Skip to content

Regulation Tracker / EU AI Act / Chapter VI

Article 63
Derogations for specific operators

Chapter VI — AI regulatory sandboxes. 2 distinct duties, powers or definitions are coded from this article, applying from 2026-08-02.

Amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI), in force 2026-07-27 — about 13 words changed. The text below is the consolidated version of 27 July 2026; the 2024 text and the amending regulation are on EUR-Lex.

official text: EUR-Lex (consolidated 27 Jul 2026) · text © European Union (Decision 2011/833/EU) · coding CC BY 4.0 · data: obligations.json · Hugging Face · GitHub

The text

1. SMEs, including start-ups, may comply with certain elements of the quality management system required by Article 17 in a simplified manner, provided that they do not have partner enterprises or linked enterprises within the meaning of Recommendation 2003/361/EC. For that purpose, the Commission shall develop guidelines on the elements of the quality management system which may be complied with in a simplified manner considering the needs of SMEs, without affecting the level of protection or the need for compliance with the requirements in respect of high-risk AI systems.

2. Paragraph 1 of this Article shall not be interpreted as exempting those operators from fulfilling any other requirements or obligations laid down in this Regulation, including those established in Articles 9, 10, 11, 12, 13, 14, 15, 72 and 73.

What it requires, coded

SafeLegalAI's reading of each duty in this article: who, what, from when, under which fine tier, and whether it reaches a firm, chambers, court or legal-AI vendor. Descriptive, not advice; the quoted words are the Regulation's.

  1. Art. 63(1)Quality managementHigh-risk

    Eligible microenterprises may comply with certain Article 17 quality-management elements in a simplified manner, and the Commission must develop guidelines on the simplified elements without reducing protection or compliance needs.

    "Microenterprises within the meaning of Recommendation 2003/361/EC may comply with certain elements of the quality management system required by Article 17 of this Regulation in a simplified manner, provided that they do not have partner enterprises or linked enterprises within the meaning of that Recommendation. For that purpose, the Commission shall develop"
    Who
    Commission, Provider
    From
    (Art. 113 second subparagraph)
    Legal practice
    Reaches legal-AI vendors or public bodies — Medium for microenterprise legal-AI vendors subject to high-risk quality-management duties.
    See
    Art. 17

  2. Art. 63(2)Derogation or exemptionHigh-risk

    The microenterprise simplification must not be interpreted as exempting operators from any other Regulation requirements or obligations, including listed high-risk and post-market obligations.

    "Paragraph 1 of this Article shall not be interpreted as exempting those operators from fulfilling any other requirements or obligations laid down in this Regulation, including those established in Articles 9, 10, 11, 12, 13, 14, 15, 72 and 73."
    Who
    Provider
    From
    (Art. 113 second subparagraph)
    Legal practice
    Reaches legal-AI vendors or public bodies — Medium for small legal-AI vendors because simplification does not remove other duties.
    See
    Art. 9 · Art. 10 · Art. 11 · Art. 12 · Art. 13 · Art. 14 · Art. 15 · Art. 72 · Art. 73

Cite

Regulation (EU) 2024/1689, Article 63 (Derogations for specific operators), as amended by Regulation (EU) 2026/1744, consolidated text of 27 July 2026, https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_63 — text © European Union; only the Official Journal is authentic. Coding: SafeLegalAI (published by Cognesio LLP), "EU AI Act, structured", safelegalai.com/regulation/eu-ai-act/article-63, accessed 2026-09-08, CC BY 4.0.