monitoring, Information Sharing and Market Surveillance
- Ch. 1 — Post-Market Monitoring
- Art. 72. Post-market monitoring by providers and post-market monitoring plan for high-risk AI systems (7)
- Ch. 2 — Sharing of Information on Serious Incidents
- Art. 73. Reporting of serious incidents (12)
- X. Codes of Conduct and Guidelines
- Art. 95. Codes of conduct for voluntary application of specific requirements (6)
- XII. Penalties
- Art. 99. Penalties (8)
- Art. 100. Administrative fines on Union institutions, bodies, offices and agencies (7)
- Art. 101. Penalties for providers of general-purpose AI models (4)
- Annex I. Union Harmonisation Legislation Listed in Article 6(1)
- Annex III. High-Risk AI Systems Referred to in Article 6(2)
- Annex IV. Technical Documentation Referred to in Article 11(1)
Title I — General Provisions
Title II — Prohibited AI Practices
Title III — High-Risk AI Systems
Chapter 1 — Classification of AI Systems as High-Risk
Article 6. Classification rules for high-risk AI systems
7 obligations
EU-AIA-6-01
Requirement
Classify AI systems as high-risk based on safety component criteria
AI system providers must classify their system as high-risk if it is intended as a safety component of a product covered
EU-AIA-6-02
Requirement
Classify AI systems listed in Annex III as high-risk
AI system providers must classify systems referred to in Annex III as high-risk AI systems, subject to derogation condit
EU-AIA-6-03
Documentation
Document assessment for non-high-risk classification of Annex III systems
Providers who consider that an AI system referred to in Annex III is not high-risk must document their assessment before
EU-AIA-6-04
Registration
Register systems classified as non-high-risk under Annex III derogation
Providers who classify an Annex III system as non-high-risk must comply with the registration obligation set out in Arti
EU-AIA-6-05
Reporting
Provide assessment documentation to authorities upon request
Providers who have documented a non-high-risk assessment for Annex III systems must provide the assessment documentation
EU-AIA-6-06
Requirement
Commission must provide implementation guidelines by February 2026
The European Commission shall provide guidelines specifying the practical implementation of Article 6 and a comprehensiv
EU-AIA-6-07
Requirement
Commission empowered to adopt delegated acts amending paragraph 3 conditions
The Commission is empowered to adopt delegated acts in accordance with Article 97 to amend the conditions laid down in p
Article 7. Amendments to Annex III
6 obligations
EU-AIA-7-01
Requirement
Adopt delegated acts to amend Annex III for high-risk AI systems
The Commission must adopt delegated acts in accordance with Article 97 to amend Annex III by adding or modifying use cas
EU-AIA-7-02
Requirement
Assess intended purpose criterion when amending Annex III
The Commission must take into account the intended purpose of the AI system when assessing whether the risk condition is
EU-AIA-7-03
Requirement
Assess usage extent criterion when amending Annex III
The Commission must take into account the extent to which an AI system has been used or is likely to be used when assess
EU-AIA-7-04
Requirement
Assess data processing criterion when amending Annex III
The Commission must take into account the nature and amount of data processed and used by the AI system, particularly wh
EU-AIA-7-05
Requirement
Assess autonomy and human override criterion when amending Annex III
The Commission must take into account the extent to which the AI system acts autonomously and the possibility for a huma
EU-AIA-7-06
Requirement
Assess actual harm history criterion when amending Annex III
The Commission must take into account the extent to which the use of an AI system has already caused harm to health and
Chapter 2 — Requirements for High-Risk AI Systems
Chapter 3 — Obligations of Providers and Deployers of High-Risk AI Systems and Other Parties
Chapter 4 — Obligations of Deployers of High-Risk AI Systems
Chapter 5 — Notifying Authorities and Notified Bodies
Title IV — Transparency Obligations for Providers and Deployers of Certain AI Systems
Title V — General-Purpose AI Models
Chapter 1 — Classification Rules
Chapter 2 — Obligations for Providers of General-Purpose AI Models
Article 55. Obligations for providers of general-purpose AI models with systemic risk
4 obligations
EU-AIA-55-03
Reporting
Track, document and report serious incidents without undue delay
Keep track of and document serious incidents, and report relevant information about serious incidents and possible corre
EU-AIA-55-04
Requirement
Ensure adequate cybersecurity protection for model and infrastructure
Ensure an adequate level of cybersecurity protection for the general-purpose AI model with systemic risk and the physica
EU-AIA-55-05
Conformity
Demonstrate alternative compliance means when not following codes or standards
Providers who do not adhere to approved codes of practice or comply with European harmonised standards must demonstrate
EU-AIA-55-06
Data Governance
Treat obtained information in compliance with confidentiality obligations
Any information or documentation obtained pursuant to this Article, including trade secrets, must be treated in complian
Article 56. Codes of practice
8 obligations
EU-AIA-56-01
Requirement
AI Office shall encourage and facilitate drawing up codes of practice
The AI Office must encourage and facilitate the development of codes of practice at Union level to contribute to proper
EU-AIA-56-02
Requirement
AI Office and Board shall ensure codes of practice set clear objectives
The AI Office and Board must aim to ensure that codes of practice clearly set out their objectives and cover at least th
EU-AIA-56-03
Requirement
AI Office may invite participation in code development
The AI Office has the authority to invite general-purpose AI model providers and relevant national competent authorities
EU-AIA-56-04
Requirement
AI Office and Board shall ensure codes contain specific commitments and KPIs
The AI Office and Board must aim to ensure codes of practice clearly set out specific objectives and contain commitments
EU-AIA-56-05
Requirement
AI Office shall ensure participants report on code implementation
The AI Office must aim to ensure that code of practice participants report regularly on implementation of commitments, m
EU-AIA-56-06
Reporting
Code participants must report regularly on implementation
Participants in codes of practice must report regularly to the AI Office on implementation of commitments, measures take
EU-AIA-56-07
Monitoring
AI Office and Board shall monitor and evaluate code achievement
The AI Office and Board must regularly monitor and evaluate achievement of code objectives by participants and their con
EU-AIA-56-08
Transparency
AI Office and Board shall publish adequacy assessments
The AI Office and Board must publish their assessment of the adequacy of the codes of practice.