Skip to content

Regulation Tracker / EU AI Act / Chapter IX · Section 3

Article 75
Market surveillance and control of AI systems and mutual assistance

Chapter IX — Post-market monitoring by providers and post-market monitoring plan for high-risk AI systems, Section 3 — Market surveillance and control of AI systems in the Union market. 11 distinct duties, powers or definitions are coded from this article, applying from 2026-08-02. 2 reach legal practice directly.

Amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI), in force 2026-07-27 — about 725 words changed. The text below is the consolidated version of 27 July 2026; the 2024 text and the amending regulation are on EUR-Lex.

official text: EUR-Lex (consolidated 27 Jul 2026) · text © European Union (Decision 2011/833/EU) · coding CC BY 4.0 · data: obligations.json · Hugging Face · GitHub

The text

1. The AI Office shall be exclusively competent for the supervision and enforcement of the obligations under this Regulation in relation to the following AI systems:

  1. (a)AI systems based on general-purpose AI models where the model and the system are developed by the same provider, or by providers forming part of the same undertaking as that provider, with the exception of: (i) AI systems related to products covered by the Union harmonisation legislation listed in Annex I; (ii) AI systems referred to in point 2 of Annex III; (iii) AI systems provided by law enforcement authorities, border management authorities and financial institutions, insofar as those AI systems fall under Article 74(6); and (iv) AI systems referred to in point 8 of Annex III as regards the administration of justice;
  2. (b)AI systems that constitute or that are integrated into a very large online platform or very large online search engine designated in accordance with Regulation (EU) 2022/2065.

1a. By way of derogation from Article 73, providers of high-risk AI systems subject to the competence of the AI Office pursuant to paragraph 1 of this Article shall report any serious incidents to the AI Office. Article 73 (2) to (9), shall apply mutatis mutandis. The AI Office shall promptly transmit the relevant information to the market surveillance authority of the Member State in the territory of which the provider or its legal representative is situated.

1b. The authorities involved in the application of this Regulation shall cooperate actively with the AI Office and provide the AI Office the necessary assistance for the exercise of its powers, including, where necessary, in connection with inspections or other enforcement measures carried out in the territory of a Member State. To that end, those authorities shall enjoy the powers provided for pursuant to this Regulation and Regulation (EU) 2019/1020, and where relevant and limited to what is necessary to fulfil their tasks under this paragraph, in accordance with the applicable national procedures.

1c. When taking investigatory or enforcement action in the territory of a Member State that involves access to a public authority’s data or AI system, the AI Office shall be assisted by the relevant market surveillance authority.

1d. Before taking a decision that would have the effect of prohibiting or restricting the AI system being made available or put into service on a national market, or a decision to withdraw or recall the AI system from such market, the AI Office shall, without undue delay, notify the market surveillance authority competent for that market of its intention to take such a decision. The AI Office shall consult the authorities involved in the application of this Regulation, where appropriate, on any matter relating to the application and enforcement of this Regulation.

1e. The AI Office shall be responsible for conformity assessments and tests of AI systems referred to in paragraph 1 of this Article that are classified as high-risk and subject to a third-party conformity assessment pursuant to Article 43 before such AI systems are placed on the market or put into service. Those tests and assessments shall verify that the systems comply with the relevant requirements of this Regulation and may be placed on the market or put into service in the Union in accordance with this Regulation. The Commission shall entrust the performance of those tests or assessments to notified bodies designated in accordance with this Regulation, in which case the notified body shall act on behalf of the Commission. If a notified body to which the Commission has delegated tasks under this paragraph does not perform those tasks adequately, the Commission may withdraw the delegation with immediate effect.

2. Where the relevant market surveillance authorities have sufficient reason to consider general-purpose AI systems that can be used directly by deployers for at least one purpose that is classified as high-risk pursuant to this Regulation to be non-compliant with the requirements laid down in this Regulation, they shall cooperate with the AI Office to carry out compliance evaluations, and shall inform the Board and other market surveillance authorities accordingly.

2a. Where a market surveillance authority has well-founded and sufficient reasons to suspect that a provider or a deployer of an AI system referred to in paragraph 1 of this Article has infringed this Regulation, it may request, through the relevant single point of contact designated in accordance with Article 70(2), the AI Office to assess the matter in order to take the necessary supervisory and enforcement measures to ensure prompt compliance with this Regulation. Such a request shall be duly reasoned and shall include at least:

  1. (a)the name of the provider or the deployer concerned;
  2. (b)a description of the relevant facts, the provisions of this Regulation that have allegedly been infringed, and any well-founded and sufficient reasons for suspecting an infringement, including, where applicable, the description of the negative effects of the alleged infringement;
  3. (c)the market surveillance authority making the request.

3. Where a market surveillance authority is unable to conclude its investigation of the high-risk AI system because of its inability to access certain information related to the general-purpose AI model despite having made all appropriate efforts to obtain that information, it may submit a reasoned request to the AI Office, by which access to that information shall be enforced. In that case, the AI Office shall supply to the applicant authority without delay, and in any event within 30 days, any information that the AI Office considers to be relevant in order to establish whether a high-risk AI system is non-compliant. Market surveillance authorities shall safeguard the confidentiality of the information that they obtain in accordance with Article 78 of this Regulation. The procedure provided for in Chapter VI of Regulation (EU) 2019/1020 shall apply mutatis mutandis.

What it requires, coded

SafeLegalAI's reading of each duty in this article: who, what, from when, under which fine tier, and whether it reaches a firm, chambers, court or legal-AI vendor. Descriptive, not advice; the quoted words are the Regulation's.

  1. Art. 75(1) (a)Enforcement powerNot tier-specific

    The AI Office is exclusively competent for supervision and enforcement for AI systems based on general-purpose AI models developed by the same provider or same undertaking, subject to listed exceptions.

    "The AI Office shall be exclusively competent for the supervision and enforcement of the obligations under this Regulation in relation to the following AI systems:"
    Who
    AI Office
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Reaches legal-AI vendors or public bodies — Legal-AI systems based on an in-house or same-undertaking GPAI model may fall under AI Office supervision unless an exception applies.
    See
    Art. 75(1)(a)

  2. Art. 75(1) (b)Enforcement powerNot tier-specific

    The AI Office is exclusively competent for AI systems that constitute or are integrated into designated very large online platforms or very large online search engines.

    "AI systems that constitute or that are integrated into a very large online platform or very large online search engine designated in accordance with Regulation (EU) 2022/2065."
    Who
    AI Office
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Institutional — This mainly affects platform and search-engine AI rather than ordinary legal practice.
    See
    Regulation (EU) 2022/2065

  3. Art. 75(1a)Incident reportingHigh-risklegal practice

    Providers of high-risk AI systems supervised by the AI Office must report serious incidents to the AI Office, with Article 73(2) to (9) applying mutatis mutandis; the AI Office must transmit relevant information onward.

    "providers of high-risk AI systems subject to the competence of the AI Office pursuant to paragraph 1 of this Article shall report any serious incidents to the AI Office."
    Who
    Provider, AI Office
    From
    (Art. 113 second subparagraph (general application))
    Fine tier
    Art. 99(4)
    Legal practice
    Reaches legal practice directly — High-risk legal-AI providers under AI Office competence report serious incidents to the AI Office rather than national market surveillance authorities.
    See
    Art. 73(2) · Art. 73(9)

  4. Art. 75(1b)Cooperation with authoritiesNot tier-specific

    Authorities involved in applying the AI Act must cooperate actively with and provide necessary assistance to the AI Office, including for inspections or other enforcement measures.

    "The authorities involved in the application of this Regulation shall cooperate actively with the AI Office and provide the AI Office the necessary assistance for the exercise of its powers"
    Who
    National competent authority, Market surveillance authority, AI Office
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Reaches legal-AI vendors or public bodies — National cooperation can affect investigations of legal-AI systems supervised by the AI Office.
    See
    Regulation (EU) 2019/1020

  5. Art. 75(1c)Cooperation with authoritiesNot tier-specificlegal practice

    When AI Office investigatory or enforcement action in a Member State involves access to a public authority data or AI system, the relevant market surveillance authority must assist.

    "the AI Office shall be assisted by the relevant market surveillance authority."
    Who
    AI Office, Market surveillance authority
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Reaches legal practice directly — This can matter for public-authority or court systems containing legal or justice data.
    See
    Art. 75(1)

  6. Art. 75(1d)Cooperation with authoritiesNot tier-specific

    Before prohibiting, restricting, withdrawing or recalling an AI system on a national market, the AI Office must notify the competent market surveillance authority without undue delay and consult where appropriate.

    "the AI Office shall, without undue delay, notify the market surveillance authority competent for that market of its intention to take such a decision."
    Who
    AI Office, Market surveillance authority
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Reaches legal-AI vendors or public bodies — This coordinates AI Office action affecting systems available to legal-sector deployers in national markets.
    See
    Art. 75(1)

  7. Art. 75(1e)Conformity assessmentHigh-risk

    For Article 75(1) AI systems that are high-risk and require third-party conformity assessment under Article 43, the AI Office is responsible for pre-market assessments and tests, with delegated notified bodies acting for the Commission.

    "The AI Office shall be responsible for conformity assessments and tests of AI systems referred to in paragraph 1 of this Article that are classified as high-risk"
    Who
    AI Office, Commission, Notified body
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Reaches legal-AI vendors or public bodies — Legal-AI vendors under AI Office competence may face AI Office-led conformity testing before market placement.
    See
    Art. 43 · Art. 75(1)

  8. Art. 75(1e)Enforcement powerHigh-risk

    If a notified body delegated to perform Article 75(1e) tests or assessments does not perform adequately, the Commission may withdraw the delegation immediately.

    "the Commission may withdraw the delegation with immediate effect."
    Who
    Commission, Notified body
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Institutional — This is notified-body oversight with indirect effects on high-risk legal-AI conformity assessment capacity.
    See
    Art. 75(1e)

  9. Art. 75(2)Cooperation with authoritiesHigh-risk

    Where market surveillance authorities have sufficient reason to consider directly deployable general-purpose AI systems usable for a high-risk purpose non-compliant, they must cooperate with the AI Office on compliance evaluations and inform the Board and other authorities.

    "they shall cooperate with the AI Office to carry out compliance evaluations, and shall inform the Board and other market surveillance authorities accordingly."
    Who
    Market surveillance authority, AI Office
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Reaches legal-AI vendors or public bodies — General-purpose AI systems used directly for high-risk legal or justice purposes may trigger joint evaluations.
    See
    ai-board

  10. Art. 75(2a)Enforcement powerNot tier-specific

    A market surveillance authority with well-founded and sufficient reasons to suspect infringement by an Article 75(1) provider or deployer may request AI Office assessment through the single point of contact.

    "it may request, through the relevant single point of contact designated in accordance with Article 70(2), the AI Office to assess the matter"
    Who
    Market surveillance authority, AI Office
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Reaches legal-AI vendors or public bodies — National authorities can route suspected infringements involving AI Office-supervised legal-AI systems to the AI Office.
    See
    Art. 70(2) · Art. 75(1)

  11. Art. 75(3)Cooperation with authoritiesHigh-risk

    Where a market surveillance authority cannot conclude a high-risk AI investigation because it lacks information on the GPAI model, it may request AI Office enforcement of access; the AI Office must supply relevant information within 30 days.

    "the AI Office shall supply to the applicant authority without delay, and in any event within 30 days, any information that the AI Office considers to be relevant"
    Who
    Market surveillance authority, AI Office
    From
    (Art. 113 second subparagraph (general application))
    Legal practice
    Reaches legal-AI vendors or public bodies — This supports investigations of high-risk legal AI that depends on general-purpose models.
    See
    Art. 78 · Regulation (EU) 2019/1020 Chapter VI

Cite

Regulation (EU) 2024/1689, Article 75 (Market surveillance and control of AI systems and mutual assistance), as amended by Regulation (EU) 2026/1744, consolidated text of 27 July 2026, https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_75 — text © European Union; only the Official Journal is authentic. Coding: SafeLegalAI (published by Cognesio LLP), "EU AI Act, structured", safelegalai.com/regulation/eu-ai-act/article-75, accessed 2026-09-08, CC BY 4.0.