Skip to content

Regulation Tracker / EU AI Act / Chapter IX · Section 3

Article 82
Compliant AI systems which present a risk

Chapter IX — Post-market monitoring by providers and post-market monitoring plan for high-risk AI systems, Section 3 — Market surveillance and control of AI systems in the Union market. 3 distinct duties, powers or definitions are coded from this article, applying from 2026-08-02. 2 reach legal practice directly.

official text: EUR-Lex (consolidated 27 Jul 2026) · text © European Union (Decision 2011/833/EU) · coding CC BY 4.0 · data: obligations.json · Hugging Face · GitHub

The text

1. Where, having performed an evaluation under Article 79, after consulting the relevant national public authority referred to in Article 77(1), the market surveillance authority of a Member State finds that although a high-risk AI system complies with this Regulation, it nevertheless presents a risk to the health or safety of persons, to fundamental rights, or to other aspects of public interest protection, it shall require the relevant operator to take all appropriate measures to ensure that the AI system concerned, when placed on the market or put into service, no longer presents that risk without undue delay, within a period it may prescribe.

2. The provider or other relevant operator shall ensure that corrective action is taken in respect of all the AI systems concerned that it has made available on the Union market within the timeline prescribed by the market surveillance authority of the Member State referred to in paragraph 1.

3. The Member States shall immediately inform the Commission and the other Member States of a finding under paragraph 1. That information shall include all available details, in particular the data necessary for the identification of the AI system concerned, the origin and the supply chain of the AI system, the nature of the risk involved and the nature and duration of the national measures taken.

4. The Commission shall without undue delay enter into consultation with the Member States concerned and the relevant operators, and shall evaluate the national measures taken. On the basis of the results of that evaluation, the Commission shall decide whether the measure is justified and, where necessary, propose other appropriate measures.

5. The Commission shall immediately communicate its decision to the Member States concerned and to the relevant operators. It shall also inform the other Member States.

What it requires, coded

SafeLegalAI's reading of each duty in this article: who, what, from when, under which fine tier, and whether it reaches a firm, chambers, court or legal-AI vendor. Descriptive, not advice; the quoted words are the Regulation's.

  1. Art. 82(1)Enforcement powerHigh-risklegal practice

    Even if a high-risk AI system complies with the Regulation, authorities must require measures if it still risks health, safety, fundamental rights or public interests.

    "although a high-risk AI system complies with this Regulation, it nevertheless presents a risk to the health or safety of persons, to fundamental rights"
    Who
    Market surveillance authority, Any operator
    From
    (Art. 113 second subparagraph)
    Legal practice
    Reaches legal practice directly — A formally compliant high-risk legal-AI system may still be subject to corrective measures if it presents fundamental-rights risk.
    See
    Art. 79 · Art. 77(1)

  2. Art. 82(2)Cooperation with authoritiesHigh-risklegal practice

    The provider or other relevant operator must ensure corrective action is taken for all affected Union-market systems within the authority-prescribed timeline.

    "The provider or other relevant operator shall ensure that corrective action is taken in respect of all the AI systems concerned"
    Who
    Provider, Any operator
    From
    (Art. 113 second subparagraph)
    Legal practice
    Reaches legal practice directly — Legal-AI providers or operators may need to correct all affected systems, not only one deployment.
    See
    Art. 82(1)

  3. Art. 82(4)Cooperation with authoritiesHigh-risk

    Member States must inform the Commission and other Member States of compliant-risk findings, and the Commission must consult, evaluate, decide and communicate whether measures are justified.

    "The Commission shall without undue delay enter into consultation with the Member States concerned and the relevant operators, and shall evaluate the national measures taken."
    Who
    Commission, Member State
    From
    (Art. 113 second subparagraph)
    Legal practice
    Reaches legal-AI vendors or public bodies — This procedure can affect high-risk legal-AI systems presenting risks despite formal compliance.
    See
    Art. 82(3) · Art. 82(5)

Cite

Regulation (EU) 2024/1689, Article 82 (Compliant AI systems which present a risk), as amended by Regulation (EU) 2026/1744, consolidated text of 27 July 2026, https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_82 — text © European Union; only the Official Journal is authentic. Coding: SafeLegalAI (published by Cognesio LLP), "EU AI Act, structured", safelegalai.com/regulation/eu-ai-act/article-82, accessed 2026-09-08, CC BY 4.0.