Skip to content

Regulation Tracker / EU AI Act / Chapter III · Section 3

Article 19
Automatically generated logs

Chapter III — Classification rules for high-risk AI systems, Section 3 — Obligations of providers of high-risk AI systems. 2 distinct duties, powers or definitions are coded from this article, applying from 2027-12-02. 1 reaches legal practice directly.

official text: EUR-Lex (consolidated 27 Jul 2026) · text © European Union (Decision 2011/833/EU) · coding CC BY 4.0 · data: obligations.json · Hugging Face · GitHub

The text

1. Providers of high-risk AI systems shall keep the logs referred to in Article 12(1), automatically generated by their high-risk AI systems, to the extent such logs are under their control. Without prejudice to applicable Union or national law, the logs shall be kept for a period appropriate to the intended purpose of the high-risk AI system, of at least six months, unless provided otherwise in the applicable Union or national law, in particular in Union law on the protection of personal data.

2. Providers that are financial institutions subject to requirements regarding their internal governance, arrangements or processes under Union financial services law shall maintain the logs automatically generated by their high-risk AI systems as part of the documentation kept under the relevant financial services law.

What it requires, coded

SafeLegalAI's reading of each duty in this article: who, what, from when, under which fine tier, and whether it reaches a firm, chambers, court or legal-AI vendor. Descriptive, not advice; the quoted words are the Regulation's.

  1. Art. 19(1)Record keepingHigh-risklegal practice

    Providers must keep automatically generated high-risk AI system logs under their control for a period appropriate to intended purpose and at least six months unless other law provides otherwise.

    "Providers of high-risk AI systems shall keep the logs referred to in Article 12(1), automatically generated by their high-risk AI systems, to the extent such logs are under their control. Without prejudice to applicable Union or national law, the logs shall be kept for a period appropriate to the intended purpose of the high-risk AI system, of at least six months, unless provided otherwise in the applicable Union"
    Who
    Provider
    From
    (Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk)As enacted in 2024: (Art. 113 second subparagraph); deferred by Regulation (EU) 2026/1744 (Digital Omnibus on AI).Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).
    Fine tier
    Art. 99(4)
    Legal practice
    Reaches legal practice directly — Direct for legal-AI vendors controlling logs; logs may support incident analysis, audits and challenges to legal AI use.
    See
    Art. 12(1) · Art. 26(6)
  2. Art. 19(2)Record keepingHigh-risk

    Financial-institution providers subject to Union financial-services governance requirements must maintain automatically generated high-risk AI logs as part of documentation kept under that law.

    "Providers that are financial institutions subject to requirements regarding their internal governance, arrangements or processes under Union financial services law shall maintain the logs automatically generated by their high-risk AI systems as part of the documentation kept under the relevant financial services law."
    Who
    Provider
    From
    (Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk)As enacted in 2024: (Art. 113 second subparagraph); deferred by Regulation (EU) 2026/1744 (Digital Omnibus on AI).Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).
    Fine tier
    Art. 99(4)
    Legal practice
    Institutional — Relevant only where a financial institution is the high-risk AI provider.
    See
    Art. 12(1)

Cite

Regulation (EU) 2024/1689, Article 19 (Automatically generated logs), as amended by Regulation (EU) 2026/1744, consolidated text of 27 July 2026, https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_19 — text © European Union; only the Official Journal is authentic. Coding: SafeLegalAI (published by Cognesio LLP), "EU AI Act, structured", safelegalai.com/regulation/eu-ai-act/article-19, accessed 2026-09-08, CC BY 4.0.