{ "dataset": "SafeLegalAI — EU AI Act, structured (obligations)", "license": "CC BY 4.0 for the coding; quoted text © European Union, reused under Commission Decision 2011/833/EU", "notice": "Provided as is, without warranty of any kind. Not legal advice; no lawyer–client relationship. SafeLegalAI (published by Cognesio LLP) records findings made by courts, regulators and vendors' own published pages; the linked official documents are the record. Third-party names and marks identify their owners' products or bodies and imply no affiliation or endorsement. Terms: https://safelegalai.com/disclaimer Only the Official Journal text is authentic; the coding is SafeLegalAI's reading of the text for comparison, not an interpretation you may rely on.", "url": "https://safelegalai.com/regulation/eu-ai-act", "text": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng", "repository": "https://github.com/SafeLegalAI/eu-ai-act-structured", "huggingface": "https://huggingface.co/datasets/safelegalaidata/eu-ai-act-structured", "generated": "2026-09-08T07:52:43.619Z", "version": "0.3.0", "count": 677, "obligations": [ { "obligation_id": "art-1-1-purpose", "article": 1, "paragraph": 1, "point": null, "actor": [ "other" ], "obligation_type": "scope-or-definition", "risk_tier": "not-tier-specific", "summary": "The Regulation states its purpose as improving the internal market, promoting human-centric trustworthy AI, and protecting health, safety, fundamental rights, democracy, rule of law and the environment.", "quote": "\"The purpose of this Regulation is to improve the functioning of the internal market and promote the uptake of human-centric and trustworthy artificial intelligence (AI), while ensuring a high level of protection of health, safety, fundamental rights enshrined in the Charter, including democracy, the rule of law and environmental protection, against the harmful effects of AI systems in the Union and supporting\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Frames how AI obligations apply to legal technology, court systems and public-sector uses of AI.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_1", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-1#art-1-1-purpose" }, { "obligation_id": "art-1-2-rules", "article": 1, "paragraph": 2, "point": null, "actor": [ "operator-any", "member-state", "commission" ], "obligation_type": "scope-or-definition", "risk_tier": "not-tier-specific", "summary": "The Regulation lays down harmonised rules on AI systems, prohibitions, high-risk requirements, transparency, GPAI, governance, enforcement and innovation support.", "quote": "\"This Regulation lays down:\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Identifies the regulatory categories that can reach legal-AI vendors, deployers and courts.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_1", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-1#art-1-2-rules" }, { "obligation_id": "art-2-1-scope-actors", "article": 2, "paragraph": 1, "point": null, "actor": [ "provider", "deployer", "importer", "distributor", "product-manufacturer", "authorised-representative", "natural-person" ], "obligation_type": "scope-or-definition", "risk_tier": "not-tier-specific", "summary": "The Regulation applies to providers, deployers, importers, distributors, product manufacturers, authorised representatives and affected persons linked to Union-market AI systems or AI outputs used in the Union.", "quote": "\"This Regulation applies to:\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "EU law firms, courts, in-house legal teams, and non-EU legal-AI vendors can fall in scope where establishment, use, or output is in the Union.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-1-scope-actors" }, { "obligation_id": "art-2-2-product-scope", "article": 2, "paragraph": 2, "point": null, "actor": [ "provider", "product-manufacturer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "For Article 6(1) high-risk AI systems related to Section B Annex I products, only the specified AI Act provisions apply, with Articles 57 to 59 applying only where integrated into that harmonisation law.", "quote": "\"For AI systems classified as high-risk AI systems in accordance with Article 6(1) related to products covered by the Union harmonisation legislation listed in Section B of Annex I, only Article 6(1), Article 60a and Articles 102 to 112 shall apply. Articles 57, 58 and 59 shall apply only in so far as the requirements for high-risk AI systems under\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Mostly concerns product-regulated AI rather than ordinary law-firm software, though some legal-sector AI could be embedded in regulated products.", "cross_references": [ "Art. 6(1)", "Annex I Section B", "Art. 57", "Art. 58", "Art. 59", "Art. 60a", "Art. 102-112" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-2-product-scope" }, { "obligation_id": "art-2-3-national-security-exclusion", "article": 2, "paragraph": 3, "point": null, "actor": [ "member-state", "other" ], "obligation_type": "derogation-or-exemption", "risk_tier": "not-tier-specific", "summary": "The Regulation excludes areas outside Union law and does not affect Member State national-security competences, regardless of the entity entrusted with those tasks.", "quote": "\"This Regulation does not apply to areas outside the scope of Union law, and shall not, in any event, affect the competences of the Member States concerning national security, regardless of the type of entity entrusted by the Member States with carrying out tasks in relation to those competences.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "May matter in national-security or defence-adjacent public-sector legal contexts, but not ordinary legal practice AI use.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-3-national-security-exclusion" }, { "obligation_id": "art-2-4-third-country-cooperation", "article": 2, "paragraph": 4, "point": null, "actor": [ "public-authority-deployer", "other" ], "obligation_type": "derogation-or-exemption", "risk_tier": "not-tier-specific", "summary": "Third-country public authorities and international organisations are outside scope when using AI under law-enforcement or judicial-cooperation agreements with adequate fundamental-rights safeguards.", "quote": "\"This Regulation applies neither to public authorities in a third country nor to international organisations falling within the scope of this Regulation pursuant to paragraph 1, where those authorities or organisations use AI systems in the framework of international cooperation or agreements for law enforcement and judicial cooperation with the Union or with one or more Member States, provided that\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to cross-border judicial cooperation where non-EU authorities use AI under agreements with EU or Member State bodies.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-4-third-country-cooperation" }, { "obligation_id": "art-2-5-intermediary-liability", "article": 2, "paragraph": 5, "point": null, "actor": [ "provider", "other" ], "obligation_type": "scope-or-definition", "risk_tier": "not-tier-specific", "summary": "The Regulation does not affect the Digital Services Act intermediary-liability provisions for providers of intermediary services.", "quote": "\"This Regulation shall not affect the application of the provisions on the liability of providers of intermediary services as set out in Chapter II of Regulation (EU) 2022/2065.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Relevant mainly to legal advice about overlapping platform regimes rather than to day-to-day legal AI deployment.", "cross_references": [ "Regulation (EU) 2022/2065" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-5-intermediary-liability" }, { "obligation_id": "art-2-6-research-development", "article": 2, "paragraph": 6, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "not-tier-specific", "summary": "AI systems or AI models, including their output, that are specifically developed and put into service solely for scientific research and development are excluded.", "quote": "\"This Regulation does not apply to AI systems or AI models, including their output, specifically developed and put into service for the sole purpose of scientific research and development.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI research prototypes may fall outside the Regulation only where the sole purpose is scientific research and development.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-6-research-development" }, { "obligation_id": "art-2-7-data-protection", "article": 2, "paragraph": 7, "point": null, "actor": [ "operator-any", "union-institution" ], "obligation_type": "scope-or-definition", "risk_tier": "not-tier-specific", "summary": "Union personal-data, privacy and communications-confidentiality law continues to apply to personal data processed in connection with AI Act rights and obligations, subject to Articles 4a and 59.", "quote": "\"Union law on the protection of personal data, privacy and the confidentiality of communications applies to personal data processed in connection with the rights and obligations laid down in this Regulation. Without prejudice to Articles 4a and 59 of this Regulation, this Regulation shall not affect Regulation (EU) 2016/679 or (EU) 2018/1725, or Directive 2002/58/EC or (EU) 2016/680.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal AI often processes client, case, employee or court-user personal data, so GDPR and law-enforcement data rules remain independently relevant.", "cross_references": [ "Art. 4a", "Art. 59", "Regulation (EU) 2016/679", "Regulation (EU) 2018/1725", "Directive 2002/58/EC", "Directive (EU) 2016/680" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-7-data-protection" }, { "obligation_id": "art-2-8-pre-market-testing", "article": 2, "paragraph": 8, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "not-tier-specific", "summary": "Pre-market research, testing and development activities for AI systems or models are excluded, but those activities must follow applicable Union law and real-world testing is not covered by the exclusion.", "quote": "\"This Regulation does not apply to any research, testing or development activity regarding AI systems or AI models prior to their being placed on the market or put into service. Such activities shall be conducted in accordance with applicable Union law. Testing in real world conditions shall not be covered by that exclusion.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI vendors can prototype before market release, but real-world pilots with clients or courts are not covered by this exclusion.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-8-pre-market-testing" }, { "obligation_id": "art-2-9-consumer-product-safety", "article": 2, "paragraph": 9, "point": null, "actor": [ "operator-any" ], "obligation_type": "scope-or-definition", "risk_tier": "not-tier-specific", "summary": "The Regulation is without prejudice to other Union legal acts related to consumer protection and product safety.", "quote": "\"This Regulation is without prejudice to the rules laid down by other Union legal acts related to consumer protection and product safety.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Relevant mainly to legal advice about overlapping regimes rather than to day-to-day legal AI deployment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-9-consumer-product-safety" }, { "obligation_id": "art-2-10-personal-use", "article": 2, "paragraph": 10, "point": null, "actor": [ "natural-person", "deployer" ], "obligation_type": "derogation-or-exemption", "risk_tier": "not-tier-specific", "summary": "Deployer obligations do not apply to natural persons using AI systems in the course of a purely personal, non-professional activity.", "quote": "\"This Regulation does not apply to obligations of deployers who are natural persons using AI systems in the course of a purely personal non-professional activity.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "The exclusion does not cover professional use by lawyers, legal staff, in-house teams or court personnel.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-10-personal-use" }, { "obligation_id": "art-2-11-worker-protection", "article": 2, "paragraph": 11, "point": null, "actor": [ "member-state" ], "obligation_type": "scope-or-definition", "risk_tier": "not-tier-specific", "summary": "The Union and Member States may maintain or introduce worker-protective rules on employers’ use of AI and may encourage or allow more favourable collective agreements.", "quote": "\"This Regulation does not preclude the Union or Member States from maintaining or introducing laws, regulations or administrative provisions which are more favourable to workers in terms of protecting their rights in respect of the use of AI systems by employers, or from encouraging or allowing the application of collective agreements which are more favourable to workers.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Law firms, legal departments and courts using workplace AI may also face employment-law rules more protective than the AI Act baseline.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-11-worker-protection" }, { "obligation_id": "art-2-12-open-source", "article": 2, "paragraph": 12, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "not-tier-specific", "summary": "AI systems released under free and open-source licences are excluded unless they are placed on the market or put into service as high-risk systems or systems falling under Article 5 or 50.", "quote": "\"This Regulation does not apply to AI systems released under free and open-source licences, unless they are placed on the market or put into service as high-risk AI systems or as an AI system that falls under Article 5 or 50.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Open-source legal-AI tools can still be in scope if placed on the market or used as high-risk, prohibited-practice or transparency-risk systems.", "cross_references": [ "Art. 5", "Art. 50" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-12-open-source" }, { "obligation_id": "art-2-13-annex-i-limited-application", "article": 2, "paragraph": 13, "point": null, "actor": [ "provider", "product-manufacturer" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "For Article 6(1) high-risk systems, specific requirements or obligations in Articles 9 to 15 and 17 to 25 may be limited where Annex I Section A law gives equivalent or higher protection without reducing the overall AI Act level.", "quote": "\"For high-risk AI systems referred to in Article 6(1), the application of specific requirements or obligations laid down in Articles 9 to 15 and 17 to 25 may be limited, where and to the extent that:\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Mainly affects product-regulated AI supply chains rather than ordinary legal AI, but it can affect providers of AI embedded in regulated products.", "cross_references": [ "Art. 6(1)", "Annex I Section A", "Art. 9-15", "Art. 17-25" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_2", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-2#art-2-13-annex-i-limited-application" }, { "obligation_id": "art-4-1-ai-literacy-support", "article": 4, "paragraph": 1, "point": null, "actor": [ "provider", "deployer" ], "obligation_type": "requirement", "risk_tier": "all-ai-systems", "summary": "Providers and deployers must take measures to support development of AI literacy for staff and others operating or using AI systems on their behalf, taking role, context and affected persons into account.", "quote": "\"Providers and deployers of AI systems shall take measures to support the development of AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf, taking into account their technical knowledge, experience, education and training and the context the AI systems are to be used in, and considering the persons or\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Direct for every law firm, legal team, court or legal-AI vendor whose staff operate or use AI systems.", "cross_references": [ "Art. 3(56)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4#art-4-1-ai-literacy-support" }, { "obligation_id": "art-4-1-no-specific-literacy-guarantee", "article": 4, "paragraph": 1, "point": "limitation", "actor": [ "provider", "deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "all-ai-systems", "summary": "Article 4 does not require providers or deployers to guarantee any specific level of AI literacy for any individual.", "quote": "\"This obligation does not require providers or deployers to guarantee any specific level of AI literacy of any individual.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Clarifies the softened AI-literacy duty for legal employers and vendors: the obligation is to take supporting measures, not to guarantee individual attainment.", "cross_references": [ "Art. 3(56)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4#art-4-1-no-specific-literacy-guarantee" }, { "obligation_id": "art-4-2-commission-member-state-support", "article": 4, "paragraph": 2, "point": null, "actor": [ "commission", "member-state" ], "obligation_type": "support-measure", "risk_tier": "all-ai-systems", "summary": "The Commission and Member States must support and facilitate provider and deployer efforts on AI literacy, and the Commission must publish practical compliance examples on the Article 62 platform.", "quote": "\"The Commission and the Member States shall support and facilitate the efforts of providers and deployers of AI systems, in particular SMEs, in fulfilling their obligation under paragraph 1 of this Article. For that purpose, the Commission shall publish practical examples of how to comply with that obligation on the single information platform referred to in Article 62(3), point (b).\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "The support and examples will shape how legal practices and legal-AI vendors evidence AI-literacy measures.", "cross_references": [ "Art. 4(1)", "Art. 62(3)(b)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4#art-4-2-commission-member-state-support" }, { "obligation_id": "art-4-3-board-ai-literacy-recommendations", "article": 4, "paragraph": 3, "point": null, "actor": [ "ai-board" ], "obligation_type": "support-measure", "risk_tier": "all-ai-systems", "summary": "The Board must adopt recommendations, taking European competence frameworks into account, to support AI-literacy promotion and set common objectives.", "quote": "\"The Board shall adopt recommendations, taking into account European competence frameworks, to support the Commission and Member States in the promotion of AI literacy required under paragraph 1, including by setting out common objectives.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Board recommendations can inform AI-literacy programmes for legal deployers and legal-AI providers, but they are institutional guidance.", "cross_references": [ "Art. 4(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4#art-4-3-board-ai-literacy-recommendations" }, { "obligation_id": "art-4a-1-high-risk-special-category-processing", "article": "4a", "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "High-risk AI providers may exceptionally process special categories of personal data only to the extent strictly necessary for bias detection and correction and subject to safeguards and the listed conditions.", "quote": "\"To the extent strictly necessary to ensure bias detection and correction in relation to high-risk AI systems in accordance with Article 10(2), points (f) and (g), of this Regulation, providers of such systems may exceptionally process special categories of personal data, subject to appropriate safeguards for the fundamental rights and freedoms of natural persons. In addition to the provisions set\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors providing high-risk judicial or public-sector systems may rely on this narrow processing permission for bias work.", "cross_references": [ "Art. 10(2)(f)", "Art. 10(2)(g)", "Regulation (EU) 2016/679", "Regulation (EU) 2018/1725", "Directive (EU) 2016/680" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-1-high-risk-special-category-processing" }, { "obligation_id": "art-4a-1-a-no-effective-alternative-data", "article": "4a", "paragraph": 1, "point": "a", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Special-category processing for high-risk bias detection and correction is conditioned on the objective not being effectively fulfilled by other data, including synthetic or anonymised data.", "quote": "\"the bias detection and correction cannot be effectively fulfilled by processing other data, including synthetic or anonymised data;\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Important for legal-AI providers handling sensitive client, litigant, employee or court-user data during bias testing.", "cross_references": [ "Art. 10(2)(f)", "Art. 10(2)(g)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-1-a-no-effective-alternative-data" }, { "obligation_id": "art-4a-1-b-reuse-security-privacy-limits", "article": "4a", "paragraph": 1, "point": "b", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Special-category data must be subject to technical limits on reuse and state-of-the-art security and privacy-preserving measures, including pseudonymisation.", "quote": "\"the special categories of personal data are subject to technical limitations on the re-use of personal data, and state-of-the-art security and privacy-preserving measures, including pseudonymisation;\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI providers processing sensitive attributes for bias work must account for reuse limits, security and privacy-preserving techniques.", "cross_references": [ "Art. 10(2)(f)", "Art. 10(2)(g)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-1-b-reuse-security-privacy-limits" }, { "obligation_id": "art-4a-1-c-access-controls-confidentiality", "article": "4a", "paragraph": 1, "point": "c", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Special-category data must be secured with suitable safeguards, strict access controls and access documentation so only authorised persons with confidentiality obligations can access it.", "quote": "\"the special categories of personal data are subject to measures to ensure that the personal data processed are secured and protected, subject to suitable safeguards, including strict controls and documentation of the access, to avoid misuse and to ensure that only authorised persons have access to those personal data with appropriate confidentiality obligations;\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Highly relevant where legal-AI providers use sensitive case, client, staff or litigant data to detect or correct bias.", "cross_references": [ "Art. 10(2)(f)", "Art. 10(2)(g)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-1-c-access-controls-confidentiality" }, { "obligation_id": "art-4a-1-d-no-third-party-transfer", "article": "4a", "paragraph": 1, "point": "d", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Special-category personal data processed under Article 4a(1) must not be transmitted, transferred or otherwise accessed by other parties.", "quote": "\"the special categories of personal data are not transmitted, transferred or otherwise accessed by other parties;\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Important for legal-AI vendors because sensitive legal datasets may not be shared onward under this bias-processing route.", "cross_references": [ "Art. 10(2)(f)", "Art. 10(2)(g)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-1-d-no-third-party-transfer" }, { "obligation_id": "art-4a-1-e-delete-after-correction-or-retention", "article": "4a", "paragraph": 1, "point": "e", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Special-category personal data must be deleted once the bias is corrected or the data reaches the end of its retention period, whichever occurs first.", "quote": "\"the special categories of personal data are deleted once the bias has been corrected or the personal data has reached the end of its retention period, whichever comes first; and\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Relevant to legal-AI vendors’ retention of sensitive bias-testing data derived from clients, workers, litigants or public users.", "cross_references": [ "Art. 10(2)(f)", "Art. 10(2)(g)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-1-e-delete-after-correction-or-retention" }, { "obligation_id": "art-4a-1-f-processing-record-reasons", "article": "4a", "paragraph": 1, "point": "f", "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Records of processing activities must state why special-category processing was strictly necessary for bias detection and correction and why other data could not achieve the objective.", "quote": "\"the records of processing activities pursuant to Regulations (EU) 2016/679 and (EU) 2018/1725 and Directive (EU) 2016/680 include the reasons why the processing of special categories of personal data was strictly necessary to detect and correct biases, and why that objective could not be achieved by processing other data.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI providers need records explaining the necessity of sensitive-data processing when relying on Article 4a for bias work.", "cross_references": [ "Regulation (EU) 2016/679", "Regulation (EU) 2018/1725", "Directive (EU) 2016/680" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-1-f-processing-record-reasons" }, { "obligation_id": "art-4a-2-other-systems-processing-scope", "article": "4a", "paragraph": 2, "point": null, "actor": [ "provider", "deployer", "gpai-provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "all-ai-systems", "summary": "Providers and deployers of other AI systems and models, and deployers of high-risk AI systems, may exceptionally process special categories of personal data only within the Article 4a(2) limits.", "quote": "\"Providers and deployers of other AI systems and models and deployers of high-risk AI systems may exceptionally process special categories of personal data to the extent that:\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This can reach law firms, courts and legal-AI vendors that process sensitive data to detect or correct bias in non-high-risk or model contexts.", "cross_references": [ "Art. 4a(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-2-other-systems-processing-scope" }, { "obligation_id": "art-4a-2-a-strict-necessity-other-systems", "article": "4a", "paragraph": 2, "point": "a", "actor": [ "provider", "deployer", "gpai-provider" ], "obligation_type": "data-governance", "risk_tier": "all-ai-systems", "summary": "For other AI systems and models and high-risk deployers, special-category processing must be strictly necessary for bias detection and correction involving likely health, safety, fundamental-rights or discrimination impacts.", "quote": "\"such processing is strictly necessary to ensure bias detection and correction in view of possible biases that are likely to affect the health and safety of persons, have a negative impact on fundamental rights or lead to discrimination prohibited pursuant to Union law, especially where data outputs influence inputs for future operations; and\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Relevant to legal practices and vendors testing AI outputs that may feed future operations and create discrimination or rights risks.", "cross_references": [ "Art. 4a(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-2-a-strict-necessity-other-systems" }, { "obligation_id": "art-4a-2-b-apply-paragraph-one-safeguards", "article": "4a", "paragraph": 2, "point": "b", "actor": [ "provider", "deployer", "gpai-provider" ], "obligation_type": "data-governance", "risk_tier": "all-ai-systems", "summary": "The exceptional processing route for other AI systems and models, and for deployers of high-risk systems, requires all Article 4a(1) conditions and safeguards to be applied.", "quote": "\"all of the conditions and safeguards set out in paragraph 1 are applied.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal deployers and vendors using sensitive data for bias work must import the paragraph 1 safeguards into this broader processing route.", "cross_references": [ "Art. 4a(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_4a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-4a#art-4a-2-b-apply-paragraph-one-safeguards" }, { "obligation_id": "art-5-1a-a-provider-scope-intimate-material", "article": 5, "paragraph": 1, "point": "1a(a)", "actor": [ "provider", "operator-any" ], "obligation_type": "scope-or-definition", "risk_tier": "prohibited-practice", "summary": "For the new intimate-material and child-sexual-abuse-material prohibitions, placing on the market or putting into service is prohibited only where generation or manipulation is intended or reasonably foreseeable and safeguards are inadequate.", "quote": "\"the placing on the market or putting into service of an AI system that generates or manipulates the material or performance referred to in paragraph 1, first subparagraph, point (ba) or (bb) is only prohibited where: (i) that generation or manipulation is the intended purpose of the AI system; or (ii) the system’s design, training, architecture, capabilities or user-facing functionalities\"", "applies_from": "2026-12-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Defines when legal-AI providers and vendors face the new Article 5(1)(ba) and (bb) market-placement prohibition.", "cross_references": [ "Art. 5(1)(ba)", "Art. 5(1)(bb)", "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1a-a-provider-scope-intimate-material" }, { "obligation_id": "art-5-1a-b-deployer-purpose-scope", "article": 5, "paragraph": 1, "point": "1a(b)", "actor": [ "deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "prohibited-practice", "summary": "For the new intimate-material and child-sexual-abuse-material prohibitions, use is prohibited only where the deployer uses the system for the purpose of generating or manipulating that material or performance.", "quote": "\"the use of an AI system that generates or manipulates the material or performance referred to in paragraph 1, first subparagraph, points (ba) and (bb) is only prohibited where the deployer uses the system for the purpose of generating or manipulating such material or performance.\"", "applies_from": "2026-12-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Defines when law firms, courts, investigators or other legal deployers fall within the new use prohibition.", "cross_references": [ "Art. 5(1)(ba)", "Art. 5(1)(bb)", "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1a-b-deployer-purpose-scope" }, { "obligation_id": "art-5-1b-non-increased-exposure-exclusion", "article": 5, "paragraph": 1, "point": "1b", "actor": [ "operator-any" ], "obligation_type": "scope-or-definition", "risk_tier": "prohibited-practice", "summary": "For Article 5(1)(ba), manipulation does not include changes that do not increase exposure of depicted intimate parts or alter the nature of depicted sexually explicit activities.", "quote": "\"For the purposes of paragraph 1, first subparagraph, point (ba), an AI system that manipulates material in a way that does not increase the exposure of any depicted intimate parts or alter the nature of any depicted sexually explicit activities shall not constitute manipulation.\"", "applies_from": "2026-12-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to evidence handling, redaction or forensic image work where changes do not increase exposure or alter the sexual nature of depicted activity.", "cross_references": [ "Art. 5(1)(ba)", "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1b-non-increased-exposure-exclusion" }, { "obligation_id": "art-5-1-a-subliminal-manipulation", "article": 5, "paragraph": 1, "point": "a", "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Providers, deployers and other operators are prohibited from placing on the market, putting into service or using AI systems deploying subliminal, manipulative or deceptive techniques that materially distort decisions and cause or are likely to cause significant harm.", "quote": "\"the placing on the market, the putting into service or the use of an AI system that deploys subliminal techniques beyond a person’s consciousness or purposefully manipulative or deceptive techniques, with the objective, or the effect of materially distorting the behaviour of a person or a group of persons by appreciably impairing their ability to make an informed decision, thereby\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Client-facing or internal legal AI must not manipulate users, witnesses, consumers or staff into harmful decisions.", "cross_references": [ "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-a-subliminal-manipulation" }, { "obligation_id": "art-5-1-b-vulnerability-exploitation", "article": 5, "paragraph": 1, "point": "b", "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Providers, deployers and other operators are prohibited from AI systems that exploit vulnerabilities linked to age, disability or social or economic situation and materially distort behaviour causing or likely causing significant harm.", "quote": "\"the placing on the market, the putting into service or the use of an AI system that exploits any of the vulnerabilities of a natural person or a specific group of persons due to their age, disability or a specific social or economic situation, with the objective, or the effect, of materially distorting the behaviour of that person or a\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Legal services, courts and vendors must avoid AI that exploits vulnerable clients, litigants, witnesses, employees or consumers.", "cross_references": [ "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-b-vulnerability-exploitation" }, { "obligation_id": "art-5-1-ba-non-consensual-intimate-material", "article": 5, "paragraph": 1, "point": "ba", "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Providers, deployers and other operators are prohibited from AI systems that generate or manipulate realistic intimate or sexually explicit material of identifiable natural persons without freely given, specific, informed, unambiguous and explicit consent.", "quote": "\"the placing on the market, the putting into service or the use of an AI system that generates or manipulates realistic images, videos, audio or similar material of an identifiable natural person’s intimate parts, or of an identifiable natural person engaged in sexually explicit activities, without that person’s freely-given, specific, informed, unambiguous and explicit consent for that generation or manipulation;\"", "applies_from": "2026-12-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Legal practices and vendors must avoid tools that create non-consensual intimate material, including in evidence, investigations, employment or client-facing contexts.", "cross_references": [ "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-ba-non-consensual-intimate-material" }, { "obligation_id": "art-5-1-bb-child-sexual-abuse-material", "article": 5, "paragraph": 1, "point": "bb", "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Providers, deployers and other operators are prohibited from AI systems that generate or manipulate child sexual abuse material or performances within Directive 2011/93/EU, except where a national-law without-right defence applies.", "quote": "\"the placing on the market, the putting into service or the use of an AI system that generates or manipulates material or performance within the meaning of Article 2, points (c) and (e), of Directive 2011/93/EU, except where a ‘without right’ defence applies under national law;\"", "applies_from": "2026-12-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "High relevance for legal, investigative and platform-advice contexts involving synthetic or manipulated child sexual abuse material.", "cross_references": [ "Art. 99(3)", "Directive 2011/93/EU" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-bb-child-sexual-abuse-material" }, { "obligation_id": "art-5-1-c-social-scoring", "article": 5, "paragraph": 1, "point": "c", "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Providers, deployers and other operators are prohibited from AI social-scoring systems that evaluate or classify people over time and lead to unrelated, unjustified or disproportionate detrimental treatment.", "quote": "\"the placing on the market, the putting into service or the use of AI systems for the evaluation or classification of natural persons or groups of persons over a certain period of time based on their social behaviour or known, inferred or predicted personal or personality characteristics, with the social score leading to either or both of the following: (i)\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Relevant to public bodies, courts or legal organisations considering reputation, risk or eligibility scoring of natural persons.", "cross_references": [ "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-c-social-scoring" }, { "obligation_id": "art-5-1-d-criminal-risk-profiling", "article": 5, "paragraph": 1, "point": "d", "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Providers, deployers and other operators are prohibited from AI systems making criminal-offence risk assessments based solely on profiling or personality traits, subject to the objective-facts support exception.", "quote": "\"the placing on the market, the putting into service for this specific purpose, or the use of an AI system for making risk assessments of natural persons in order to assess or predict the risk of a natural person committing a criminal offence, based solely on the profiling of a natural person or on assessing their personality traits and characteristics;\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Highly relevant to criminal-justice, court and law-enforcement legal contexts using risk assessment or decision-support tools.", "cross_references": [ "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-d-criminal-risk-profiling" }, { "obligation_id": "art-5-1-e-facial-scraping", "article": 5, "paragraph": 1, "point": "e", "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Providers, deployers and other operators are prohibited from AI systems that create or expand facial-recognition databases through untargeted scraping from the internet or CCTV footage.", "quote": "\"the placing on the market, the putting into service for this specific purpose, or the use of AI systems that create or expand facial recognition databases through the untargeted scraping of facial images from the internet or CCTV footage;\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant where legal teams, investigators or vendors might source biometric datasets for identification or evidence-related tools.", "cross_references": [ "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-e-facial-scraping" }, { "obligation_id": "art-5-1-f-workplace-emotion", "article": 5, "paragraph": 1, "point": "f", "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Providers, deployers and other operators are prohibited from AI systems to infer emotions in workplaces or educational institutions, except where the system is for medical or safety reasons.", "quote": "\"the placing on the market, the putting into service for this specific purpose, or the use of AI systems to infer emotions of a natural person in the areas of workplace and education institutions, except where the use of the AI system is intended to be put in place or into the market for medical or safety reasons;\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for law firms, courts and legal departments as employers considering emotion-recognition tools for staff or training settings.", "cross_references": [ "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-f-workplace-emotion" }, { "obligation_id": "art-5-1-g-sensitive-biometric-categorisation", "article": 5, "paragraph": 1, "point": "g", "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Providers, deployers and other operators are prohibited from biometric categorisation systems that infer sensitive traits such as race, political opinions, religion, sex life or sexual orientation.", "quote": "\"the placing on the market, the putting into service for this specific purpose, or the use of biometric categorisation systems that categorise individually natural persons based on their biometric data to deduce or infer their race, political opinions, trade union membership, religious or philosophical beliefs, sex life or sexual orientation; this prohibition does not cover any labelling or filtering of\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Relevant to legal AI, e-discovery or court/security tools that process biometric data about clients, staff, litigants or the public.", "cross_references": [ "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-g-sensitive-biometric-categorisation" }, { "obligation_id": "art-5-1-h-real-time-rbi-law-enforcement", "article": 5, "paragraph": 1, "point": "h", "actor": [ "public-authority-deployer" ], "obligation_type": "prohibition", "risk_tier": "prohibited-practice", "summary": "Law-enforcement use of real-time remote biometric identification in publicly accessible spaces is prohibited except where strictly necessary for the listed serious objectives.", "quote": "\"the use of ‘real-time’ remote biometric identification systems in publicly accessible spaces for the purposes of law enforcement, unless and in so far as such use is strictly necessary for one of the following objectives: (i) the targeted search for specific victims of abduction, trafficking in human beings or sexual exploitation of human beings, as well as the search for\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Relevant to courts and legal oversight because use requires strict necessity and judicial or independent authorisation safeguards.", "cross_references": [ "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-1-h-real-time-rbi-law-enforcement" }, { "obligation_id": "art-5-2-rbi-conditions", "article": 5, "paragraph": 2, "point": null, "actor": [ "public-authority-deployer" ], "obligation_type": "requirement", "risk_tier": "prohibited-practice", "summary": "Permitted law-enforcement use of real-time remote biometric identification must only confirm the specifically targeted individual and must account for the situation and rights-and-freedoms consequences.", "quote": "\"The use of ‘real-time’ remote biometric identification systems in publicly accessible spaces for the purposes of law enforcement for any of the objectives referred to in paragraph 1, first subparagraph, point (h), shall be deployed for the purposes set out in that point only to confirm the identity of the specifically targeted individual, and it shall take into account the\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Courts and public bodies may be involved because this use requires strict safeguards and can affect fundamental rights.", "cross_references": [ "Art. 5(1)(h)", "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-2-rbi-conditions" }, { "obligation_id": "art-5-3-rbi-authorisation", "article": 5, "paragraph": 3, "point": null, "actor": [ "public-authority-deployer", "other" ], "obligation_type": "requirement", "risk_tier": "prohibited-practice", "summary": "Each law-enforcement use of real-time remote biometric identification in publicly accessible spaces must receive prior judicial or independent administrative authorisation, with urgent-use limits and deletion if refused.", "quote": "\"For the purposes of paragraph 1, first subparagraph, point (h) and paragraph 2, each use for the purposes of law enforcement of a ‘real-time’ remote biometric identification system in publicly accessible spaces shall be subject to a prior authorisation granted by a judicial authority or an independent administrative authority whose decision is binding of the Member State in which the\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Directly relevant to judicial authorities or independent bodies that authorise biometric identification and to legal challenges to such use.", "cross_references": [ "Art. 5(1)(h)", "Art. 5(2)", "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-3-rbi-authorisation" }, { "obligation_id": "art-5-4-rbi-notification", "article": 5, "paragraph": 4, "point": null, "actor": [ "public-authority-deployer", "market-surveillance-authority", "national-competent-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "prohibited-practice", "summary": "Each law-enforcement use of real-time remote biometric identification must be notified to the relevant market surveillance authority and national data protection authority under national rules, without sensitive operational data.", "quote": "\"Without prejudice to paragraph 3, each use of a ‘real-time’ remote biometric identification system in publicly accessible spaces for law enforcement purposes shall be notified to the relevant market surveillance authority and the national data protection authority in accordance with the national rules referred to in paragraph 5. The notification shall, as a minimum, contain the information specified under paragraph\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to public-sector legal compliance and oversight of law-enforcement biometric deployments.", "cross_references": [ "Art. 5(5)", "Art. 5(6)", "Art. 99(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-4-rbi-notification" }, { "obligation_id": "art-5-5-member-state-rbi-rules", "article": 5, "paragraph": 5, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "prohibited-practice", "summary": "Member States may authorise real-time remote biometric identification for law enforcement only within Article 5 limits, must set detailed national rules, notify the Commission and may impose stricter laws.", "quote": "\"A Member State may decide to provide for the possibility to fully or partially authorise the use of ‘real-time’ remote biometric identification systems in publicly accessible spaces for the purposes of law enforcement within the limits and under the conditions listed in paragraph 1, first subparagraph, point (h), and paragraphs 2 and 3. Member States concerned shall lay down in\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to national courts and lawyers because Member State authorising laws shape when biometric evidence or policing tools may be lawful.", "cross_references": [ "Art. 5(1)(h)", "Art. 5(2)", "Art. 5(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-5-member-state-rbi-rules" }, { "obligation_id": "art-5-6-rbi-annual-authority-reports", "article": 5, "paragraph": 6, "point": null, "actor": [ "market-surveillance-authority", "national-competent-authority", "commission" ], "obligation_type": "monitoring", "risk_tier": "prohibited-practice", "summary": "Market surveillance and data protection authorities notified of law-enforcement real-time remote biometric identification use must submit annual reports to the Commission using its template.", "quote": "\"National market surveillance authorities and the national data protection authorities of Member States that have been notified of the use of ‘real-time’ remote biometric identification systems in publicly accessible spaces for law enforcement purposes pursuant to paragraph 4 shall submit to the Commission annual reports on such use. For that purpose, the Commission shall provide Member States and national market\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional reporting can inform litigation, policy and public-sector oversight, but it is not a direct law-firm deployer duty.", "cross_references": [ "Art. 5(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-6-rbi-annual-authority-reports" }, { "obligation_id": "art-5-7-commission-rbi-reports", "article": 5, "paragraph": 7, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "prohibited-practice", "summary": "The Commission must publish annual aggregated reports on real-time remote biometric identification in publicly accessible spaces for law-enforcement purposes, excluding sensitive operational data.", "quote": "\"The Commission shall publish annual reports on the use of real-time remote biometric identification systems in publicly accessible spaces for law enforcement purposes, based on aggregated data in Member States on the basis of the annual reports referred to in paragraph 6. Those annual reports shall not include sensitive operational data of the related law enforcement activities.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Public reporting may support legal analysis and accountability but does not directly regulate legal practices.", "cross_references": [ "Art. 5(6)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-7-commission-rbi-reports" }, { "obligation_id": "art-5-8-other-union-law-prohibitions", "article": 5, "paragraph": 8, "point": null, "actor": [ "operator-any" ], "obligation_type": "scope-or-definition", "risk_tier": "prohibited-practice", "summary": "Article 5 does not affect prohibitions that apply where an AI practice infringes other Union law.", "quote": "\"This Article shall not affect the prohibitions that apply where an AI practice infringes other Union law.\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(1)-(2) is without prejudice to Article 5 applying under Art. 113(a).", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal practices and vendors may face other Union-law prohibitions even where Article 5 is not the only applicable rule.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_5", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-5#art-5-8-other-union-law-prohibitions" }, { "obligation_id": "art-6-1-product-high-risk-classification", "article": 6, "paragraph": 1, "point": null, "actor": [ "provider", "product-manufacturer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "An AI system is high-risk under Article 6(1) when it is a safety component or product covered by Annex I harmonisation law and the product or AI product must undergo third-party conformity assessment.", "quote": "\"Irrespective of whether an AI system is placed on the market or put into service independently of the products referred to in points (a) and (b), that AI system shall be considered to be high-risk where both of the following conditions are fulfilled:\"", "applies_from": "2028-08-02", "applies_from_basis": "Art. 113(c)(ii) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) applies transitional treatment to high-risk systems already placed on the market or put into service.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Mostly relevant to legal advice for product-regulated AI rather than ordinary legal AI, but it may affect vendors embedding AI in regulated products.", "cross_references": [ "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2027-08-02", "applies_from_basis_as_enacted": "Art. 113(c)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-1-product-high-risk-classification" }, { "obligation_id": "art-6-1a-non-safety-aspects-not-safety-components", "article": 6, "paragraph": 1, "point": "1a", "actor": [ "provider", "product-manufacturer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "AI systems used solely for non-safety user assistance, performance optimisation, service efficiency, automation, convenience or quality control do not qualify as safety components for Article 6(1).", "quote": "\"For the purposes of this Regulation, including paragraph 1 of this Article, AI systems that are solely used for non-safety related aspects of user assistance, performance optimisation, service efficiency, automation or convenience or quality control shall not qualify as safety components.\"", "applies_from": "2028-08-02", "applies_from_basis": "Art. 113(c)(ii) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Helps distinguish product-regulated AI from non-safety legal or administrative assistance functions embedded in products.", "cross_references": [ "Art. 6(1)", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-1a-non-safety-aspects-not-safety-components" }, { "obligation_id": "art-6-1b-health-safety-failure-safety-component", "article": 6, "paragraph": 1, "point": "1b", "actor": [ "provider", "product-manufacturer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Notwithstanding the non-safety exclusion, AI systems whose failure or malfunctioning would endanger health and safety qualify as safety components.", "quote": "\"Notwithstanding paragraph 1a, AI systems the failure or malfunctioning of which would endanger health and safety shall qualify as safety components.\"", "applies_from": "2028-08-02", "applies_from_basis": "Art. 113(c)(ii) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Relevant mainly to product safety advice and regulated products, rather than ordinary legal AI deployment.", "cross_references": [ "Art. 6(1)", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-1b-health-safety-failure-safety-component" }, { "obligation_id": "art-6-1c-non-health-safety-conformity-exclusion", "article": 6, "paragraph": 1, "point": "1c", "actor": [ "provider", "product-manufacturer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "A product does not satisfy Article 6(1)(b) where third-party conformity assessment is required solely for risks other than health and safety, such as radio spectrum or electromagnetic interference risks that do not affect health and safety.", "quote": "\"A product that is required to undergo a third-party conformity assessment solely due to risks other than risks to health and safety, in particular risks relating to the distribution of radio spectrum or electromagnetic interference that do not affect health and safety, shall not be considered as fulfilling the condition in paragraph 1, point (b).\"", "applies_from": "2028-08-02", "applies_from_basis": "Art. 113(c)(ii) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Useful for legal advice on product-regulated AI boundaries and generally indirect for legal-practice AI.", "cross_references": [ "Art. 6(1)(b)", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-1c-non-health-safety-conformity-exclusion" }, { "obligation_id": "art-6-1-annex-i-product-legislation", "article": 6, "paragraph": 1, "point": "Annex I", "actor": [ "provider", "product-manufacturer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Annex I identifies the Union harmonisation legislation used for Article 6(1) product-related high-risk AI classification and related conformity-assessment timing.", "quote": "\"Section A. List of Union harmonisation legislation based on the New Legislative Framework\"", "applies_from": "2028-08-02", "applies_from_basis": "Art. 113(c)(ii) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) applies transitional treatment to high-risk systems already placed on the market or put into service.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Product-regulated AI is usually outside legal-practice software, but legal advisers and some legal-tech manufacturers may need the product boundary.", "cross_references": [ "Art. 6(1)", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2027-08-02", "applies_from_basis_as_enacted": "Art. 113(c)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-1-annex-i-product-legislation" }, { "obligation_id": "art-6-2-annex-iii-high-risk-classification", "article": 6, "paragraph": 2, "point": null, "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "AI systems referred to in Annex III are classified as high-risk in addition to Article 6(1) product-related high-risk systems.", "quote": "\"In addition to the high-risk AI systems referred to in paragraph 1, AI systems referred to in Annex III shall be considered to be high-risk.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Directly relevant to legal-AI providers and public-authority deployers where Annex III includes administration of justice and alternative dispute resolution.", "cross_references": [ "Annex III", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-2-annex-iii-high-risk-classification" }, { "obligation_id": "art-6-2-annex3-1-biometrics", "article": 6, "paragraph": 2, "point": "Annex III(1)", "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Annex III point 1 makes permitted biometric systems high-risk, including remote biometric identification, sensitive biometric categorisation and emotion recognition.", "quote": "\"Biometrics, in so far as their use is permitted under relevant Union or national law: remote biometric identification systems. AI systems intended to be used for biometric categorisation, according to sensitive or protected attributes or characteristics based on the inference of those attributes or characteristics; AI systems intended to be used for emotion recognition.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Relevant to courts, public authorities and legal teams using biometric identification, categorisation or emotion systems.", "cross_references": [ "Art. 6(2)", "Annex III point 1" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-2-annex3-1-biometrics" }, { "obligation_id": "art-6-2-annex3-2-critical-infrastructure", "article": 6, "paragraph": 2, "point": "Annex III(2)", "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Annex III point 2 makes AI safety components used in critical digital infrastructure, road traffic or water, gas, heating or electricity supply high-risk.", "quote": "\"Critical infrastructure: AI systems intended to be used as safety components in the management and operation of critical digital infrastructure, road traffic, or in the supply of water, gas, heating or electricity.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Usually indirect for legal practice, but relevant to counsel advising infrastructure operators or disputes over such systems.", "cross_references": [ "Art. 6(2)", "Annex III point 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-2-annex3-2-critical-infrastructure" }, { "obligation_id": "art-6-2-annex3-3-education-vocational-training", "article": 6, "paragraph": 2, "point": "Annex III(3)", "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Annex III point 3 makes specified education and vocational-training AI high-risk, including admissions, learning evaluation, education-level assessment and test-proctoring behaviour monitoring.", "quote": "\"Education and vocational training: AI systems intended to be used to determine access or admission or to assign natural persons to educational and vocational training institutions at all levels; AI systems intended to be used to evaluate learning outcomes, including when those outcomes are used to steer the learning process of natural persons in educational and vocational training institutions at\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal education, training providers and employment advice, but less direct than judicial AI.", "cross_references": [ "Art. 6(2)", "Annex III point 3" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-2-annex3-3-education-vocational-training" }, { "obligation_id": "art-6-2-annex3-4-employment-worker-management", "article": 6, "paragraph": 2, "point": "Annex III(4)", "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Annex III point 4 makes specified employment, worker-management and self-employment access AI high-risk, including recruitment, promotion, termination, task allocation and worker monitoring.", "quote": "\"Employment, workers’ management and access to self-employment: AI systems intended to be used for the recruitment or selection of natural persons, in particular to place targeted job advertisements, to analyse and filter job applications, and to evaluate candidates; AI systems intended to be used to make decisions affecting terms of work-related relationships, the promotion or termination of work-related\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Direct for law firms, legal departments and courts as employers using AI in recruitment or worker management.", "cross_references": [ "Art. 6(2)", "Annex III point 4" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-2-annex3-4-employment-worker-management" }, { "obligation_id": "art-6-2-annex3-5-essential-services-benefits", "article": 6, "paragraph": 2, "point": "Annex III(5)", "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Annex III point 5 makes specified AI for essential public benefits, creditworthiness, life and health insurance, emergency dispatch and emergency healthcare triage high-risk.", "quote": "\"Access to and enjoyment of essential private services and essential public services and benefits: AI systems intended to be used by public authorities or on behalf of public authorities to evaluate the eligibility of natural persons for essential public assistance benefits and services, including healthcare services, as well as to grant, reduce, revoke, or reclaim such benefits and services; AI\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to public-law, benefits, insurance and financial legal work, and to legal-AI vendors serving those sectors.", "cross_references": [ "Art. 6(2)", "Annex III point 5" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-2-annex3-5-essential-services-benefits" }, { "obligation_id": "art-6-2-annex3-6-law-enforcement", "article": 6, "paragraph": 2, "point": "Annex III(6)", "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Annex III point 6 makes specified permitted law-enforcement AI high-risk, including victim-risk assessment, polygraphs, evidence reliability, offending risk and profiling for criminal investigations.", "quote": "\"Law enforcement, in so far as their use is permitted under relevant Union or national law: AI systems intended to be used by or on behalf of law enforcement authorities, or by Union institutions, bodies, offices or agencies in support of law enforcement authorities or on their behalf to assess the risk of a natural person becoming the victim of\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Highly relevant to criminal justice, evidence, law-enforcement oversight and court-adjacent legal AI.", "cross_references": [ "Art. 6(2)", "Annex III point 6" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-2-annex3-6-law-enforcement" }, { "obligation_id": "art-6-2-annex3-7-migration-asylum-border-control", "article": 6, "paragraph": 2, "point": "Annex III(7)", "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Annex III point 7 makes specified migration, asylum and border-control AI high-risk, including polygraphs, risk assessment, application examination and detection or identification of persons.", "quote": "\"Migration, asylum and border control management, in so far as their use is permitted under relevant Union or national law: AI systems intended to be used by or on behalf of competent public authorities or by Union institutions, bodies, offices or agencies as polygraphs or similar tools; AI systems intended to be used by or on behalf of competent public\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to immigration, asylum and public-law legal practice and vendors supporting those authorities.", "cross_references": [ "Art. 6(2)", "Annex III point 7" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-2-annex3-7-migration-asylum-border-control" }, { "obligation_id": "art-6-2-annex3-8-justice-democratic-processes", "article": 6, "paragraph": 2, "point": "Annex III(8)", "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Annex III point 8 makes AI for administration of justice and democratic processes high-risk, including AI assisting judicial authorities or alternative dispute resolution with facts and law.", "quote": "\"Administration of justice and democratic processes: AI systems intended to be used by a judicial authority or on their behalf to assist a judicial authority in researching and interpreting facts and the law and in applying the law to a concrete set of facts, or to be used in a similar way in alternative dispute resolution; AI systems intended to\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Directly reaches legal-AI vendors and court or ADR deployers using AI to research facts or law or apply law to facts.", "cross_references": [ "Art. 6(2)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-2-annex3-8-justice-democratic-processes" }, { "obligation_id": "art-6-3-annex-iii-derogation", "article": 6, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "An Annex III AI system is not high-risk if it does not pose a significant risk of harm to health, safety or fundamental rights, including by not materially influencing decision-making outcomes.", "quote": "\"By derogation from paragraph 2, an AI system referred to in Annex III shall not be considered to be high-risk where it does not pose a significant risk of harm to the health, safety or fundamental rights of natural persons, including by not materially influencing the outcome of decision making.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors may rely on this only where an Annex III legal or judicial system does not significantly affect outcomes or rights.", "cross_references": [ "Art. 6(2)", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-3-annex-iii-derogation" }, { "obligation_id": "art-6-4-provider-assessment-documentation", "article": 6, "paragraph": 4, "point": "assessment", "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "A provider that treats an Annex III AI system as not high-risk must document that assessment before placing the system on the market or putting it into service.", "quote": "\"A provider who considers that an AI system referred to in Annex III is not high-risk shall document its assessment before that system is placed on the market or put into service. Such provider shall be subject to the registration obligation set out in Article 49(2). Upon request of national competent authorities, the provider shall provide the documentation of the\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors asserting that an Annex III judicial or ADR system is not high-risk need documented assessment before market placement or service.", "cross_references": [ "Art. 6(3)", "Art. 49(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-4-provider-assessment-documentation" }, { "obligation_id": "art-6-4-provider-assessment-on-request", "article": 6, "paragraph": 4, "point": "authority-request", "actor": [ "provider", "national-competent-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "On request, the provider must give national competent authorities the documentation supporting its assessment that an Annex III AI system is not high-risk.", "quote": "\"Upon request of national competent authorities, the provider shall provide the documentation of the assessment.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI providers may need to provide non-high-risk assessment documentation to regulators for judicial, ADR or employment systems.", "cross_references": [ "Art. 6(3)", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-4-provider-assessment-on-request" }, { "obligation_id": "art-6-4-provider-registration", "article": 6, "paragraph": 4, "point": "registration", "actor": [ "provider" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "A provider that considers an Annex III AI system not high-risk remains subject to the Article 49(2) registration obligation.", "quote": "\"Such provider shall be subject to the registration obligation set out in Article 49(2).\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Important for legal-AI vendors whose systems fall within Annex III but are assessed as not high-risk.", "cross_references": [ "Art. 49(2)", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-4-provider-registration" }, { "obligation_id": "art-6-5-commission-guidelines", "article": 6, "paragraph": 5, "point": null, "actor": [ "commission", "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "After consulting the Board, the Commission must issue Article 6 implementation guidelines and practical examples of high-risk and non-high-risk AI use cases by 2 February 2026.", "quote": "\"The Commission shall, after consulting the European Artificial Intelligence Board (the ‘Board’), and no later than 2 February 2026, provide guidelines specifying the practical implementation of this Article in line with Article 96 together with a comprehensive list of practical examples of use cases of AI systems that are high-risk and not high-risk.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Guidelines can clarify whether legal, judicial, ADR, employment or public-sector legal AI is high-risk.", "cross_references": [ "Art. 96" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-5-commission-guidelines" }, { "obligation_id": "art-6-6-delegated-add-derogation-conditions", "article": 6, "paragraph": 6, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "high-risk", "summary": "The Commission may adopt delegated acts to add or modify Article 6(3) derogation conditions where reliable evidence shows Annex III systems do not pose significant health, safety or fundamental-rights risks.", "quote": "\"The Commission is empowered to adopt delegated acts in accordance with Article 97 in order to amend paragraph 3, second subparagraph, of this Article by adding new conditions to those laid down therein, or by modifying them, where there is concrete and reliable evidence of the existence of AI systems that fall under the scope of Annex III, but do\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Could change the boundary for legal-AI systems listed in Annex III, including administration of justice and ADR tools.", "cross_references": [ "Art. 6(3)", "Art. 7(1)", "Art. 97", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-6-delegated-add-derogation-conditions" }, { "obligation_id": "art-6-7-delegated-delete-derogation-conditions", "article": 6, "paragraph": 7, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "high-risk", "summary": "The Commission must adopt delegated acts deleting Article 6(3) conditions where reliable evidence shows deletion is necessary to maintain protection of health, safety and fundamental rights.", "quote": "\"The Commission shall adopt delegated acts in accordance with Article 97 in order to amend paragraph 3, second subparagraph, of this Article by deleting any of the conditions laid down therein, where there is concrete and reliable evidence that this is necessary to maintain the level of protection of health, safety and fundamental rights provided for by this Regulation.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Could narrow non-high-risk arguments for legal-AI systems in Annex III if protection of fundamental rights requires it.", "cross_references": [ "Art. 6(3)", "Art. 97", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-7-delegated-delete-derogation-conditions" }, { "obligation_id": "art-6-8-amendment-safeguards", "article": 6, "paragraph": 8, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "high-risk", "summary": "Any amendment to Article 6(3) derogation conditions must not decrease overall protection and must stay consistent with Article 7(1) delegated acts and market and technological developments.", "quote": "\"Any amendment to the conditions laid down in paragraph 3, second subparagraph, adopted in accordance with paragraphs 6 and 7 of this Article shall not decrease the overall level of protection of health, safety and fundamental rights provided for by this Regulation and shall ensure consistency with the delegated acts adopted pursuant to Article 7(1), and take account of market\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Protects against weakening the high-risk boundary for legal-AI systems that can affect courts, ADR, employment or public services.", "cross_references": [ "Art. 6(3)", "Art. 7(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_6", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-6#art-6-8-amendment-safeguards" }, { "obligation_id": "art-7-1-annex-iii-add-modify", "article": 7, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "high-risk", "summary": "The Commission may add or modify Annex III high-risk use cases by delegated act when the systems are in Annex III areas and pose equivalent or greater health, safety or fundamental-rights risks.", "quote": "\"The Commission is empowered to adopt delegated acts in accordance with Article 97 to amend Annex III by adding or modifying use-cases of high-risk AI systems where both of the following conditions are fulfilled:\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Can expand or alter high-risk treatment of legal, judicial, employment or public-service AI use cases.", "cross_references": [ "Annex III", "Art. 97" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_7", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-7#art-7-1-annex-iii-add-modify" }, { "obligation_id": "art-7-2-annex-iii-assessment-criteria", "article": 7, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "high-risk", "summary": "When assessing whether to amend Annex III, the Commission must consider criteria including purpose, use, data, autonomy, harm, dependence, power imbalance, reversibility, benefits and existing Union-law safeguards.", "quote": "\"When assessing the condition under paragraph 1, point (b), the Commission shall take into account the following criteria:\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Criteria such as power imbalance, dependence and redress are significant for justice, ADR, employment and public-authority legal AI.", "cross_references": [ "Annex III", "Art. 7(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_7", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-7#art-7-2-annex-iii-assessment-criteria" }, { "obligation_id": "art-7-3-annex-iii-remove", "article": 7, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "high-risk", "summary": "The Commission may remove high-risk AI systems from Annex III only where they no longer pose significant risks and deletion does not decrease overall protection of health, safety and fundamental rights.", "quote": "\"The Commission is empowered to adopt delegated acts in accordance with Article 97 to amend the list in Annex III by removing high-risk AI systems where both of the following conditions are fulfilled:\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Removal could affect legal-AI use cases only if protection is not reduced, including for administration of justice and ADR systems.", "cross_references": [ "Annex III", "Art. 97" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_7", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-7#art-7-3-annex-iii-remove" }, { "obligation_id": "art-8-1-section-2-compliance", "article": 8, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "High-risk AI systems must comply with Chapter III Section 2 requirements, taking account of intended purpose, state of the art and the Article 9 risk management system.", "quote": "\"High-risk AI systems shall comply with the requirements laid down in this Section, taking into account their intended purpose as well as the generally acknowledged state of the art on AI and AI-related technologies. The risk management system referred to in Article 9 shall be taken into account when ensuring compliance with those requirements.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 9", "Chapter III Section 2", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_8", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-8#art-8-1-section-2-compliance" }, { "obligation_id": "art-8-2-product-provider-responsibility", "article": 8, "paragraph": 2, "point": null, "actor": [ "provider", "product-manufacturer" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Where a product contains a high-risk AI system subject to this Regulation and Annex I Section A harmonisation law, providers are responsible for full compliance with applicable product requirements.", "quote": "\"Where a product contains an AI system, to which the requirements of this Regulation as well as requirements of the Union harmonisation legislation listed in Section A of Annex I apply, providers shall be responsible for ensuring that their product is fully compliant with all applicable requirements under applicable Union harmonisation legislation. In ensuring the compliance of high-risk AI systems referred to in\"", "applies_from": "2028-08-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(ii): Art. 6(1)/Annex I high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant for vendors placing legal-sector AI into regulated products; ordinary legal software is usually outside this product-law pathway.", "cross_references": [ "Annex I Section A", "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_8", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-8#art-8-2-product-provider-responsibility" }, { "obligation_id": "art-9-1-risk-management-system", "article": 9, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Providers must establish, implement, document and maintain a risk management system for high-risk AI systems.", "quote": "\"A risk management system shall be established, implemented, documented and maintained in relation to high-risk AI systems.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-1-risk-management-system" }, { "obligation_id": "art-9-2-risk-management-process", "article": 9, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "The risk management system must be a continuous lifecycle process with systematic review and updating, covering risk identification, estimation, post-market risk evaluation and targeted mitigation measures.", "quote": "\"The risk management system shall be understood as a continuous iterative process planned and run throughout the entire lifecycle of a high-risk AI system, requiring regular systematic review and updating. It shall comprise the following steps:\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8", "Art. 72" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-2-risk-management-process" }, { "obligation_id": "art-9-3-reasonably-mitigable-risks", "article": 9, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Article 9 risk management concerns only risks that may reasonably be mitigated or eliminated through system development, design or adequate technical information.", "quote": "\"The risks referred to in this Article shall concern only those which may be reasonably mitigated or eliminated through the development or design of the high-risk AI system, or the provision of adequate technical information.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-3-reasonably-mitigable-risks" }, { "obligation_id": "art-9-4-combined-requirements-effects", "article": 9, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Risk management measures must consider the effects and interactions of all Section 2 requirements to minimise risks while balancing implementation of those requirements.", "quote": "\"The risk management measures referred to in paragraph 2, point (d), shall give due consideration to the effects and possible interaction resulting from the combined application of the requirements set out in this Section, with a view to minimising risks more effectively while achieving an appropriate balance in implementing the measures to fulfil those requirements.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-4-combined-requirements-effects" }, { "obligation_id": "art-9-5-residual-risk-measures", "article": 9, "paragraph": 5, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Risk management measures must make each residual hazard risk and the overall residual risk of high-risk AI systems acceptable.", "quote": "\"The risk management measures referred to in paragraph 2, point (d), shall be such that the relevant residual risk associated with each hazard, as well as the overall residual risk of the high-risk AI systems is judged to be acceptable.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-5-residual-risk-measures" }, { "obligation_id": "art-9-6-risk-management-testing", "article": 9, "paragraph": 6, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "High-risk AI systems must be tested to identify targeted risk management measures and ensure consistent intended-purpose performance and compliance with Section 2 requirements.", "quote": "\"High-risk AI systems shall be tested for the purpose of identifying the most appropriate and targeted risk management measures. Testing shall ensure that high-risk AI systems perform consistently for their intended purpose and that they are in compliance with the requirements set out in this Section.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-6-risk-management-testing" }, { "obligation_id": "art-9-7-real-world-testing-option", "article": 9, "paragraph": 7, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "Testing procedures for high-risk AI systems may include testing in real-world conditions in accordance with Article 60.", "quote": "\"Testing procedures may include testing in real-world conditions in accordance with Article 60.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8", "Art. 60" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-7-real-world-testing-option" }, { "obligation_id": "art-9-8-testing-timing-metrics", "article": 9, "paragraph": 8, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Testing of high-risk AI systems must occur as appropriate during development and always before market placement or service, against predefined metrics and probabilistic thresholds.", "quote": "\"The testing of high-risk AI systems shall be performed, as appropriate, at any time throughout the development process, and, in any event, prior to their being placed on the market or put into service. Testing shall be carried out against prior defined metrics and probabilistic thresholds that are appropriate to the intended purpose of the high-risk AI system.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-8-testing-timing-metrics" }, { "obligation_id": "art-9-9-minors-vulnerable-groups", "article": 9, "paragraph": 9, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Providers implementing risk management must consider whether the intended purpose is likely to adversely affect persons under 18 and, as appropriate, other vulnerable groups.", "quote": "\"When implementing the risk management system as provided for in paragraphs 1 to 7, providers shall give consideration to whether in view of its intended purpose the high-risk AI system is likely to have an adverse impact on persons under the age of 18 and, as appropriate, other vulnerable groups.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-9-minors-vulnerable-groups" }, { "obligation_id": "art-9-10-risk-process-integration", "article": 9, "paragraph": 10, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Providers subject to internal risk-management requirements under other Union law may include or combine Article 9 aspects with those existing procedures.", "quote": "\"For providers of high-risk AI systems that are subject to requirements regarding internal risk management processes under other relevant provisions of Union law, the aspects provided in paragraphs 1 to 9 may be part of, or combined with, the risk management procedures established pursuant to that law.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Core obligation for legal-AI vendors whose systems are high-risk, including judicial or ADR systems under Annex III point 8.", "cross_references": [ "Art. 6", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_9", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-9#art-9-10-risk-process-integration" }, { "obligation_id": "art-10-1-data-quality-criteria", "article": 10, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "High-risk AI systems using training techniques must be developed using training, validation and testing datasets that meet Article 10(2), (3) and (4) quality criteria and Article 4a(1) when used.", "quote": "\"High-risk AI systems which make use of techniques involving the training of AI models with data shall be developed on the basis of training, validation and testing data sets that meet the quality criteria referred to in paragraphs 2, 3 and 4 of this Article and in Article 4a(1) whenever such data sets are used.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Key for legal-AI vendors training high-risk judicial, ADR or public-sector systems on legal, case or user data.", "cross_references": [ "Art. 4a(1)", "Art. 10(2)", "Art. 10(3)", "Art. 10(4)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_10", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-10#art-10-1-data-quality-criteria" }, { "obligation_id": "art-10-2-data-governance-practices", "article": 10, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Training, validation and testing datasets must be subject to governance and management practices appropriate for the intended purpose of the high-risk AI system.", "quote": "\"Training, validation and testing data sets shall be subject to data governance and management practices appropriate for the intended purpose of the high-risk AI system. Those practices shall concern in particular:\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Data governance is central for legal-AI vendors using case law, pleadings, client files or public records in high-risk systems.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_10", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-10#art-10-2-data-governance-practices" }, { "obligation_id": "art-10-2-a-e-data-lifecycle", "article": 10, "paragraph": 2, "point": "a-e", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Dataset governance must address design choices, data collection and origin, data preparation, assumptions about what data represent, and availability, quantity and suitability of needed datasets.", "quote": "\"the relevant design choices;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors need traceable data lifecycle governance for high-risk systems trained or tested on legal-domain data.", "cross_references": [ "Art. 10(2)(a)-(e)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_10", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-10#art-10-2-a-e-data-lifecycle" }, { "obligation_id": "art-10-2-f-bias-examination", "article": 10, "paragraph": 2, "point": "f", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Providers must examine datasets for biases likely to affect health and safety, negatively affect fundamental rights or lead to discrimination prohibited under Union law.", "quote": "\"examination in view of possible biases that are likely to affect the health and safety of persons, have a negative impact on fundamental rights or lead to discrimination prohibited under Union law, especially where data outputs influence inputs for future operations;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Highly relevant to legal-AI vendors because biased legal-data outputs can influence future decisions about litigants, clients, workers or public-service users.", "cross_references": [ "Art. 4a", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_10", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-10#art-10-2-f-bias-examination" }, { "obligation_id": "art-10-2-g-bias-mitigation", "article": 10, "paragraph": 2, "point": "g", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Providers must take appropriate measures to detect, prevent and mitigate possible biases identified under Article 10(2)(f).", "quote": "\"appropriate measures to detect, prevent and mitigate possible biases identified according to point (f);\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI providers must address dataset bias that could affect equal treatment, due process or access to services.", "cross_references": [ "Art. 10(2)(f)", "Art. 4a", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_10", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-10#art-10-2-g-bias-mitigation" }, { "obligation_id": "art-10-2-h-data-gaps", "article": 10, "paragraph": 2, "point": "h", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Dataset governance must identify relevant data gaps or shortcomings that prevent compliance and how those gaps and shortcomings can be addressed.", "quote": "\"the identification of relevant data gaps or shortcomings that prevent compliance with this Regulation, and how those gaps and shortcomings can be addressed.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-domain datasets often have coverage, jurisdictional, demographic or quality gaps relevant to high-risk legal-AI compliance.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_10", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-10#art-10-2-h-data-gaps" }, { "obligation_id": "art-10-3-dataset-quality", "article": 10, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Training, validation and testing datasets must be relevant, sufficiently representative, as error-free and complete as possible, and have appropriate statistical properties for intended use.", "quote": "\"Training, validation and testing data sets shall be relevant, sufficiently representative, and to the best extent possible, free of errors and complete in view of the intended purpose. They shall have the appropriate statistical properties, including, where applicable, as regards the persons or groups of persons in relation to whom the high-risk AI system is intended to be used. Those\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors must account for representativeness and quality when datasets affect courts, ADR, employment or public-service decisions.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_10", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-10#art-10-3-dataset-quality" }, { "obligation_id": "art-10-4-contextual-characteristics", "article": 10, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Datasets must take into account, to the extent required by intended purpose, characteristics particular to the geographical, contextual, behavioural or functional setting of use.", "quote": "\"Data sets shall take into account, to the extent required by the intended purpose, the characteristics or elements that are particular to the specific geographical, contextual, behavioural or functional setting within which the high-risk AI system is intended to be used.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal systems are jurisdictional and context-sensitive, making this important for legal-AI vendors deploying across courts, languages or practice areas.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_10", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-10#art-10-4-contextual-characteristics" }, { "obligation_id": "art-10-6-non-training-testing-data", "article": 10, "paragraph": 6, "point": null, "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "For high-risk AI systems developed without model-training techniques, Article 10(2), (3) and (4) and Article 4a(1) apply only to testing datasets.", "quote": "\"For the development of high-risk AI systems not using techniques involving the training of AI models, paragraphs 2, 3 and 4 of this Article and Article 4a(1) shall apply only to the testing data sets.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Relevant to rule-based or retrieval-heavy legal-AI systems where testing data, rather than training data, carries the Article 10 governance burden.", "cross_references": [ "Art. 4a(1)", "Art. 10(2)", "Art. 10(3)", "Art. 10(4)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_10", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-10#art-10-6-non-training-testing-data" }, { "obligation_id": "art-11-1-technical-documentation", "article": 11, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Technical documentation for a high-risk AI system must be drawn up before market placement or putting into service and kept up to date.", "quote": "\"The technical documentation of a high-risk AI system shall be drawn up before that system is placed on the market or put into service and shall be kept up-to date.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors providing high-risk systems need current technical documentation before launch or deployment.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_11", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-11#art-11-1-technical-documentation" }, { "obligation_id": "art-11-2-single-technical-file", "article": 11, "paragraph": 2, "point": null, "actor": [ "provider", "product-manufacturer" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "For high-risk AI systems related to Annex I Section A products, a single technical documentation set must include Article 11 information and information required under those product laws.", "quote": "\"Where a high-risk AI system related to a product covered by the Union harmonisation legislation listed in Section A of Annex I is placed on the market or put into service, a single set of technical documentation shall be drawn up containing all the information set out in paragraph 1, as well as the information required under those legal acts.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Mostly product-regulated AI rather than ordinary legal-AI software, but relevant to legal advice on regulated products.", "cross_references": [ "Annex I Section A" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_11", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-11#art-11-2-single-technical-file" }, { "obligation_id": "art-11-3-annex-iv-delegated-acts", "article": 11, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "high-risk", "summary": "The Commission may amend Annex IV by delegated act where technical progress requires changes so technical documentation provides all information necessary to assess Section 2 compliance.", "quote": "\"The Commission is empowered to adopt delegated acts in accordance with Article 97 in order to amend Annex IV, where necessary, to ensure that, in light of technical progress, the technical documentation provides all the information necessary to assess the compliance of the system with the requirements set out in this Section.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Changes to Annex IV can alter documentation expectations for legal-AI vendors with high-risk systems.", "cross_references": [ "Annex IV", "Art. 97" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_11", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-11#art-11-3-annex-iv-delegated-acts" }, { "obligation_id": "art-12-1-automatic-logs", "article": 12, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "High-risk AI systems must technically allow automatic recording of events over the lifetime of the system.", "quote": "\"High-risk AI systems shall technically allow for the automatic recording of events (logs) over the lifetime of the system.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Important for legal-AI vendors and deployers because logs support traceability, audits, complaints and incident analysis.", "cross_references": [ "Art. 16(a)", "Art. 26(6)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_12", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-12#art-12-1-automatic-logs" }, { "obligation_id": "art-12-2-logging-events", "article": 12, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Logging capabilities must enable recording of events relevant to risk or substantial modification, post-market monitoring and deployer monitoring under Article 26(5).", "quote": "\"In order to ensure a level of traceability of the functioning of a high-risk AI system that is appropriate to the intended purpose of the system, logging capabilities shall enable the recording of events relevant for:\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Logs are central for law firms or courts to monitor high-risk legal AI and for vendors to support post-market obligations.", "cross_references": [ "Art. 26(5)", "Art. 72", "Art. 79(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_12", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-12#art-12-2-logging-events" }, { "obligation_id": "art-12-3-biometric-minimum-logs", "article": 12, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "For Annex III point 1(a) high-risk biometric systems, logs must at least record use periods, reference databases, matched input data and persons verifying results.", "quote": "\"For high-risk AI systems referred to in point 1 (a), of Annex III, the logging capabilities shall provide, at a minimum:\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to court or public-authority review of biometric identification systems, less direct to ordinary law-firm legal AI.", "cross_references": [ "Annex III point 1(a)", "Art. 14(5)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_12", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-12#art-12-3-biometric-minimum-logs" }, { "obligation_id": "art-13-1-transparent-operation", "article": 13, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "High-risk AI systems must be designed and developed so their operation is sufficiently transparent for deployers to interpret output and use it appropriately, supporting provider and deployer compliance.", "quote": "\"High-risk AI systems shall be designed and developed in such a way as to ensure that their operation is sufficiently transparent to enable deployers to interpret a system’s output and use it appropriately. An appropriate type and degree of transparency shall be ensured with a view to achieving compliance with the relevant obligations of the provider and deployer set out\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors must make high-risk systems interpretable enough for law firms, courts or public bodies to use outputs appropriately.", "cross_references": [ "Art. 26", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_13", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-13#art-13-1-transparent-operation" }, { "obligation_id": "art-13-2-instructions-for-use", "article": 13, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "High-risk AI systems must be accompanied by instructions for use in an appropriate digital or other format with concise, complete, correct, clear, relevant, accessible and comprehensible information for deployers.", "quote": "\"High-risk AI systems shall be accompanied by instructions for use in an appropriate digital format or otherwise that include concise, complete, correct and clear information that is relevant, accessible and comprehensible to deployers.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Instructions are central for legal deployers using high-risk AI and for vendors supplying those systems.", "cross_references": [ "Art. 26", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_13", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-13#art-13-2-instructions-for-use" }, { "obligation_id": "art-13-3-a-provider-identity", "article": 13, "paragraph": 3, "point": "a", "actor": [ "provider" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "Instructions for use must state the provider’s identity and contact details and, where applicable, those of its authorised representative.", "quote": "\"the identity and the contact details of the provider and, where applicable, of its authorised representative;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal deployers need accountable provider contact information for high-risk legal-AI systems.", "cross_references": [ "Art. 26", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_13", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-13#art-13-3-a-provider-identity" }, { "obligation_id": "art-13-3-b-performance-limitations", "article": 13, "paragraph": 3, "point": "b", "actor": [ "provider" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "Instructions must describe intended purpose, accuracy, robustness, cybersecurity, foreseeable risk circumstances, explainability capabilities, performance for specific groups, data specifications and output interpretation information.", "quote": "\"the characteristics, capabilities and limitations of performance of the high-risk AI system, including: (i) its intended purpose; (ii) the level of accuracy, including its metrics, robustness and cybersecurity referred to in Article 15 against which the high-risk AI system has been tested and validated and which can be expected, and any known and foreseeable circumstances that may have an impact\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI deployers need these details to evaluate limitations, bias, explainability and safe use in legal contexts.", "cross_references": [ "Art. 9(2)", "Art. 15", "Art. 26", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_13", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-13#art-13-3-b-performance-limitations" }, { "obligation_id": "art-13-3-c-predetermined-changes", "article": 13, "paragraph": 3, "point": "c", "actor": [ "provider" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "Instructions must identify any pre-determined changes to the high-risk AI system and its performance set by the provider at initial conformity assessment.", "quote": "\"the changes to the high-risk AI system and its performance which have been pre-determined by the provider at the moment of the initial conformity assessment, if any;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal deployers need to know which changes were assessed before using evolving high-risk legal-AI systems.", "cross_references": [ "Art. 26", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_13", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-13#art-13-3-c-predetermined-changes" }, { "obligation_id": "art-13-3-d-human-oversight", "article": 13, "paragraph": 3, "point": "d", "actor": [ "provider" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "Instructions must describe Article 14 human oversight measures, including technical measures that help deployers interpret high-risk AI system outputs.", "quote": "\"the human oversight measures referred to in Article 14, including the technical measures put in place to facilitate the interpretation of the outputs of the high-risk AI systems by the deployers;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Courts, law firms and legal departments need oversight instructions to avoid over-reliance on high-risk legal-AI outputs.", "cross_references": [ "Art. 14", "Art. 26", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_13", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-13#art-13-3-d-human-oversight" }, { "obligation_id": "art-13-3-e-resources-lifetime-maintenance", "article": 13, "paragraph": 3, "point": "e", "actor": [ "provider" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "Instructions must state needed computational and hardware resources, expected lifetime, and necessary maintenance and care measures, including frequency and software updates.", "quote": "\"the computational and hardware resources needed, the expected lifetime of the high-risk AI system and any necessary maintenance and care measures, including their frequency, to ensure the proper functioning of that AI system, including as regards software updates;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Legal deployers need operational requirements to maintain high-risk legal-AI systems properly over time.", "cross_references": [ "Art. 26", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_13", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-13#art-13-3-e-resources-lifetime-maintenance" }, { "obligation_id": "art-13-3-f-log-collection-mechanisms", "article": 13, "paragraph": 3, "point": "f", "actor": [ "provider" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "Where relevant, instructions must describe mechanisms in the high-risk AI system that allow deployers to properly collect, store and interpret logs under Article 12.", "quote": "\"where relevant, a description of the mechanisms included within the high-risk AI system that allows deployers to properly collect, store and interpret the logs in accordance with Article 12.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Important for legal deployers’ audit trails, evidence, accountability and Article 26 log-retention duties.", "cross_references": [ "Art. 12", "Art. 26(6)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_13", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-13#art-13-3-f-log-collection-mechanisms" }, { "obligation_id": "art-14-1-human-oversight-design", "article": 14, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "High-risk AI systems must be designed and developed with appropriate human-machine interface tools so natural persons can effectively oversee them during use.", "quote": "\"High-risk AI systems shall be designed and developed in such a way, including with appropriate human-machine interface tools, that they can be effectively overseen by natural persons during the period in which they are in use.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors must support meaningful oversight for systems used in courts, ADR, employment or public services.", "cross_references": [ "Art. 26(2)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_14", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-14#art-14-1-human-oversight-design" }, { "obligation_id": "art-14-2-human-oversight-aim", "article": 14, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "Human oversight must aim to prevent or minimise health, safety or fundamental-rights risks from intended use or foreseeable misuse, especially where risks persist despite other Section 2 requirements.", "quote": "\"Human oversight shall aim to prevent or minimise the risks to health, safety or fundamental rights that may emerge when a high-risk AI system is used in accordance with its intended purpose or under conditions of reasonably foreseeable misuse, in particular where such risks persist despite the application of other requirements set out in this Section.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Relevant to high-risk legal-AI outputs that could affect rights, due process, employment, benefits or access to justice.", "cross_references": [ "Art. 9", "Art. 26(2)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_14", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-14#art-14-2-human-oversight-aim" }, { "obligation_id": "art-14-3-oversight-measures", "article": 14, "paragraph": 3, "point": null, "actor": [ "provider", "deployer" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "Oversight measures must be commensurate with risk, autonomy and context of use and be built into the system where feasible or identified by the provider for deployer implementation.", "quote": "\"The oversight measures shall be commensurate with the risks, level of autonomy and context of use of the high-risk AI system, and shall be ensured through either one or both of the following types of measures:\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors and deployers need oversight measures calibrated to judicial, ADR, workplace or public-service contexts.", "cross_references": [ "Art. 26(2)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_14", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-14#art-14-3-oversight-measures" }, { "obligation_id": "art-14-4-overseer-capabilities", "article": 14, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "High-risk AI systems must be provided so assigned overseers can understand capacities and limits, monitor operation, interpret outputs, disregard or override outputs and intervene or stop the system as appropriate.", "quote": "\"For the purpose of implementing paragraphs 1, 2 and 3, the high-risk AI system shall be provided to the deployer in such a way that natural persons to whom human oversight is assigned are enabled, as appropriate and proportionate:\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Essential for judges, lawyers or legal staff overseeing high-risk legal-AI tools and avoiding automation bias.", "cross_references": [ "Art. 26(2)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_14", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-14#art-14-4-overseer-capabilities" }, { "obligation_id": "art-14-4-automation-bias-override", "article": 14, "paragraph": 4, "point": "b-d", "actor": [ "provider" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "Oversight must enable awareness of automation bias, correct interpretation of outputs, and the ability to decide not to use, disregard, override or reverse high-risk AI outputs.", "quote": "\"to remain aware of the possible tendency of automatically relying or over-relying on the output produced by a high-risk AI system (automation bias), in particular for high-risk AI systems used to provide information or recommendations for decisions to be taken by natural persons;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Highly relevant to legal decision-support because lawyers, judges and staff must not over-rely on AI outputs.", "cross_references": [ "Art. 26(2)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_14", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-14#art-14-4-automation-bias-override" }, { "obligation_id": "art-14-5-biometric-two-person-verification", "article": 14, "paragraph": 5, "point": null, "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "For Annex III point 1(a) biometric systems, deployers may not take action or decisions on identification unless at least two competent, trained and authorised natural persons separately verify and confirm it.", "quote": "\"For high-risk AI systems referred to in point 1(a) of Annex III, the measures referred to in paragraph 3 of this Article shall be such as to ensure that, in addition, no action or decision is taken by the deployer on the basis of the identification resulting from the system unless that identification has been separately verified and confirmed by\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to court security, policing and evidentiary contexts where biometric identification may inform legal action.", "cross_references": [ "Annex III point 1(a)", "Art. 26(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_14", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-14#art-14-5-biometric-two-person-verification" }, { "obligation_id": "art-15-1-accuracy-robustness-cybersecurity", "article": 15, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "High-risk AI systems must be designed and developed to achieve appropriate accuracy, robustness and cybersecurity and perform consistently in those respects throughout their lifecycle.", "quote": "\"High-risk AI systems shall be designed and developed in such a way that they achieve an appropriate level of accuracy, robustness, and cybersecurity, and that they perform consistently in those respects throughout their lifecycle.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors must meet accuracy, robustness and cybersecurity expectations for high-risk systems used in legal or public-authority contexts.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_15", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-15#art-15-1-accuracy-robustness-cybersecurity" }, { "obligation_id": "art-15-2-benchmarks-methodologies", "article": 15, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "support-measure", "risk_tier": "high-risk", "summary": "The Commission must encourage development of benchmarks and measurement methodologies for appropriate accuracy, robustness and other relevant performance metrics, in cooperation with stakeholders and organisations.", "quote": "\"To address the technical aspects of how to measure the appropriate levels of accuracy and robustness set out in paragraph 1 and any other relevant performance metrics, the Commission shall, in cooperation with relevant stakeholders and organisations such as metrology and benchmarking authorities, encourage, as appropriate, the development of benchmarks and measurement methodologies.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Benchmarks may influence how high-risk legal-AI performance is measured and explained.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_15", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-15#art-15-2-benchmarks-methodologies" }, { "obligation_id": "art-15-3-accuracy-metrics-instructions", "article": 15, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "The levels of accuracy and relevant accuracy metrics for high-risk AI systems must be declared in the accompanying instructions for use.", "quote": "\"The levels of accuracy and the relevant accuracy metrics of high-risk AI systems shall be declared in the accompanying instructions of use.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Law firms, courts and legal departments need declared accuracy metrics before relying on high-risk legal-AI outputs.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_15", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-15#art-15-3-accuracy-metrics-instructions" }, { "obligation_id": "art-15-4-resilience-errors-faults", "article": 15, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "High-risk AI systems must be as resilient as possible against errors, faults or inconsistencies in the system or operating environment, and technical and organisational measures must be taken.", "quote": "\"High-risk AI systems shall be as resilient as possible regarding errors, faults or inconsistencies that may occur within the system or the environment in which the system operates, in particular due to their interaction with natural persons or other systems. Technical and organisational measures shall be taken in this regard.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI systems must be resilient to errors or environmental inconsistencies that could affect legal outcomes or rights.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_15", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-15#art-15-4-resilience-errors-faults" }, { "obligation_id": "art-15-5-cybersecurity-resilience", "article": 15, "paragraph": 5, "point": null, "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "High-risk AI systems must be resilient against unauthorised third-party attempts to alter their use, outputs or performance by exploiting system vulnerabilities.", "quote": "\"High-risk AI systems shall be resilient against attempts by unauthorised third parties to alter their use, outputs or performance by exploiting system vulnerabilities.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Cybersecurity is critical for legal-AI systems processing privileged, confidential or court-related information.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_15", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-15#art-15-5-cybersecurity-resilience" }, { "obligation_id": "art-16-0-a-section-2-compliance", "article": 16, "paragraph": null, "point": "a", "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Providers must ensure their high-risk AI systems comply with the requirements in Chapter III Section 2.", "quote": "\"ensure that their high-risk AI systems are compliant with the requirements set out in Section 2;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Chapter III Section 2", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-a-section-2-compliance" }, { "obligation_id": "art-16-0-b-provider-contact-marking", "article": 16, "paragraph": null, "point": "b", "actor": [ "provider" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "Providers must indicate their name, trade name or mark, and contact address on the system, packaging or accompanying documentation as applicable.", "quote": "\"indicate on the high-risk AI system or, where that is not possible, on its packaging or its accompanying documentation, as applicable, their name, registered trade name or registered trade mark, the address at which they can be contacted;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-b-provider-contact-marking" }, { "obligation_id": "art-16-0-c-quality-management-system", "article": 16, "paragraph": null, "point": "c", "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "Providers must have a quality management system that complies with Article 17.", "quote": "\"have a quality management system in place which complies with Article 17;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 17", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-c-quality-management-system" }, { "obligation_id": "art-16-0-d-documentation-keeping", "article": 16, "paragraph": null, "point": "d", "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Providers must keep the documentation referred to in Article 18.", "quote": "\"keep the documentation referred to in Article 18;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 18", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-d-documentation-keeping" }, { "obligation_id": "art-16-0-e-provider-log-keeping", "article": 16, "paragraph": null, "point": "e", "actor": [ "provider" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Providers must keep automatically generated logs under their control as referred to in Article 19.", "quote": "\"when under their control, keep the logs automatically generated by their high-risk AI systems as referred to in Article 19;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 19", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-e-provider-log-keeping" }, { "obligation_id": "art-16-0-f-conformity-assessment", "article": 16, "paragraph": null, "point": "f", "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Providers must ensure the high-risk AI system undergoes the relevant Article 43 conformity assessment before market placement or putting into service.", "quote": "\"ensure that the high-risk AI system undergoes the relevant conformity assessment procedure as referred to in Article 43, prior to its being placed on the market or put into service;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 43", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-f-conformity-assessment" }, { "obligation_id": "art-16-0-g-eu-declaration", "article": 16, "paragraph": null, "point": "g", "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Providers must draw up an EU declaration of conformity in accordance with Article 47.", "quote": "\"draw up an EU declaration of conformity in accordance with Article 47;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 47", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-g-eu-declaration" }, { "obligation_id": "art-16-0-h-ce-marking", "article": 16, "paragraph": null, "point": "h", "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Providers must affix CE marking to the high-risk AI system, packaging or documentation to indicate conformity with this Regulation.", "quote": "\"affix the CE marking to the high-risk AI system or, where that is not possible, on its packaging or its accompanying documentation, to indicate conformity with this Regulation, in accordance with Article 48;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 48", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-h-ce-marking" }, { "obligation_id": "art-16-0-i-registration-obligations", "article": 16, "paragraph": null, "point": "i", "actor": [ "provider" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Providers must comply with the Article 49(1) registration obligations for high-risk AI systems.", "quote": "\"comply with the registration obligations referred to in Article 49(1);\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 49(1)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-i-registration-obligations" }, { "obligation_id": "art-16-0-j-corrective-actions-information", "article": 16, "paragraph": null, "point": "j", "actor": [ "provider" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "Providers must take necessary corrective actions and provide required information under Article 20.", "quote": "\"take the necessary corrective actions and provide information as required in Article 20;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 20", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-j-corrective-actions-information" }, { "obligation_id": "art-16-0-k-demonstrate-conformity", "article": 16, "paragraph": null, "point": "k", "actor": [ "provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Providers must demonstrate conformity with Section 2 requirements upon a reasoned request from a national competent authority.", "quote": "\"upon a reasoned request of a national competent authority, demonstrate the conformity of the high-risk AI system with the requirements set out in Section 2;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Chapter III Section 2", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-k-demonstrate-conformity" }, { "obligation_id": "art-16-0-l-accessibility-requirements", "article": 16, "paragraph": null, "point": "l", "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Providers must ensure high-risk AI systems comply with accessibility requirements under Directives (EU) 2016/2102 and (EU) 2019/882.", "quote": "\"ensure that the high-risk AI system complies with accessibility requirements in accordance with Directives (EU) 2016/2102 and (EU) 2019/882.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Directive (EU) 2016/2102", "Directive (EU) 2019/882", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_16", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-16#art-16-0-l-accessibility-requirements" }, { "obligation_id": "art-17-1-qms-documented-system", "article": 17, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "Providers must put in place a documented, systematic and orderly quality management system that ensures compliance with the Regulation.", "quote": "\"Providers of high-risk AI systems shall put a quality management system in place that ensures compliance with this Regulation. That system shall be documented in a systematic and orderly manner in the form of written policies, procedures and instructions, and shall include at least the following aspects:\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors where the system is high-risk under Annex III point 8, including AI used by or for judicial authorities or similarly in ADR.", "cross_references": [ "Art. 16(c)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-1-qms-documented-system" }, { "obligation_id": "art-17-1-a-regulatory-strategy", "article": 17, "paragraph": 1, "point": "a", "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "The quality management system must include a regulatory compliance strategy, including conformity assessment and modification-management procedures.", "quote": "\"a strategy for regulatory compliance, including compliance with conformity assessment procedures and procedures for the management of modifications to the high-risk AI system;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors need a compliance strategy for high-risk legal systems and changes that may affect conformity.", "cross_references": [ "Art. 43", "Art. 16(c)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-1-a-regulatory-strategy" }, { "obligation_id": "art-17-1-b-d-design-development-testing", "article": 17, "paragraph": 1, "point": "b-d", "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "The quality management system must cover design control and verification, development quality control and assurance, and examination, testing and validation procedures and frequency.", "quote": "\"techniques, procedures and systematic actions to be used for the design, design control and design verification of the high-risk AI system;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors engineering and testing systems used in judicial or legal decision-support contexts.", "cross_references": [ "Art. 17(1)(b)-(d)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-1-b-d-design-development-testing" }, { "obligation_id": "art-17-1-e-technical-specifications", "article": 17, "paragraph": 1, "point": "e", "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "The quality management system must identify technical specifications and standards, or other means, used to ensure compliance with Section 2 requirements.", "quote": "\"technical specifications, including standards, to be applied and, where the relevant harmonised standards are not applied in full or do not cover all of the relevant requirements set out in Section 2, the means to be used to ensure that the high-risk AI system complies with those requirements;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI vendors selecting standards or controls for high-risk legal systems.", "cross_references": [ "Chapter III Section 2", "Art. 40" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-1-e-technical-specifications" }, { "obligation_id": "art-17-1-f-g-data-risk-systems", "article": 17, "paragraph": 1, "point": "f-g", "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "The quality management system must include data-management systems and procedures and the Article 9 risk management system.", "quote": "\"systems and procedures for data management, including data acquisition, data collection, data analysis, data labelling, data storage, data filtration, data mining, data aggregation, data retention and any other operation regarding the data that is performed before and for the purpose of the placing on the market or the putting into service of high-risk AI systems;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Critical for legal-AI vendors managing legal datasets and fundamental-rights risks.", "cross_references": [ "Art. 9", "Art. 10", "Art. 16(c)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-1-f-g-data-risk-systems" }, { "obligation_id": "art-17-1-h-i-post-market-incidents", "article": 17, "paragraph": 1, "point": "h-i", "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "The quality management system must include post-market monitoring and serious-incident reporting procedures.", "quote": "\"the setting-up, implementation and maintenance of a post-market monitoring system, in accordance with Article 72;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Relevant to legal-AI vendors after deployment in law firms, courts or public bodies where incidents may affect rights.", "cross_references": [ "Art. 72", "Art. 73" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-1-h-i-post-market-incidents" }, { "obligation_id": "art-17-1-j-m-communications-records-resources-accountability", "article": 17, "paragraph": 1, "point": "j-m", "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "The quality management system must cover communications with authorities, notified bodies and stakeholders, record-keeping, resource management and management/staff accountability.", "quote": "\"the handling of communication with national competent authorities, other relevant authorities, including those providing or supporting the access to data, notified bodies, other operators, customers or other interested parties;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI vendors maintaining authority-facing records, support processes and accountable governance.", "cross_references": [ "Art. 17(1)(j)-(m)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-1-j-m-communications-records-resources-accountability" }, { "obligation_id": "art-17-2-proportionate-implementation", "article": 17, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "Quality management aspects must be implemented proportionately to provider size while preserving the rigour and protection needed for high-risk AI compliance.", "quote": "\"The implementation of the aspects referred to in paragraph 1 shall be proportionate to the size of the provider’s organisation. Providers shall, in any event, respect the degree of rigour and the level of protection required to ensure the compliance of their high-risk AI systems with this Regulation.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Important for SME legal-AI vendors because proportionality does not reduce the required protection level.", "cross_references": [ "Art. 16(c)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-2-proportionate-implementation" }, { "obligation_id": "art-17-3-sectoral-qms-integration", "article": 17, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "Providers subject to quality management obligations under sectoral Union law may include Article 17 aspects in those sectoral quality management systems.", "quote": "\"Providers of high-risk AI systems that are subject to obligations regarding quality management systems or an equivalent function under relevant sectoral Union law may include the aspects listed in paragraph 1 as part of the quality management systems pursuant to that law.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Mostly relevant where legal-AI providers are already regulated under sectoral Union quality-management regimes.", "cross_references": [ "Art. 16(c)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-3-sectoral-qms-integration" }, { "obligation_id": "art-17-4-financial-institutions-qms", "article": 17, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "For financial-institution providers subject to Union financial-services governance rules, the quality management obligation is deemed fulfilled except for risk management, post-market monitoring and incident reporting points.", "quote": "\"For providers that are financial institutions subject to requirements regarding their internal governance, arrangements or processes under Union financial services law, the obligation to put in place a quality management system, with the exception of paragraph 1, points (g), (h) and (i) of this Article, shall be deemed to be fulfilled by complying with the rules on internal governance arrangements or processes\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Relevant to legal-AI only where a financial institution provides high-risk AI; less direct to law firms or courts.", "cross_references": [ "Art. 17(1)(g)-(i)", "Art. 40" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_17", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-17#art-17-4-financial-institutions-qms" }, { "obligation_id": "art-18-1-ten-year-documentation", "article": 18, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Providers must keep specified technical, quality-management, notified-body, certificate and EU declaration documentation available to national competent authorities for 10 years after market placement or putting into service.", "quote": "\"The provider shall, for a period ending 10 years after the high-risk AI system has been placed on the market or put into service, keep at the disposal of the national competent authorities:\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors must retain compliance documentation for high-risk systems used by courts or legal actors.", "cross_references": [ "Art. 11", "Art. 17", "Art. 47" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_18", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-18#art-18-1-ten-year-documentation" }, { "obligation_id": "art-18-2-bankruptcy-documentation-conditions", "article": 18, "paragraph": 2, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "Member States must determine conditions ensuring Article 18 documentation remains available for the required period if a local provider or authorised representative becomes bankrupt or ceases activity.", "quote": "\"Each Member State shall determine conditions under which the documentation referred to in paragraph 1 remains at the disposal of the national competent authorities for the period indicated in that paragraph for the cases when a provider or its authorised representative established on its territory goes bankrupt or ceases its activity prior to the end of that period.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Primarily institutional or governance machinery; legal practices are affected only indirectly.", "cross_references": [ "Art. 18(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_18", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-18#art-18-2-bankruptcy-documentation-conditions" }, { "obligation_id": "art-18-3-financial-institution-documentation", "article": 18, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Financial-institution providers subject to Union financial-services governance requirements must maintain technical documentation as part of the documentation kept under that law.", "quote": "\"Providers that are financial institutions subject to requirements regarding their internal governance, arrangements or processes under Union financial services law shall maintain the technical documentation as part of the documentation kept under the relevant Union financial services law.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Relevant only where a financial institution is the high-risk AI provider.", "cross_references": [ "Art. 11" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_18", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-18#art-18-3-financial-institution-documentation" }, { "obligation_id": "art-19-1-provider-log-retention", "article": 19, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Providers must keep automatically generated high-risk AI system logs under their control for a period appropriate to intended purpose and at least six months unless other law provides otherwise.", "quote": "\"Providers of high-risk AI systems shall keep the logs referred to in Article 12(1), automatically generated by their high-risk AI systems, to the extent such logs are under their control. Without prejudice to applicable Union or national law, the logs shall be kept for a period appropriate to the intended purpose of the high-risk AI system, of at least six months, unless provided otherwise in the applicable Union\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for legal-AI vendors controlling logs; logs may support incident analysis, audits and challenges to legal AI use.", "cross_references": [ "Art. 12(1)", "Art. 26(6)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_19", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-19#art-19-1-provider-log-retention" }, { "obligation_id": "art-19-2-financial-institution-logs", "article": 19, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Financial-institution providers subject to Union financial-services governance requirements must maintain automatically generated high-risk AI logs as part of documentation kept under that law.", "quote": "\"Providers that are financial institutions subject to requirements regarding their internal governance, arrangements or processes under Union financial services law shall maintain the logs automatically generated by their high-risk AI systems as part of the documentation kept under the relevant financial services law.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Relevant only where a financial institution is the high-risk AI provider.", "cross_references": [ "Art. 12(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_19", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-19#art-19-2-financial-institution-logs" }, { "obligation_id": "art-20-1-corrective-actions", "article": 20, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "Providers that consider or have reason to consider their high-risk AI system non-conforming must immediately take corrective actions, including conformity, withdrawal, disabling or recall, and inform relevant operators.", "quote": "\"Providers of high-risk AI systems which consider or have reason to consider that a high-risk AI system that they have placed on the market or put into service is not in conformity with this Regulation shall immediately take the necessary corrective actions to bring that system into conformity, to withdraw it, to disable it, or to recall it, as appropriate. They shall inform the distributors of the high-risk AI\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors must act and inform legal deployers or distributors when a high-risk legal system is non-conforming.", "cross_references": [ "Art. 16(j)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_20", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-20#art-20-1-corrective-actions" }, { "obligation_id": "art-20-2-risk-investigation-information", "article": 20, "paragraph": 2, "point": null, "actor": [ "provider", "deployer", "market-surveillance-authority", "notified-body" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "When a high-risk AI system presents an Article 79(1) risk and the provider becomes aware, it must immediately investigate causes with the reporting deployer where applicable and inform authorities and notified bodies.", "quote": "\"Where the high-risk AI system presents a risk within the meaning of Article 79(1) and the provider becomes aware of that risk, it shall immediately investigate the causes, in collaboration with the reporting deployer, where applicable, and inform the market surveillance authorities competent for the high-risk AI system concerned and, where applicable, the notified body that issued a certificate for that high-risk\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Relevant where legal-AI deployers report risks affecting rights or proceedings and vendors must investigate and notify.", "cross_references": [ "Art. 79(1)", "Art. 44", "Art. 16(j)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_20", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-20#art-20-2-risk-investigation-information" }, { "obligation_id": "art-21-1-information-documentation-authorities", "article": 21, "paragraph": 1, "point": null, "actor": [ "provider", "national-competent-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Providers must, upon reasoned request, give competent authorities all information and documentation necessary to demonstrate Section 2 conformity in an easily understood official Union language indicated by the Member State.", "quote": "\"Providers of high-risk AI systems shall, upon a reasoned request by a competent authority, provide that authority all the information and documentation necessary to demonstrate the conformity of the high-risk AI system with the requirements set out in Section 2, in a language which can be easily understood by the authority in one of the official languages of the institutions of the Union as indicated by the Member\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors may need authority-ready documentation for systems used by courts, public bodies or regulated legal contexts.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_21", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-21#art-21-1-information-documentation-authorities" }, { "obligation_id": "art-21-2-authority-log-access", "article": 21, "paragraph": 2, "point": null, "actor": [ "provider", "national-competent-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Providers must, upon reasoned request, give competent authorities access to automatically generated logs to the extent those logs are under provider control.", "quote": "\"Upon a reasoned request by a competent authority, providers shall also give the requesting competent authority, as applicable, access to the automatically generated logs of the high-risk AI system referred to in Article 12(1), to the extent such logs are under their control.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors controlling logs may need to provide them for authority review of high-risk legal AI systems.", "cross_references": [ "Art. 12(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_21", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-21#art-21-2-authority-log-access" }, { "obligation_id": "art-21-3-authority-confidentiality", "article": 21, "paragraph": 3, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Competent authorities must treat information obtained under Article 21 in accordance with Article 78 confidentiality obligations.", "quote": "\"Any information obtained by a competent authority pursuant to this Article shall be treated in accordance with the confidentiality obligations set out in Article 78.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Important where legal-AI documentation or logs include privileged, confidential or commercially sensitive legal-sector information.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_21", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-21#art-21-3-authority-confidentiality" }, { "obligation_id": "art-22-1-appoint-authorised-representative", "article": 22, "paragraph": 1, "point": null, "actor": [ "provider", "authorised-representative" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Before making high-risk AI systems available on the Union market, third-country providers must appoint by written mandate an authorised representative established in the Union.", "quote": "\"Prior to making their high-risk AI systems available on the Union market, providers established in third countries shall, by written mandate, appoint an authorised representative which is established in the Union.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for non-EU legal-AI vendors selling high-risk systems for EU legal or judicial use.", "cross_references": [ "Art. 16", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_22", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-22#art-22-1-appoint-authorised-representative" }, { "obligation_id": "art-22-2-enable-representative", "article": 22, "paragraph": 2, "point": null, "actor": [ "provider", "authorised-representative" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "The provider must enable its authorised representative to perform the tasks specified in the mandate received from the provider.", "quote": "\"The provider shall enable its authorised representative to perform the tasks specified in the mandate received from the provider.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to non-EU legal-AI vendors relying on EU representatives for compliance.", "cross_references": [ "Art. 22(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_22", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-22#art-22-2-enable-representative" }, { "obligation_id": "art-22-3-a-verify-docs-assessment", "article": 22, "paragraph": 3, "point": "a", "actor": [ "authorised-representative" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Authorised representatives must verify that the EU declaration, technical documentation and provider conformity assessment procedure have been completed.", "quote": "\"verify that the EU declaration of conformity referred to in Article 47 and the technical documentation referred to in Article 11 have been drawn up and that an appropriate conformity assessment procedure has been carried out by the provider;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to non-EU legal-AI vendors and their EU representatives for high-risk legal systems.", "cross_references": [ "Art. 47", "Art. 11", "Art. 43", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_22", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-22#art-22-3-a-verify-docs-assessment" }, { "obligation_id": "art-22-3-b-keep-documents-ten-years", "article": 22, "paragraph": 3, "point": "b", "actor": [ "authorised-representative" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Authorised representatives must keep provider contact details, conformity declaration, technical documentation and any notified-body certificate available for 10 years.", "quote": "\"keep at the disposal of the competent authorities and national authorities or bodies referred to in Article 74(10), for a period of 10 years after the high-risk AI system has been placed on the market or put into service, the contact details of the provider that appointed the authorised representative, a copy of the EU declaration of conformity referred to in Article 47, the technical documentation and, if\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to non-EU legal-AI vendors and their EU representatives for high-risk legal systems.", "cross_references": [ "Art. 47", "Art. 11", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_22", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-22#art-22-3-b-keep-documents-ten-years" }, { "obligation_id": "art-22-3-c-provide-information-logs", "article": 22, "paragraph": 3, "point": "c", "actor": [ "authorised-representative" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Authorised representatives must provide competent authorities, upon reasoned request, information and documentation needed to demonstrate conformity, including provider-controlled logs where applicable.", "quote": "\"provide a competent authority, upon a reasoned request, with all the information and documentation, including that referred to in point (b) of this subparagraph, necessary to demonstrate the conformity of a high-risk AI system with the requirements set out in Section 2, including access to the logs, as referred to in Article 12(1), automatically generated by the high-risk AI system, to the extent such logs are\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to non-EU legal-AI vendors and their EU representatives for high-risk legal systems.", "cross_references": [ "Art. 12(1)", "Chapter III Section 2", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_22", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-22#art-22-3-c-provide-information-logs" }, { "obligation_id": "art-22-3-d-cooperate-risk-actions", "article": 22, "paragraph": 3, "point": "d", "actor": [ "authorised-representative" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Authorised representatives must cooperate with competent authorities on requested actions concerning the high-risk AI system, especially to reduce and mitigate risks.", "quote": "\"cooperate with competent authorities, upon a reasoned request, in any action the latter take in relation to the high-risk AI system, in particular to reduce and mitigate the risks posed by the high-risk AI system;\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to non-EU legal-AI vendors and their EU representatives for high-risk legal systems.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_22", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-22#art-22-3-d-cooperate-risk-actions" }, { "obligation_id": "art-22-3-e-registration-correctness", "article": 22, "paragraph": 3, "point": "e", "actor": [ "authorised-representative" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Authorised representatives must comply with Article 49(1) registration obligations where applicable or ensure provider-entered Annex VIII information is correct.", "quote": "\"where applicable, comply with the registration obligations referred to in Article 49(1), or, if the registration is carried out by the provider itself, ensure that the information referred to in point 3 of Section A of Annex VIII is correct.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to non-EU legal-AI vendors and their EU representatives for high-risk legal systems.", "cross_references": [ "Art. 49(1)", "Annex VIII Section A point 3", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_22", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-22#art-22-3-e-registration-correctness" }, { "obligation_id": "art-22-4-terminate-mandate", "article": 22, "paragraph": 4, "point": null, "actor": [ "authorised-representative", "market-surveillance-authority", "notified-body" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "An authorised representative must terminate the mandate if it considers the provider is acting contrary to obligations and must immediately inform the market surveillance authority and any relevant notified body.", "quote": "\"The authorised representative shall terminate the mandate if it considers or has reason to consider the provider to be acting contrary to its obligations pursuant to this Regulation. In such a case, it shall immediately inform the relevant market surveillance authority, as well as, where applicable, the relevant notified body, about the termination of the mandate and the reasons therefor.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant where an EU representative for a legal-AI vendor detects provider non-compliance.", "cross_references": [ "Art. 16", "Art. 22(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_22", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-22#art-22-4-terminate-mandate" }, { "obligation_id": "art-23-1-pre-market-verification", "article": 23, "paragraph": 1, "point": null, "actor": [ "importer" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Before placing a high-risk AI system on the market, importers must verify conformity assessment, technical documentation, CE marking, EU declaration, instructions and authorised representative appointment.", "quote": "\"Before placing a high-risk AI system on the market, importers shall ensure that the system is in conformity with this Regulation by verifying that:\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to importers bringing non-EU legal-AI systems into the Union market.", "cross_references": [ "Art. 43", "Art. 11", "Annex IV", "Art. 47", "Art. 22(1)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_23", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-23#art-23-1-pre-market-verification" }, { "obligation_id": "art-23-2-do-not-place-nonconforming", "article": 23, "paragraph": 2, "point": null, "actor": [ "importer" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "Importers with sufficient reason to consider a high-risk AI system non-conforming, falsified or accompanied by falsified documentation must not place it on the market until conformed and must notify if it presents risk.", "quote": "\"Where an importer has sufficient reason to consider that a high-risk AI system is not in conformity with this Regulation, or is falsified, or accompanied by falsified documentation, it shall not place the system on the market until it has been brought into conformity. Where the high-risk AI system presents a risk within the meaning of Article 79(1), the importer shall inform the provider of the system, the\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant for distributors or resellers importing high-risk legal-AI tools.", "cross_references": [ "Art. 79(1)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_23", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-23#art-23-2-do-not-place-nonconforming" }, { "obligation_id": "art-23-3-importer-contact-details", "article": 23, "paragraph": 3, "point": null, "actor": [ "importer" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "Importers must indicate their name, trade name or trademark and contact address on the high-risk AI system, packaging or accompanying documentation where applicable.", "quote": "\"Importers shall indicate their name, registered trade name or registered trade mark, and the address at which they can be contacted on the high-risk AI system and on its packaging or its accompanying documentation, where applicable.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Supports traceability for legal deployers and authorities.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_23", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-23#art-23-3-importer-contact-details" }, { "obligation_id": "art-23-4-storage-transport-conditions", "article": 23, "paragraph": 4, "point": null, "actor": [ "importer" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Importers must ensure storage or transport conditions under their responsibility do not jeopardise compliance with Section 2 requirements.", "quote": "\"Importers shall ensure that, while a high-risk AI system is under their responsibility, storage or transport conditions, where applicable, do not jeopardise its compliance with the requirements set out in Section 2.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Mostly supply-chain oriented and indirect for legal practice.", "cross_references": [ "Chapter III Section 2", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_23", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-23#art-23-4-storage-transport-conditions" }, { "obligation_id": "art-23-5-keep-certificate-instructions-declaration", "article": 23, "paragraph": 5, "point": null, "actor": [ "importer" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Importers must keep any notified-body certificate, instructions for use and EU declaration of conformity for 10 years after market placement or putting into service.", "quote": "\"Importers shall keep, for a period of 10 years after the high-risk AI system has been placed on the market or put into service, a copy of the certificate issued by the notified body, where applicable, of the instructions for use, and of the EU declaration of conformity referred to in Article 47.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to importers of high-risk legal-AI systems needing compliance records.", "cross_references": [ "Art. 47", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_23", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-23#art-23-5-keep-certificate-instructions-declaration" }, { "obligation_id": "art-23-6-provide-authority-information", "article": 23, "paragraph": 6, "point": null, "actor": [ "importer" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Importers must provide competent authorities, upon reasoned request, necessary information and documentation to demonstrate conformity and ensure technical documentation can be made available.", "quote": "\"Importers shall provide the relevant competent authorities, upon a reasoned request, with all the necessary information and documentation, including that referred to in paragraph 5, to demonstrate the conformity of a high-risk AI system with the requirements set out in Section 2 in a language which can be easily understood by them. For this purpose, they shall also ensure that the technical documentation can be\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant if authorities review imported legal-AI systems.", "cross_references": [ "Chapter III Section 2", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_23", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-23#art-23-6-provide-authority-information" }, { "obligation_id": "art-23-7-cooperate-authorities", "article": 23, "paragraph": 7, "point": null, "actor": [ "importer" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Importers must cooperate with relevant competent authorities in actions concerning high-risk AI systems they placed on the market, especially risk reduction and mitigation.", "quote": "\"Importers shall cooperate with the relevant competent authorities in any action those authorities take in relation to a high-risk AI system placed on the market by the importers, in particular to reduce and mitigate the risks posed by it.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant for importers of legal-AI systems subject to corrective or risk mitigation action.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_23", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-23#art-23-7-cooperate-authorities" }, { "obligation_id": "art-24-1-distributor-pre-market-verification", "article": 24, "paragraph": 1, "point": null, "actor": [ "distributor" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Before making a high-risk AI system available, distributors must verify CE marking, EU declaration, instructions and provider/importer compliance with specified identification and QMS obligations.", "quote": "\"Before making a high-risk AI system available on the market, distributors shall verify that it bears the required CE marking, that it is accompanied by a copy of the EU declaration of conformity referred to in Article 47 and instructions for use, and that the provider and the importer of that system, as applicable, have complied with their respective obligations as laid down in Article 16, points (b) and (c) and\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to distributors or resellers of high-risk legal-AI systems.", "cross_references": [ "Art. 47", "Art. 16(b)", "Art. 16(c)", "Art. 23(3)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_24", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-24#art-24-1-distributor-pre-market-verification" }, { "obligation_id": "art-24-2-do-not-make-available-nonconforming", "article": 24, "paragraph": 2, "point": null, "actor": [ "distributor" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "Distributors that consider a high-risk AI system non-conforming with Section 2 must not make it available until conformed and must notify provider or importer if it presents risk.", "quote": "\"Where a distributor considers or has reason to consider, on the basis of the information in its possession, that a high-risk AI system is not in conformity with the requirements set out in Section 2, it shall not make the high-risk AI system available on the market until the system has been brought into conformity with those requirements. Furthermore, where the high-risk AI system presents a risk within the\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI distributors that identify non-conformity or risk.", "cross_references": [ "Chapter III Section 2", "Art. 79(1)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_24", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-24#art-24-2-do-not-make-available-nonconforming" }, { "obligation_id": "art-24-3-storage-transport-compliance", "article": 24, "paragraph": 3, "point": null, "actor": [ "distributor" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Distributors must ensure storage or transport conditions under their responsibility do not jeopardise system compliance with Section 2 requirements.", "quote": "\"Distributors shall ensure that, while a high-risk AI system is under their responsibility, storage or transport conditions, where applicable, do not jeopardise the compliance of the system with the requirements set out in Section 2.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Primarily supply-chain focused and indirect for legal practice.", "cross_references": [ "Chapter III Section 2", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_24", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-24#art-24-3-storage-transport-compliance" }, { "obligation_id": "art-24-4-corrective-actions-risk-information", "article": 24, "paragraph": 4, "point": null, "actor": [ "distributor" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "Distributors that consider a made-available high-risk AI system non-conforming must take or ensure corrective action, withdrawal or recall, and notify relevant operators and authorities if it presents risk.", "quote": "\"A distributor that considers or has reason to consider, on the basis of the information in its possession, a high-risk AI system which it has made available on the market not to be in conformity with the requirements set out in Section 2, shall take the corrective actions necessary to bring that system into conformity with those requirements, to withdraw it or recall it, or shall ensure that the provider, the\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to distributors managing defective legal-AI systems already on the market.", "cross_references": [ "Chapter III Section 2", "Art. 79(1)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_24", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-24#art-24-4-corrective-actions-risk-information" }, { "obligation_id": "art-24-5-provide-authority-information", "article": 24, "paragraph": 5, "point": null, "actor": [ "distributor" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Upon reasoned request, distributors must provide competent authorities all information and documentation about their Article 24 actions needed to demonstrate conformity.", "quote": "\"Upon a reasoned request from a relevant competent authority, distributors of a high-risk AI system shall provide that authority with all the information and documentation regarding their actions pursuant to paragraphs 1 to 4 necessary to demonstrate the conformity of that system with the requirements set out in Section 2.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant where authorities review a distributed legal-AI system.", "cross_references": [ "Art. 24(1)-(4)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_24", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-24#art-24-5-provide-authority-information" }, { "obligation_id": "art-24-6-cooperate-authorities", "article": 24, "paragraph": 6, "point": null, "actor": [ "distributor" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Distributors must cooperate with competent authorities in actions concerning high-risk AI systems they made available, especially risk reduction or mitigation.", "quote": "\"Distributors shall cooperate with the relevant competent authorities in any action those authorities take in relation to a high-risk AI system made available on the market by the distributors, in particular to reduce or mitigate the risk posed by it.\"", "applies_from": "2027-12-02", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(c)(i): Art. 6(2)/Annex III high-risk", "transitional_note": "Art. 111(2): high-risk AI systems placed on the market or put into service before 2026-08-02 are covered only if they are subject to significant design changes from that date; providers and deployers of high-risk AI systems intended for public authorities must take necessary steps to comply by 2030-08-02. Art. 113(c) separately applies Article 6(1) and corresponding obligations from 2027-08-02. Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to distribution chains for legal-AI tools subject to authority action.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_24", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-24#art-24-6-cooperate-authorities" }, { "obligation_id": "art-25-1-a-own-name-provider", "article": 25, "paragraph": 1, "point": "a", "actor": [ "distributor", "importer", "deployer", "downstream-provider", "operator-any" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "A distributor, importer, deployer or other third party becomes the provider of a high-risk AI system if it puts its name or trademark on an already marketed or used high-risk AI system, subject to contractual allocation.", "quote": "\"they put their name or trademark on a high-risk AI system already placed on the market or put into service, without prejudice to contractual arrangements stipulating that the obligations are otherwise allocated;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI resellers, integrators or deployers can become providers by white-labelling a high-risk legal-AI system.", "cross_references": [ "Art. 16", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_25", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-25#art-25-1-a-own-name-provider" }, { "obligation_id": "art-25-1-b-substantial-modification-provider", "article": 25, "paragraph": 1, "point": "b", "actor": [ "distributor", "importer", "deployer", "downstream-provider", "operator-any" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "A distributor, importer, deployer or other third party becomes provider if it substantially modifies an already marketed or used high-risk AI system so it remains high-risk under Article 6.", "quote": "\"they make a substantial modification to a high-risk AI system that has already been placed on the market or has already been put into service in such a way that it remains a high-risk AI system pursuant to Article 6;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI integrators or law firms materially modifying high-risk legal tools may take on provider status.", "cross_references": [ "Art. 6", "Art. 16", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_25", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-25#art-25-1-b-substantial-modification-provider" }, { "obligation_id": "art-25-1-c-purpose-modification-provider", "article": 25, "paragraph": 1, "point": "c", "actor": [ "distributor", "importer", "deployer", "downstream-provider", "operator-any" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "A distributor, importer, deployer or other third party becomes provider if it changes the intended purpose of a non-high-risk system or general-purpose AI system so it becomes high-risk under Article 6.", "quote": "\"they modify the intended purpose of an AI system, including a general-purpose AI system, which has not been classified as high-risk and has already been placed on the market or put into service in such a way that the AI system concerned becomes a high-risk AI system in accordance with Article 6.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "A legal organisation adapting a general-purpose system for judicial, ADR or other Annex III high-risk use may become the provider.", "cross_references": [ "Art. 6", "Art. 16", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_25", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-25#art-25-1-c-purpose-modification-provider" }, { "obligation_id": "art-25-2-initial-provider-status", "article": 25, "paragraph": 2, "point": null, "actor": [ "provider", "downstream-provider" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Where Article 25(1) circumstances occur, the provider that initially placed the AI system on the market or put it into service is no longer considered provider of that specific system.", "quote": "\"Where the circumstances referred to in paragraph 1 occur, the provider that initially placed the AI system on the market or put it into service shall no longer be considered to be a provider of that specific AI system for the purposes of this Regulation.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Clarifies responsibility shifts in legal-AI supply chains after white-labelling, substantial modification or purpose changes.", "cross_references": [ "Art. 25(1)", "Art. 99(4)(da)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_25", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-25#art-25-2-initial-provider-status" }, { "obligation_id": "art-25-3-product-manufacturer-provider", "article": 25, "paragraph": 3, "point": null, "actor": [ "product-manufacturer", "provider" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "For high-risk AI safety components of Annex I Section A products, the product manufacturer is considered the provider and subject to Article 16 when the system is marketed or put into service under its name or trademark.", "quote": "\"In the case of high-risk AI systems that are safety components of products covered by the Union harmonisation legislation listed in Section A of Annex I, the product manufacturer shall be considered to be the provider of the high-risk AI system, and shall be subject to the obligations under Article 16 under either of the following circumstances:\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Mostly concerns product-regulated manufacturers and legal advice on responsibility allocation rather than ordinary legal-AI deployments.", "cross_references": [ "Annex I Section A", "Art. 16" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_25", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-25#art-25-3-product-manufacturer-provider" }, { "obligation_id": "art-25-4-written-value-chain-agreement", "article": 25, "paragraph": 4, "point": null, "actor": [ "provider", "downstream-provider", "operator-any", "gpai-provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "The high-risk AI provider and third-party suppliers of integrated AI systems, AI models, tools, services, components or processes must specify necessary information, capabilities, technical access and assistance by written agreement.", "quote": "\"The provider of a high-risk AI system and the third party that supplies an AI system, AI model, tools, services, components, or processes that are used or integrated in a high-risk AI system shall, by written agreement, specify the necessary information, capabilities, technical access and other assistance based on the generally acknowledged state of the art, in order to enable\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI vendors often rely on models, tools or services from third parties and need written value-chain support allocation.", "cross_references": [ "Art. 99(4)(da)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_25", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-25#art-25-4-written-value-chain-agreement" }, { "obligation_id": "art-25-5-ip-confidentiality", "article": 25, "paragraph": 5, "point": null, "actor": [ "provider", "product-manufacturer", "downstream-provider", "operator-any" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Article 25(2) and (3) do not prejudice the need to observe and protect intellectual property rights, confidential business information and trade secrets under Union and national law.", "quote": "\"Paragraphs 2 and 3 are without prejudice to the need to observe and protect intellectual property rights, confidential business information and trade secrets in accordance with Union and national law.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to contracts and disputes in legal-AI supply chains involving models, data, technical documentation and trade secrets.", "cross_references": [ "Art. 25(2)", "Art. 25(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_25", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-25#art-25-5-ip-confidentiality" }, { "obligation_id": "art-26-1-use-according-to-instructions", "article": 26, "paragraph": 1, "point": null, "actor": [ "deployer" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Deployers must take appropriate technical and organisational measures to ensure high-risk AI systems are used in accordance with the accompanying instructions for use, pursuant to paragraphs 3 and 6.", "quote": "\"Deployers of high-risk AI systems shall take appropriate technical and organisational measures to ensure they use such systems in accordance with the instructions for use accompanying the systems, pursuant to paragraphs 3 and 6.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for law firms, courts, in-house teams and public authorities deploying high-risk legal AI according to vendor instructions.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-1-use-according-to-instructions" }, { "obligation_id": "art-26-2-assign-human-oversight", "article": 26, "paragraph": 2, "point": null, "actor": [ "deployer" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "Deployers must assign human oversight to natural persons with the necessary competence, training, authority and support.", "quote": "\"Deployers shall assign human oversight to natural persons who have the necessary competence, training and authority, as well as the necessary support.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Human oversight competence, authority and support are central for legal staff, judges or public servants supervising high-risk AI.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-2-assign-human-oversight" }, { "obligation_id": "art-26-3-deployer-law-and-resources", "article": 26, "paragraph": 3, "point": null, "actor": [ "deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Article 26(1) and (2) do not prejudice other deployer obligations under Union or national law or the deployer’s freedom to organise resources and activities for provider-indicated human oversight.", "quote": "\"The obligations set out in paragraphs 1 and 2, are without prejudice to other deployer obligations under Union or national law and to the deployer’s freedom to organise its own resources and activities for the purpose of implementing the human oversight measures indicated by the provider.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal deployers keep flexibility in organising oversight resources but remain subject to other Union and national obligations.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-3-deployer-law-and-resources" }, { "obligation_id": "art-26-4-input-data-relevance", "article": 26, "paragraph": 4, "point": null, "actor": [ "deployer" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Where the deployer controls input data, the deployer must ensure the input data is relevant and sufficiently representative in view of the high-risk AI system’s intended purpose.", "quote": "\"Without prejudice to paragraphs 1 and 2, to the extent the deployer exercises control over the input data, that deployer shall ensure that input data is relevant and sufficiently representative in view of the intended purpose of the high-risk AI system.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Important where law firms, courts or legal departments control prompts, case data or other input data for high-risk systems.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-4-input-data-relevance" }, { "obligation_id": "art-26-5-monitor-inform-suspend-incidents", "article": 26, "paragraph": 5, "point": null, "actor": [ "deployer" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "Deployers must monitor operation using instructions, inform providers where relevant, notify and suspend use when Article 79 risk is suspected, and immediately escalate serious incidents.", "quote": "\"Deployers shall monitor the operation of the high-risk AI system on the basis of the instructions for use and, where relevant, inform providers in accordance with Article 72. Where deployers have reason to consider that the use of the high-risk AI system in accordance with the instructions may result in that AI system presenting a risk within the meaning of\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High for legal deployers because monitoring, suspension and incident escalation can affect client, court or public-service use.", "cross_references": [ "Art. 72", "Art. 73", "Art. 79(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-5-monitor-inform-suspend-incidents" }, { "obligation_id": "art-26-6-keep-logs-six-months", "article": 26, "paragraph": 6, "point": null, "actor": [ "deployer" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Deployers must keep automatically generated logs under their control for a period appropriate to intended purpose and at least six months unless Union or national law provides otherwise.", "quote": "\"Deployers of high-risk AI systems shall keep the logs automatically generated by that high-risk AI system to the extent such logs are under their control, for a period appropriate to the intended purpose of the high-risk AI system, of at least six months, unless provided otherwise in applicable Union or national law, in particular in Union law on the protection\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High for legal deployers because logs support auditability, evidence, accountability and regulatory review, with at least six-month retention.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-6-keep-logs-six-months" }, { "obligation_id": "art-26-7-workplace-notice", "article": 26, "paragraph": 7, "point": null, "actor": [ "deployer" ], "obligation_type": "information-to-persons", "risk_tier": "high-risk", "summary": "Employer deployers must inform workers’ representatives and affected workers before putting into service or using a high-risk AI system at the workplace.", "quote": "\"Before putting into service or using a high-risk AI system at the workplace, deployers who are employers shall inform workers’ representatives and the affected workers that they will be subject to the use of the high-risk AI system. This information shall be provided, where applicable, in accordance with the rules and procedures laid down in Union and national law and\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for law firms, courts and legal departments as employers using high-risk AI in the workplace.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-7-workplace-notice" }, { "obligation_id": "art-26-8-public-authority-registration", "article": 26, "paragraph": 8, "point": null, "actor": [ "deployer", "public-authority-deployer", "union-institution" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Public-authority and Union-institution deployers must comply with Article 49 registration obligations and must not use an envisaged high-risk AI system that is absent from the EU database.", "quote": "\"Deployers of high-risk AI systems that are public authorities, or Union institutions, bodies, offices or agencies shall comply with the registration obligations referred to in Article 49. When such deployers find that the high-risk AI system that they envisage using has not been registered in the EU database referred to in Article 71, they shall not use that system and\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for courts, regulators and other public-authority deployers that must verify EU database registration before use.", "cross_references": [ "Art. 49", "Art. 71" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-8-public-authority-registration" }, { "obligation_id": "art-26-9-dpia-information-use", "article": 26, "paragraph": 9, "point": null, "actor": [ "deployer" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Where applicable, deployers must use Article 13 information to comply with data protection impact assessment duties under GDPR or Directive (EU) 2016/680.", "quote": "\"Where applicable, deployers of high-risk AI systems shall use the information provided under Article 13 of this Regulation to comply with their obligation to carry out a data protection impact assessment under Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Important where legal deployers must align AI Act information with GDPR or law-enforcement data protection impact assessments.", "cross_references": [ "Art. 13" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-9-dpia-information-use" }, { "obligation_id": "art-26-10-post-remote-biometric-authorisation", "article": 26, "paragraph": 10, "point": null, "actor": [ "deployer", "public-authority-deployer" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "Deployers using post-remote biometric identification for targeted criminal investigations must obtain ex ante or prompt binding judicial or administrative authorisation, with each use strictly necessary for a specific offence investigation.", "quote": "\"Without prejudice to Directive (EU) 2016/680, in the framework of an investigation for the targeted search of a person suspected or convicted of having committed a criminal offence, the deployer of a high-risk AI system for post-remote biometric identification shall request an authorisation, ex ante, or without undue delay and no later than 48 hours, by a judicial authority or\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Highly relevant to criminal investigations and judicial authorisation of post-remote biometric identification.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-10-post-remote-biometric-authorisation" }, { "obligation_id": "art-26-11-inform-natural-persons", "article": 26, "paragraph": 11, "point": null, "actor": [ "deployer" ], "obligation_type": "information-to-persons", "risk_tier": "high-risk", "summary": "Deployers of Annex III high-risk AI systems making or assisting decisions about natural persons must inform those persons that they are subject to use of the high-risk AI system.", "quote": "\"Without prejudice to Article 50 of this Regulation, deployers of high-risk AI systems referred to in Annex III that make decisions or assist in making decisions related to natural persons shall inform the natural persons that they are subject to the use of the high-risk AI system. For high-risk AI systems used for law enforcement purposes Article 13 of Directive\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Direct for high-risk legal or public-sector AI making or assisting decisions about natural persons, including judicial or administrative contexts.", "cross_references": [ "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-11-inform-natural-persons" }, { "obligation_id": "art-26-12-cooperate-authorities", "article": 26, "paragraph": 12, "point": null, "actor": [ "deployer" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Deployers must cooperate with relevant competent authorities in actions those authorities take concerning the high-risk AI system to implement the Regulation.", "quote": "\"Deployers shall cooperate with the relevant competent authorities in any action those authorities take in relation to the high-risk AI system in order to implement this Regulation.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "For Art. 6(1)/Annex I high-risk systems, Art. 113(c)(ii) as amended applies the corresponding obligation from 2028-08-02; Art. 111(2) gives public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal deployers must cooperate with regulators in actions concerning their high-risk AI systems.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_26", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-26#art-26-12-cooperate-authorities" }, { "obligation_id": "art-27-1-fundamental-rights-impact-assessment", "article": 27, "paragraph": 1, "point": null, "actor": [ "deployer", "public-authority-deployer" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Before deploying specified Article 6(2) high-risk AI systems, covered public-law bodies, private public-service entities and certain credit and insurance deployers must perform a fundamental-rights impact assessment.", "quote": "\"Prior to deploying a high-risk AI system referred to in Article 6(2), with the exception of high-risk AI systems intended to be used in the area listed in point 2 of Annex III, deployers that are bodies governed by public law, or are private entities providing public services, and deployers of high-risk AI systems referred to in points 5 (b)\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Direct for courts, public bodies and some financial or insurance deployers; judicial AI under Annex III point 8 can be covered when deployed by public-law bodies.", "cross_references": [ "Art. 6(2)", "Annex III point 5(b)", "Annex III point 5(c)", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_27", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-27#art-27-1-fundamental-rights-impact-assessment" }, { "obligation_id": "art-27-1-a-f-fria-contents", "article": 27, "paragraph": 1, "point": "a-f", "actor": [ "deployer", "public-authority-deployer" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "The FRIA must describe deployer processes, duration and frequency of use, affected persons or groups, specific harm risks, human oversight implementation and measures for materialised risks.", "quote": "\"a description of the deployer’s processes in which the high-risk AI system will be used in line with its intended purpose;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "FRIA contents are central to public-authority legal AI, including court or ADR contexts where natural persons may be affected.", "cross_references": [ "Art. 13", "Art. 14", "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_27", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-27#art-27-1-a-f-fria-contents" }, { "obligation_id": "art-27-2-first-use-updates", "article": 27, "paragraph": 2, "point": null, "actor": [ "deployer", "public-authority-deployer" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "The FRIA obligation applies to first use; deployers may rely on prior or provider assessments in similar cases but must update information when Article 27(1) elements change or become outdated.", "quote": "\"The obligation laid down in paragraph 1 applies to the first use of the high-risk AI system. The deployer may, in similar cases, rely on previously conducted fundamental rights impact assessments or existing impact assessments carried out by provider. If, during the use of the high-risk AI system, the deployer considers that any of the elements listed in paragraph 1\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Public legal deployers may reuse assessments for similar AI uses but must keep them current as system or context changes.", "cross_references": [ "Art. 27(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_27", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-27#art-27-2-first-use-updates" }, { "obligation_id": "art-27-3-notify-market-surveillance-authority", "article": 27, "paragraph": 3, "point": null, "actor": [ "deployer", "public-authority-deployer", "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "After performing a FRIA, the deployer must notify the market surveillance authority of results by submitting the completed Article 27(5) template, unless exempt under Article 46(1).", "quote": "\"Once the assessment referred to in paragraph 1 of this Article has been performed, the deployer shall notify the market surveillance authority of its results, submitting the filled-out template referred to in paragraph 5 of this Article as part of the notification. In the case referred to in Article 46(1), deployers may be exempt from that obligation to notify.\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Notification is directly relevant to public bodies and courts deploying covered high-risk legal AI.", "cross_references": [ "Art. 27(5)", "Art. 46(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_27", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-27#art-27-3-notify-market-surveillance-authority" }, { "obligation_id": "art-27-4-dpia-cross-references", "article": 27, "paragraph": 4, "point": null, "actor": [ "deployer", "public-authority-deployer" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Where Article 27 obligations are already met through a GDPR or law-enforcement DPIA, the deployer may include cross-references to relevant DPIA sections or include relevant parts in the FRIA.", "quote": "\"If any of the obligations laid down in this Article is already met through the data protection impact assessment conducted pursuant to Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680, the deployer may, when conducting the fundamental rights impact assessment referred to in paragraph 1 of this Article, include cross-references to the relevant sections of\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Important for legal deployers aligning AI fundamental-rights assessment with data protection impact assessment work.", "cross_references": [ "Regulation (EU) 2016/679 Art. 35", "Directive (EU) 2016/680 Art. 27" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_27", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-27#art-27-4-dpia-cross-references" }, { "obligation_id": "art-27-5-ai-office-template", "article": 27, "paragraph": 5, "point": null, "actor": [ "ai-office" ], "obligation_type": "support-measure", "risk_tier": "high-risk", "summary": "The AI Office must develop a questionnaire template, including through an automated tool, to help deployers comply with Article 27 and include DPIA cross-references or relevant DPIA parts where appropriate.", "quote": "\"The AI Office shall develop a template for a questionnaire, including through an automated tool, to facilitate deployers in complying with their obligations under this Article in a simplified manner. This template shall, where relevant, give deployers the possibility to include cross-references to the relevant sections of the data protection impact assessment or include relevant parts thereof in the fundamental\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended by Reg. (EU) 2026/1744", "transitional_note": "Art. 111(2) gives public-authority high-risk systems until 2030-08-02; systems placed on the market or put into service before the Chapter III date are covered only if significantly changed from that date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "The template can shape FRIA practice for courts, public authorities and legal-sector deployers of covered high-risk AI.", "cross_references": [ "Art. 27(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_27", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-27#art-27-5-ai-office-template" }, { "obligation_id": "art-28-1-designate-notifying-authority", "article": 28, "paragraph": 1, "point": null, "actor": [ "member-state", "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Each Member State must designate or establish at least one notifying authority responsible for conformity-assessment-body assessment, designation, notification and monitoring procedures, developed in cooperation with other Member States’ authorities.", "quote": "\"Each Member State shall designate or establish at least one notifying authority responsible for setting up and carrying out the necessary procedures for the assessment, designation and notification of conformity assessment bodies and for their monitoring. Those procedures shall be developed in cooperation between the notifying authorities of all Member States.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional conformity-assessment governance; relevant to legal-AI providers only indirectly through the availability and competence of notified bodies.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_28", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-28#art-28-1-designate-notifying-authority" }, { "obligation_id": "art-28-2-national-accreditation-body-option", "article": 28, "paragraph": 2, "point": null, "actor": [ "member-state", "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Member States may decide that Article 28(1) assessment and monitoring are carried out by a national accreditation body under Regulation (EC) No 765/2008.", "quote": "\"Member States may decide that the assessment and monitoring referred to in paragraph 1 is to be carried out by a national accreditation body within the meaning of, and in accordance with, Regulation (EC) No 765/2008.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional conformity-assessment governance; relevant to legal-AI providers only indirectly through the availability and competence of notified bodies.", "cross_references": [ "Regulation (EC) No 765/2008" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_28", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-28#art-28-2-national-accreditation-body-option" }, { "obligation_id": "art-28-3-no-conflict-impartiality", "article": 28, "paragraph": 3, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Notifying authorities must be established, organised and operated to avoid conflicts of interest with conformity assessment bodies and safeguard objectivity and impartiality.", "quote": "\"Notifying authorities shall be established, organised and operated in such a way that no conflict of interest arises with conformity assessment bodies, and that the objectivity and impartiality of their activities are safeguarded.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional conformity-assessment governance; relevant to legal-AI providers only indirectly through the availability and competence of notified bodies.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_28", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-28#art-28-3-no-conflict-impartiality" }, { "obligation_id": "art-28-4-separate-decision-personnel", "article": 28, "paragraph": 4, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Notifying authorities must be organised so notification decisions are taken by competent persons different from those who assessed the conformity assessment bodies.", "quote": "\"Notifying authorities shall be organised in such a way that decisions relating to the notification of conformity assessment bodies are taken by competent persons different from those who carried out the assessment of those bodies.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional conformity-assessment governance; relevant to legal-AI providers only indirectly through the availability and competence of notified bodies.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_28", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-28#art-28-4-separate-decision-personnel" }, { "obligation_id": "art-28-5-no-conformity-or-consultancy-services", "article": 28, "paragraph": 5, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Notifying authorities must not offer or provide conformity-assessment activities or consultancy services on a commercial or competitive basis.", "quote": "\"Notifying authorities shall offer or provide neither any activities that conformity assessment bodies perform, nor any consultancy services on a commercial or competitive basis.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional conformity-assessment governance; relevant to legal-AI providers only indirectly through the availability and competence of notified bodies.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_28", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-28#art-28-5-no-conformity-or-consultancy-services" }, { "obligation_id": "art-28-6-confidentiality", "article": 28, "paragraph": 6, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Notifying authorities must safeguard the confidentiality of information they obtain in accordance with Article 78.", "quote": "\"Notifying authorities shall safeguard the confidentiality of the information that they obtain, in accordance with Article 78.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional conformity-assessment governance; relevant to legal-AI providers only indirectly through the availability and competence of notified bodies.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_28", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-28#art-28-6-confidentiality" }, { "obligation_id": "art-28-7-competent-personnel", "article": 28, "paragraph": 7, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Notifying authorities must have enough competent personnel with necessary expertise, where applicable including information technologies, AI, law and fundamental-rights supervision.", "quote": "\"Notifying authorities shall have an adequate number of competent personnel at their disposal for the proper performance of their tasks. Competent personnel shall have the necessary expertise, where applicable, for their function, in fields such as information technologies, AI and law, including the supervision of fundamental rights.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Institutional conformity-assessment governance; relevant to legal-AI providers only indirectly through the availability and competence of notified bodies.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_28", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-28#art-28-7-competent-personnel" }, { "obligation_id": "art-28-8-single-application-unified-assessment", "article": 28, "paragraph": 8, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Notifying authorities for AI systems covered by Annex I Section A harmonisation law must ensure applicants can use a single application and unified assessment where that law provides it, and must cooperate with corresponding authorities.", "quote": "\"Notifying authorities designated pursuant to this Regulation that are responsible for AI systems covered by the Union harmonisation legislation listed in Section A of Annex I shall ensure that the conformity assessment body that applies for designation both pursuant to this Regulation and the Union harmonisation legislation listed in Section A of Annex I is provided with the possibility to\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional conformity-assessment governance; relevant to legal-AI providers only indirectly through the availability and competence of notified bodies.", "cross_references": [ "Annex I Section A" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_28", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-28#art-28-8-single-application-unified-assessment" }, { "obligation_id": "art-28-9-annex-i-authority-default", "article": 28, "paragraph": 9, "point": null, "actor": [ "member-state", "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "A notifying authority designated under Annex I Section A harmonisation law is also the notifying authority for the single application and unified assessment procedure unless the Member State designates another AI Act authority.", "quote": "\"A notifying authority that has been designated pursuant to the Union harmonisation legislation listed in Section A of Annex I is also the notifying authority for the application of the single application and unified assessment procedure referred to in paragraph 8, unless the Member State designates another notifying authority for this Regulation.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": "Inserted by Regulation (EU) 2026/1744, in force 2026-07-27.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional conformity-assessment governance; relevant to legal-AI providers only indirectly through the availability and competence of notified bodies.", "cross_references": [ "Annex I Section A" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_28", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-28#art-28-9-annex-i-authority-default" }, { "obligation_id": "art-29-1-application-submit", "article": 29, "paragraph": 1, "point": null, "actor": [ "notified-body", "notifying-authority" ], "obligation_type": "requirement", "risk_tier": "not-tier-specific", "summary": "A conformity assessment body seeking notification must submit its application to the notifying authority of the Member State where it is established.", "quote": "\"Conformity assessment bodies shall submit an application for notification to the notifying authority of the Member State in which they are established.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect for legal-AI vendors because it governs bodies that may assess high-risk AI conformity.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_29", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-29#art-29-1-application-submit" }, { "obligation_id": "art-29-2-application-evidence", "article": 29, "paragraph": 2, "point": null, "actor": [ "notified-body", "notifying-authority" ], "obligation_type": "documentation", "risk_tier": "not-tier-specific", "summary": "The notification application must describe conformity assessment activities, modules and AI-system types, and include an accreditation certificate where one exists.", "quote": "\"The application for notification shall be accompanied by a description of the conformity assessment activities, the conformity assessment module or modules and the types of AI systems for which the conformity assessment body claims to be competent, as well as by an accreditation certificate, where one exists, issued by a national accreditation body attesting that the conformity assessment body fulfils\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect for legal-AI vendors because it governs bodies that may assess high-risk AI conformity.", "cross_references": [ "Art. 31" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_29", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-29#art-29-2-application-evidence" }, { "obligation_id": "art-29-3-no-accreditation-documentary-evidence", "article": 29, "paragraph": 3, "point": null, "actor": [ "notified-body", "notifying-authority" ], "obligation_type": "documentation", "risk_tier": "not-tier-specific", "summary": "If no accreditation certificate is available, the conformity assessment body must provide documentary evidence needed to verify, recognise and regularly monitor compliance with Article 31 requirements.", "quote": "\"Where the conformity assessment body concerned cannot provide an accreditation certificate, it shall provide the notifying authority with all the documentary evidence necessary for the verification, recognition and regular monitoring of its compliance with the requirements laid down in Article 31.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect for legal-AI vendors because it governs bodies that may assess high-risk AI conformity.", "cross_references": [ "Art. 31" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_29", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-29#art-29-3-no-accreditation-documentary-evidence" }, { "obligation_id": "art-29-4-other-harmonisation-documents", "article": 29, "paragraph": 4, "point": null, "actor": [ "notified-body", "notifying-authority" ], "obligation_type": "documentation", "risk_tier": "not-tier-specific", "summary": "Notified bodies designated under other Union harmonisation legislation may use documents and certificates linked to those designations to support and expedite designation under this Regulation, as appropriate.", "quote": "\"For notified bodies which are designated pursuant to any other Union harmonisation legislation, all documents and certificates linked to those designations may be used to support and expedite their designation procedure under this Regulation, as appropriate.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect for legal-AI vendors because it governs bodies that may assess high-risk AI conformity.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_29", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-29#art-29-4-other-harmonisation-documents" }, { "obligation_id": "art-30-2-annex14-annex-i-code", "article": 30, "paragraph": 2, "point": "Annex XIV", "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "Annex XIV includes a notification-designation category for AI systems subject to Annex I.", "quote": "\"AI systems subject to Annex I\"", "applies_from": "2026-07-27", "applies_from_basis": "Reg. (EU) 2026/1744 in-force date; Annex XIV inserted for Art. 30(2)", "transitional_note": "Annex XIV was inserted by Regulation (EU) 2026/1744 and is treated as applying from that Regulation’s 27 July 2026 in-force date.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This mostly concerns product-regulated high-risk AI outside ordinary legal practice.", "cross_references": [ "Annex I", "Art. 30(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#anx_XIV", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-30#art-30-2-annex14-annex-i-code" }, { "obligation_id": "art-30-2-annex14-annex-iii-1-code", "article": 30, "paragraph": 2, "point": "Annex XIV", "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "Annex XIV includes a notification-designation category for AI systems subject to Annex III point 1.", "quote": "\"AI systems subject to point 1 of Annex III\"", "applies_from": "2026-07-27", "applies_from_basis": "Reg. (EU) 2026/1744 in-force date; Annex XIV inserted for Art. 30(2)", "transitional_note": "Annex XIV was inserted by Regulation (EU) 2026/1744 and is treated as applying from that Regulation’s 27 July 2026 in-force date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This may affect notified-body scope for biometric high-risk systems used in public or legal environments.", "cross_references": [ "Annex III point 1", "Art. 30(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#anx_XIV", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-30#art-30-2-annex14-annex-iii-1-code" }, { "obligation_id": "art-30-2-annex14-application-use", "article": 30, "paragraph": 2, "point": "Annex XIV", "actor": [ "other" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Conformity assessment bodies must use the Annex XIV lists when specifying AI-system types in applications for designation under Article 29.", "quote": "\"Conformity assessment bodies shall use the lists of codes, categories and corresponding types of AI systems set out in this Annex when specifying the types of AI systems in the application for designation referred to in Article 29.\"", "applies_from": "2026-07-27", "applies_from_basis": "Reg. (EU) 2026/1744 in-force date; Annex XIV inserted for Art. 30(2)", "transitional_note": "Annex XIV was inserted by Regulation (EU) 2026/1744 and is treated as applying from that Regulation’s 27 July 2026 in-force date.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This affects conformity assessment bodies rather than legal practitioners directly.", "cross_references": [ "Art. 29", "Art. 30(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#anx_XIV", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-30#art-30-2-annex14-application-use" }, { "obligation_id": "art-30-2-annex14-designated-bodies", "article": 30, "paragraph": 2, "point": "Annex XIV", "actor": [ "other", "notified-body" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Annex XIV explains that only conformity assessment bodies designated under the AI Act may carry out high-risk AI conformity assessments, and only for activities related to the relevant AI-system types.", "quote": "\"Only conformity assessment bodies that have been designated in accordance with this Regulation may carry out conformity assessments\"", "applies_from": "2026-07-27", "applies_from_basis": "Reg. (EU) 2026/1744 in-force date; Annex XIV inserted for Art. 30(2)", "transitional_note": "Annex XIV was inserted by Regulation (EU) 2026/1744 and is treated as applying from that Regulation’s 27 July 2026 in-force date.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is notified-body infrastructure that indirectly affects high-risk legal-AI providers needing conformity assessment.", "cross_references": [ "Art. 30(2)", "Art. 31" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#anx_XIV", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-30#art-30-2-annex14-designated-bodies" }, { "obligation_id": "art-30-2-annex14-scope-codes", "article": 30, "paragraph": 2, "point": "Annex XIV", "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "Annex XIV states that its list of codes, categories and corresponding AI-system types sets the scope of notified-body designation under Article 30.", "quote": "\"The list of codes, categories, and corresponding types of AI systems sets the scope of the designation of conformity assessment bodies notified under Article 30.\"", "applies_from": "2026-07-27", "applies_from_basis": "Reg. (EU) 2026/1744 in-force date; Annex XIV inserted for Art. 30(2)", "transitional_note": "Annex XIV was inserted by Regulation (EU) 2026/1744 and is treated as applying from that Regulation’s 27 July 2026 in-force date.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Designation scope indirectly affects legal-AI providers seeking a notified body.", "cross_references": [ "Art. 30" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#anx_XIV", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-30#art-30-2-annex14-scope-codes" }, { "obligation_id": "art-30-2-annex14-technology-codes", "article": 30, "paragraph": 2, "point": "Annex XIV", "actor": [ "notifying-authority" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "Annex XIV establishes technology-specific codes for symbolic AI and expert systems, machine learning excluding generative AI and GPAI systems, GPAI or generative-AI-based systems, and emerging AI technologies.", "quote": "\"AI technology-specific codes\"", "applies_from": "2026-07-27", "applies_from_basis": "Reg. (EU) 2026/1744 in-force date; Annex XIV inserted for Art. 30(2)", "transitional_note": "Annex XIV was inserted by Regulation (EU) 2026/1744 and is treated as applying from that Regulation’s 27 July 2026 in-force date.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI vendors may rely on notified bodies designated for relevant AI technologies, including expert systems and GPAI-based systems.", "cross_references": [ "Art. 30(2)", "Annex XIV section 3" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#anx_XIV", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-30#art-30-2-annex14-technology-codes" }, { "obligation_id": "art-31-1", "article": 31, "paragraph": 1, "point": null, "actor": [ "notified-body" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "A notified body must be established under Member State national law and have legal personality.", "quote": "\"A notified body shall be established under the national law of a Member State and shall have legal personality.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-1" }, { "obligation_id": "art-31-2", "article": 31, "paragraph": 2, "point": null, "actor": [ "notified-body" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "Notified bodies must meet organisational, quality management, resource, process and cybersecurity requirements necessary to fulfil their tasks.", "quote": "\"Notified bodies shall satisfy the organisational, quality management, resources and process requirements that are necessary to fulfil their tasks, as well as suitable cybersecurity requirements.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-2" }, { "obligation_id": "art-31-3", "article": 31, "paragraph": 3, "point": null, "actor": [ "notified-body" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "A notified body’s structure, responsibilities, reporting lines and operation must ensure confidence in performance and conformity assessment results.", "quote": "\"The organisational structure, allocation of responsibilities, reporting lines and operation of notified bodies shall ensure confidence in their performance, and in the results of the conformity assessment activities that the notified bodies conduct.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-3" }, { "obligation_id": "art-31-4", "article": 31, "paragraph": 4, "point": null, "actor": [ "notified-body" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Notified bodies must remain independent from the high-risk AI provider, other economically interested operators and provider competitors.", "quote": "\"Notified bodies shall be independent of the provider of a high-risk AI system in relation to which they perform conformity assessment activities. Notified bodies shall also be independent of any other operator having an economic interest in high-risk AI systems assessed, as well as of any competitors of the provider. This shall\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-4" }, { "obligation_id": "art-31-5", "article": 31, "paragraph": 5, "point": null, "actor": [ "notified-body" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "A conformity assessment body, top management and assessment personnel must avoid direct involvement, representation and activities conflicting with independence or integrity.", "quote": "\"Neither a conformity assessment body, its top-level management nor the personnel responsible for carrying out its conformity assessment tasks shall be directly involved in the design, development, marketing or use of high-risk AI systems, nor shall they represent the parties engaged in those activities. They shall not engage in any activity that\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-5" }, { "obligation_id": "art-31-6", "article": 31, "paragraph": 6, "point": null, "actor": [ "notified-body" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "Notified bodies must organise and operate to safeguard independence, objectivity and impartiality, and document procedures applying impartiality principles.", "quote": "\"Notified bodies shall be organised and operated so as to safeguard the independence, objectivity and impartiality of their activities. Notified bodies shall document and implement a structure and procedures to safeguard impartiality and to promote and apply the principles of impartiality throughout their organisation, personnel and assessment activities.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-6" }, { "obligation_id": "art-31-7", "article": 31, "paragraph": 7, "point": null, "actor": [ "notified-body" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Notified bodies must maintain documented confidentiality procedures and bind staff to professional secrecy for information obtained in conformity assessment tasks.", "quote": "\"Notified bodies shall have documented procedures in place ensuring that their personnel, committees, subsidiaries, subcontractors and any associated body or personnel of external bodies maintain, in accordance with Article 78, the confidentiality of the information which comes into their possession during the performance of conformity assessment activities, except when its disclosure is\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-7" }, { "obligation_id": "art-31-8", "article": 31, "paragraph": 8, "point": null, "actor": [ "notified-body" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Notified bodies must have activity procedures that account for provider size, sector, structure and AI-system complexity.", "quote": "\"Notified bodies shall have procedures for the performance of activities which take due account of the size of a provider, the sector in which it operates, its structure, and the degree of complexity of the AI system concerned.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-8" }, { "obligation_id": "art-31-9", "article": 31, "paragraph": 9, "point": null, "actor": [ "notified-body" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Notified bodies must take out appropriate liability insurance unless the Member State assumes or bears the conformity-assessment liability.", "quote": "\"Notified bodies shall take out appropriate liability insurance for their conformity assessment activities, unless liability is assumed by the Member State in which they are established in accordance with national law or that Member State is itself directly responsible for the conformity assessment.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-9" }, { "obligation_id": "art-31-10", "article": 31, "paragraph": 10, "point": null, "actor": [ "notified-body" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Notified bodies must be capable of carrying out their Regulation tasks with professional integrity and competence in the specific field.", "quote": "\"Notified bodies shall be capable of carrying out all their tasks under this Regulation with the highest degree of professional integrity and the requisite competence in the specific field, whether those tasks are carried out by notified bodies themselves or on their behalf and under their responsibility.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-10" }, { "obligation_id": "art-31-11", "article": 31, "paragraph": 11, "point": null, "actor": [ "notified-body" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Notified bodies must have sufficient internal competence and permanent administrative, technical, legal and scientific personnel for relevant AI-system assessments.", "quote": "\"Notified bodies shall have sufficient internal competences to be able effectively to evaluate the tasks conducted by external parties on their behalf. The notified body shall have permanent availability of sufficient administrative, technical, legal and scientific personnel who possess experience and knowledge relating to the relevant types of AI systems, data and\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-11" }, { "obligation_id": "art-31-12", "article": 31, "paragraph": 12, "point": null, "actor": [ "notified-body" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Notified bodies must participate in Article 38 coordination and engage with, or stay current on, relevant European standardisation organisations.", "quote": "\"Notified bodies shall participate in coordination activities as referred to in Article 38. They shall also take part directly, or be represented in, European standardisation organisations, or ensure that they are aware and up to date in respect of relevant standards.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 38" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_31", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-31#art-31-12" }, { "obligation_id": "art-32-0", "article": 32, "paragraph": null, "point": null, "actor": [ "other" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "A conformity assessment body that demonstrates conformity with relevant harmonised standards is presumed to comply with Article 31 where standards cover the requirements.", "quote": "\"Where a conformity assessment body demonstrates its conformity with the criteria laid down in the relevant harmonised standards or parts thereof, the references of which have been published in the Official Journal of the European Union, it shall be presumed to comply with the requirements set out in Article 31 in so\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 31", "Regulation (EU) No 1025/2012" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_32", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-32#art-32-0" }, { "obligation_id": "art-33-1", "article": 33, "paragraph": 1, "point": null, "actor": [ "notified-body" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "A notified body using a subcontractor or subsidiary must ensure it meets Article 31 requirements and inform the notifying authority.", "quote": "\"Where a notified body subcontracts specific tasks connected with the conformity assessment or has recourse to a subsidiary, it shall ensure that the subcontractor or the subsidiary meets the requirements laid down in Article 31, and shall inform the notifying authority accordingly.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 31" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_33", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-33#art-33-1" }, { "obligation_id": "art-33-2", "article": 33, "paragraph": 2, "point": null, "actor": [ "notified-body" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Notified bodies remain fully responsible for tasks performed by their subcontractors or subsidiaries.", "quote": "\"Notified bodies shall take full responsibility for the tasks performed by any subcontractors or subsidiaries.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_33", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-33#art-33-2" }, { "obligation_id": "art-33-3", "article": 33, "paragraph": 3, "point": null, "actor": [ "notified-body" ], "obligation_type": "information-to-persons", "risk_tier": "high-risk", "summary": "Subcontracted or subsidiary activities require provider agreement, and notified bodies must publish a list of subsidiaries.", "quote": "\"Activities may be subcontracted or carried out by a subsidiary only with the agreement of the provider. Notified bodies shall make a list of their subsidiaries publicly available.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_33", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-33#art-33-3" }, { "obligation_id": "art-33-4", "article": 33, "paragraph": 4, "point": null, "actor": [ "notified-body" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Notified bodies must keep subcontractor or subsidiary qualification and work documents available to the notifying authority for five years after subcontracting ends.", "quote": "\"The relevant documents concerning the assessment of the qualifications of the subcontractor or the subsidiary and the work carried out by them under this Regulation shall be kept at the disposal of the notifying authority for a period of five years from the termination date of the subcontracting.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_33", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-33#art-33-4" }, { "obligation_id": "art-34-1", "article": 34, "paragraph": 1, "point": null, "actor": [ "notified-body" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Notified bodies must verify high-risk AI-system conformity using the Article 43 conformity assessment procedures.", "quote": "\"Notified bodies shall verify the conformity of high-risk AI systems in accordance with the conformity assessment procedures set out in Article 43.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 43" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_34", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-34#art-34-1" }, { "obligation_id": "art-34-2", "article": 34, "paragraph": 2, "point": null, "actor": [ "notified-body" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Notified bodies must avoid unnecessary provider burdens while preserving the rigour and protection required for Regulation compliance.", "quote": "\"Notified bodies shall avoid unnecessary burdens for providers when performing their activities, and take due account of the size of the provider, the sector in which it operates, its structure and the degree of complexity of the high-risk AI system concerned, in particular in view of minimising administrative burdens and compliance costs\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_34", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-34#art-34-2" }, { "obligation_id": "art-34-3", "article": 34, "paragraph": 3, "point": null, "actor": [ "notified-body" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Notified bodies must make available and submit relevant documentation to the notifying authority on request for assessment, designation, notification and monitoring.", "quote": "\"Notified bodies shall make available and submit upon request all relevant documentation, including the providers’ documentation, to the notifying authority referred to in Article 28 to allow that authority to conduct its assessment, designation, notification and monitoring activities, and to facilitate the assessment outlined in this Section.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 28" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_34", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-34#art-34-3" }, { "obligation_id": "art-35-1", "article": 35, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "The Commission must assign a single identification number to every notified body, including bodies notified under more than one Union act.", "quote": "\"The Commission shall assign a single identification number to each notified body, even where a body is notified under more than one Union act.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_35", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-35#art-35-1" }, { "obligation_id": "art-35-2", "article": 35, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "The Commission must publish and keep current the list of notified bodies, their identification numbers and notified activities.", "quote": "\"The Commission shall make publicly available the list of the bodies notified under this Regulation, including their identification numbers and the activities for which they have been notified. The Commission shall ensure that the list is kept up to date.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_35", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-35#art-35-2" }, { "obligation_id": "art-36-1-notify-notification-changes", "article": 36, "paragraph": 1, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "A notifying authority must notify the Commission and other Member States of relevant changes to notified-body notifications through the Article 30(2) electronic notification tool.", "quote": "\"The notifying authority shall notify the Commission and the other Member States of any relevant changes to the notification of a notified body via the electronic notification tool referred to in Article 30(2).\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notified-body governance; legal-AI providers may be affected indirectly if a notified body’s status changes during conformity assessment.", "cross_references": [ "Art. 30(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_36", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-36#art-36-1-notify-notification-changes" }, { "obligation_id": "art-36-2-scope-extensions-follow-articles-29-30", "article": 36, "paragraph": 2, "point": null, "actor": [ "notifying-authority", "notified-body" ], "obligation_type": "requirement", "risk_tier": "not-tier-specific", "summary": "Extensions of a notified body’s notification scope must follow the procedures in Articles 29 and 30.", "quote": "\"The procedures laid down in Articles 29 and 30 shall apply to extensions of the scope of the notification.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notified-body governance; legal-AI providers may be affected indirectly if a notified body’s status changes during conformity assessment.", "cross_references": [ "Art. 29", "Art. 30" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_36", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-36#art-36-2-scope-extensions-follow-articles-29-30" }, { "obligation_id": "art-36-3-cessation-certificates-withdrawal", "article": 36, "paragraph": 3, "point": null, "actor": [ "notified-body", "notifying-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "A notified body ceasing conformity assessment activity must inform the authority and providers, certificates may remain valid for nine months if another notified body assumes responsibility and completes assessment, and the authority must withdraw designation.", "quote": "\"Where a notified body decides to cease its conformity assessment activities, it shall inform the notifying authority and the providers concerned as soon as possible and, in the case of a planned cessation, at least one year before ceasing its activities. The certificates of the notified body may remain valid for a period of nine months after cessation of the\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notified-body governance; legal-AI providers may be affected indirectly if a notified body’s status changes during conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_36", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-36#art-36-3-cessation-certificates-withdrawal" }, { "obligation_id": "art-36-4-investigate-restrict-suspend-withdraw", "article": 36, "paragraph": 4, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "A notifying authority with sufficient reason to doubt Article 31 compliance or obligation fulfilment must investigate, hear the body and restrict, suspend or withdraw designation as appropriate, informing the Commission and Member States.", "quote": "\"Where a notifying authority has sufficient reason to consider that a notified body no longer meets the requirements laid down in Article 31, or that it is failing to fulfil its obligations, the notifying authority shall without delay investigate the matter with the utmost diligence. In that context, it shall inform the notified body concerned about the objections raised and\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notified-body governance; legal-AI providers may be affected indirectly if a notified body’s status changes during conformity assessment.", "cross_references": [ "Art. 31" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_36", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-36#art-36-4-investigate-restrict-suspend-withdraw" }, { "obligation_id": "art-36-5-inform-providers-within-ten-days", "article": 36, "paragraph": 5, "point": null, "actor": [ "notified-body" ], "obligation_type": "information-to-persons", "risk_tier": "not-tier-specific", "summary": "A notified body whose designation is suspended, restricted or fully or partly withdrawn must inform concerned providers within 10 days.", "quote": "\"Where its designation has been suspended, restricted, or fully or partially withdrawn, the notified body shall inform the providers concerned within 10 days.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notified-body governance; legal-AI providers may be affected indirectly if a notified body’s status changes during conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_36", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-36#art-36-5-inform-providers-within-ten-days" }, { "obligation_id": "art-36-6-keep-files-available", "article": 36, "paragraph": 6, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "record-keeping", "risk_tier": "not-tier-specific", "summary": "When designation is restricted, suspended or withdrawn, the notifying authority must ensure the notified body’s files are kept and made available to other notifying authorities and market surveillance authorities on request.", "quote": "\"In the event of the restriction, suspension or withdrawal of a designation, the notifying authority shall take appropriate steps to ensure that the files of the notified body concerned are kept, and to make them available to notifying authorities in other Member States and to market surveillance authorities at their request.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notified-body governance; legal-AI providers may be affected indirectly if a notified body’s status changes during conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_36", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-36#art-36-6-keep-files-available" }, { "obligation_id": "art-36-7-assess-certificates-and-inform", "article": 36, "paragraph": 7, "point": null, "actor": [ "notifying-authority", "national-competent-authority" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "After designation restriction, suspension or withdrawal, the notifying authority must assess certificate impacts, report to the Commission and Member States, require undue certificates to be suspended or withdrawn, and provide certificate information for risk measures.", "quote": "\"In the event of the restriction, suspension or withdrawal of a designation, the notifying authority shall:\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notified-body governance; legal-AI providers may be affected indirectly if a notified body’s status changes during conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_36", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-36#art-36-7-assess-certificates-and-inform" }, { "obligation_id": "art-36-8-suspended-restricted-certificate-validity", "article": 36, "paragraph": 8, "point": null, "actor": [ "notifying-authority", "notified-body", "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "not-tier-specific", "summary": "Except for unduly issued certificates, certificates remain valid after suspension or restriction only where Article 36(8) no-risk, remediation, monitoring or temporary-assumption conditions are met.", "quote": "\"With the exception of certificates unduly issued, and where a designation has been suspended or restricted, the certificates shall remain valid in one of the following circumstances:\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notified-body governance; legal-AI providers may be affected indirectly if a notified body’s status changes during conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_36", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-36#art-36-8-suspended-restricted-certificate-validity" }, { "obligation_id": "art-36-9-withdrawn-certificate-validity", "article": 36, "paragraph": 9, "point": null, "actor": [ "national-competent-authority", "notified-body" ], "obligation_type": "derogation-or-exemption", "risk_tier": "not-tier-specific", "summary": "Except for unduly issued certificates, certificates remain valid for nine months after designation withdrawal only where the national competent authority confirms no risk and another notified body assumes responsibility and completes assessment within 12 months.", "quote": "\"With the exception of certificates unduly issued, and where a designation has been withdrawn, the certificates shall remain valid for a period of nine months under the following circumstances:\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notified-body governance; legal-AI providers may be affected indirectly if a notified body’s status changes during conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_36", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-36#art-36-9-withdrawn-certificate-validity" }, { "obligation_id": "art-37-1", "article": 37, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "The Commission must investigate cases where there are reasons to doubt a notified body’s competence or continued fulfilment of requirements and responsibilities.", "quote": "\"The Commission shall, where necessary, investigate all cases where there are reasons to doubt the competence of a notified body or the continued fulfilment by a notified body of the requirements laid down in Article 31 and of its applicable responsibilities.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 31" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_37", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-37#art-37-1" }, { "obligation_id": "art-37-2", "article": 37, "paragraph": 2, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "The notifying authority must provide the Commission, on request, information relating to notification or maintenance of the body’s competence.", "quote": "\"The notifying authority shall provide the Commission, on request, with all relevant information relating to the notification or the maintenance of the competence of the notified body concerned.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_37", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-37#art-37-2" }, { "obligation_id": "art-37-3", "article": 37, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "The Commission must ensure sensitive information obtained in Article 37 investigations is treated confidentially under Article 78.", "quote": "\"The Commission shall ensure that all sensitive information obtained in the course of its investigations pursuant to this Article is treated confidentially in accordance with Article 78.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_37", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-37#art-37-3" }, { "obligation_id": "art-37-4", "article": 37, "paragraph": 4, "point": null, "actor": [ "commission", "member-state" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "If the Commission finds a notified body non-compliant, it must inform the notifying Member State and request corrective measures; failing that, it may suspend, restrict or withdraw designation by implementing act.", "quote": "\"Where the Commission ascertains that a notified body does not meet or no longer meets the requirements for its notification, it shall inform the notifying Member State accordingly and request it to take the necessary corrective measures, including the suspension or withdrawal of the notification if necessary. Where the Member State fails\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 98(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_37", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-37#art-37-4" }, { "obligation_id": "art-38-1", "article": 38, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "The Commission must ensure appropriate coordination and cooperation between notified bodies through a properly operated sectoral group.", "quote": "\"The Commission shall ensure that, with regard to high-risk AI systems, appropriate coordination and cooperation between notified bodies active in the conformity assessment procedures pursuant to this Regulation are put in place and properly operated in the form of a sectoral group of notified bodies.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_38", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-38#art-38-1" }, { "obligation_id": "art-38-2", "article": 38, "paragraph": 2, "point": null, "actor": [ "notifying-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Each notifying authority must ensure that the bodies it notified participate in the sectoral group directly or through representatives.", "quote": "\"Each notifying authority shall ensure that the bodies notified by it participate in the work of a group referred to in paragraph 1, directly or through designated representatives.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_38", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-38#art-38-2" }, { "obligation_id": "art-38-3", "article": 38, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "The Commission must provide for exchange of knowledge and best practices between notifying authorities.", "quote": "\"The Commission shall provide for the exchange of knowledge and best practices between notifying authorities.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_38", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-38#art-38-3" }, { "obligation_id": "art-39-0", "article": 39, "paragraph": null, "point": null, "actor": [ "other" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "A third-country conformity assessment body may be authorised to perform notified-body activities only under an applicable Union agreement and Article 31 or equivalent compliance.", "quote": "\"Conformity assessment bodies established under the law of a third country with which the Union has concluded an agreement may be authorised to carry out the activities of notified bodies under this Regulation, provided that they meet the requirements laid down in Article 31 or they ensure an equivalent level of compliance.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 31" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_39", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-39#art-39-0" }, { "obligation_id": "art-40-1", "article": 40, "paragraph": 1, "point": null, "actor": [ "provider", "gpai-provider" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "High-risk AI systems and general-purpose AI models that conform to cited harmonised standards are presumed compliant only to the extent those standards cover the relevant requirements or obligations.", "quote": "\"High-risk AI systems or general-purpose AI models which are in conformity with harmonised standards or parts thereof the references of which have been published in the Official Journal of the European Union in accordance with Regulation (EU) No 1025/2012 shall be presumed to be in conformity\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI vendors using harmonised standards to evidence conformity for high-risk or GPAI products.", "cross_references": [ "Regulation (EU) No 1025/2012", "Chapter III Section 2", "Chapter V Sections 2 and 3" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_40", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-40#art-40-1" }, { "obligation_id": "art-40-2", "article": 40, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The Commission must issue standardisation requests for high-risk-system requirements and GPAI obligations, including resource-performance and energy-efficient model-development deliverables, after consulting the Board and stakeholders.", "quote": "\"the Commission shall issue, without undue delay, standardisation requests covering all requirements set out in Section 2 of this Chapter and, as applicable, standardisation requests covering obligations set out in Chapter V, Sections 2 and 3, of this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional standard-setting function with indirect impact on legal-AI vendors.", "cross_references": [ "Art. 10 Regulation (EU) No 1025/2012", "AI Board", "Advisory forum" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_40", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-40#art-40-2" }, { "obligation_id": "art-40-3", "article": 40, "paragraph": 3, "point": null, "actor": [ "other" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Participants in AI standardisation processes must seek to promote innovation, legal certainty, Union competitiveness, global cooperation, and balanced multi-stakeholder governance in line with Regulation (EU) No 1025/2012.", "quote": "\"The participants in the standardisation process shall seek to promote investment and innovation in AI, including through increasing legal certainty, as well as the competitiveness and growth of the Union market\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect governance of standards that legal-AI vendors may later use.", "cross_references": [ "Regulation (EU) No 1025/2012" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_40", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-40#art-40-3" }, { "obligation_id": "art-41-1", "article": 41, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The Commission may establish common specifications for high-risk requirements or GPAI obligations only when the specified standardisation-request and publication conditions are fulfilled.", "quote": "\"The Commission may adopt, implementing acts establishing common specifications for the requirements set out in Section 2 of this Chapter or, as applicable, for the obligations set out in Sections 2 and 3 of Chapter V\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional fall-back standard-setting with indirect impact on legal-AI vendors.", "cross_references": [ "Chapter III Section 2", "Chapter V Sections 2 and 3", "Regulation (EU) No 1025/2012" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_41", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-41#art-41-1" }, { "obligation_id": "art-41-2", "article": 41, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Before preparing a draft implementing act for common specifications, the Commission must inform the committee under Article 22 of Regulation (EU) No 1025/2012 that it considers the Article 41 conditions met.", "quote": "\"Before preparing a draft implementing act, the Commission shall inform the committee referred to in Article 22 of Regulation (EU) No 1025/2012 that it considers the conditions laid down in paragraph 1 of this Article to be fulfilled\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Procedural governance step with indirect relevance to legal-AI vendors.", "cross_references": [ "Art. 22 Regulation (EU) No 1025/2012" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_41", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-41#art-41-2" }, { "obligation_id": "art-41-3", "article": 41, "paragraph": 3, "point": null, "actor": [ "provider", "gpai-provider" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "High-risk AI systems or GPAI models conforming to common specifications are presumed compliant with covered high-risk requirements or GPAI obligations to the extent those specifications cover them.", "quote": "\"High-risk AI systems or general-purpose AI models which are in conformity with the common specifications referred to in paragraph 1, or parts of those specifications, shall be presumed to be in conformity\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI vendors may use common specifications as evidence of conformity where no harmonised standard is available.", "cross_references": [ "Chapter III Section 2", "Chapter V Sections 2 and 3" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_41", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-41#art-41-3" }, { "obligation_id": "art-41-4", "article": 41, "paragraph": 4, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "When a harmonised standard covering the same requirements or obligations is published, the Commission must repeal the overlapping common-specification implementing acts or parts of them.", "quote": "\"When reference to a harmonised standard is published in the Official Journal of the European Union, the Commission shall repeal the implementing acts referred to in paragraph 1, or parts thereof which cover the same requirements\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional maintenance of conformity tools that indirectly affects legal-AI vendors.", "cross_references": [ "Regulation (EU) No 1025/2012" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_41", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-41#art-41-4" }, { "obligation_id": "art-41-5", "article": 41, "paragraph": 5, "point": null, "actor": [ "provider", "gpai-provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Providers that do not comply with common specifications must justify that their technical solutions meet the relevant high-risk requirements or GPAI obligations at an equivalent level.", "quote": "\"Where providers of high-risk AI systems or general-purpose AI models do not comply with the common specifications referred to in paragraph 1, they shall duly justify that they have adopted technical solutions\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4); Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI vendors not following common specifications need an equivalent technical justification.", "cross_references": [ "Chapter III Section 2", "Chapter V Sections 2 and 3" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_41", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-41#art-41-5" }, { "obligation_id": "art-41-6", "article": 41, "paragraph": 6, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "A Member State that considers a common specification inadequate must inform the Commission with a detailed explanation so the Commission can assess and, if appropriate, amend it.", "quote": "\"Where a Member State considers that a common specification does not entirely meet the requirements set out in Section 2 or, as applicable, comply with obligations set out in Sections 2 and 3 of Chapter V, it shall inform the Commission thereof with a detailed explanation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Member State feedback process for specifications with indirect legal-practice relevance.", "cross_references": [ "Chapter III Section 2", "Chapter V Sections 2 and 3" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_41", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-41#art-41-6" }, { "obligation_id": "art-42-1", "article": 42, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "High-risk AI systems trained and tested on data reflecting their intended geographical, behavioural, contextual or functional setting are presumed compliant with Article 10(4) data-relevance requirements.", "quote": "\"High-risk AI systems that have been trained and tested on data reflecting the specific geographical, behavioural, contextual or functional setting within which they are intended to be used shall be presumed to comply\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI vendors that need to evidence context-appropriate data for high-risk legal or justice systems.", "cross_references": [ "Art. 10(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_42", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-42#art-42-1" }, { "obligation_id": "art-42-2", "article": 42, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "A high-risk AI system certified under a published EU cybersecurity scheme is presumed compliant with Article 15 cybersecurity requirements to the extent the certificate or statement covers them.", "quote": "\"High-risk AI systems that have been certified or for which a statement of conformity has been issued under a cybersecurity scheme pursuant to Regulation (EU) 2019/881 and the references of which have been published in the Official Journal of the European Union shall be presumed to comply\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to high-risk legal-AI vendors relying on cybersecurity certification in conformity work.", "cross_references": [ "Art. 15", "Regulation (EU) 2019/881" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_42", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-42#art-42-2" }, { "obligation_id": "art-42-3", "article": 42, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "High-risk AI systems within Regulation (EU) 2024/2847 that meet Article 12(1) of that Regulation are deemed compliant with Article 15 cybersecurity requirements.", "quote": "\"Where high-risk AI systems fall within the scope of Regulation (EU) 2024/2847 and the conditions laid down in Article 12(1) of that Regulation are fulfilled, such systems shall be deemed to comply\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant where a legal-AI product is also covered by EU cyber-resilience legislation.", "cross_references": [ "Art. 15", "Regulation (EU) 2024/2847" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_42", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-42#art-42-3" }, { "obligation_id": "art-43-1", "article": 43, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "For Annex III point 1 high-risk AI systems using harmonised standards or common specifications, the provider must choose internal control or notified-body assessment of the quality management system and technical documentation.", "quote": "\"the provider shall opt for one of the following conformity assessment procedures based on:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to vendors of biometric high-risk AI systems, including any legal-sector use of such systems.", "cross_references": [ "Annex III point 1", "Annex VI", "Annex VII", "Art. 40", "Art. 41" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_43", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-43#art-43-1" }, { "obligation_id": "art-43-2", "article": 43, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "For Annex III points 2 to 8 high-risk AI systems, providers must use the Annex VI internal-control conformity assessment procedure without notified-body involvement.", "quote": "\"For high-risk AI systems referred to in points 2 to 8 of Annex III, providers shall follow the conformity assessment procedure based on internal control as referred to in Annex VI\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High for vendors of Annex III point 8 legal or judicial high-risk AI systems that must complete internal-control conformity assessment.", "cross_references": [ "Annex III points 2 to 8", "Annex VI" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_43", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-43#art-43-2" }, { "obligation_id": "art-43-3", "article": 43, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "For high-risk AI systems under Annex I Section A harmonisation laws, the provider must follow the relevant sectoral conformity assessment and include the AI Act requirements, quality management assessment, and listed Annex VII points.", "quote": "\"For high-risk AI systems covered by the Union harmonisation legislation listed in Section A of Annex I, the provider of the system shall follow the relevant conformity assessment procedure\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Mostly indirect for legal practice unless a legal-AI product is embedded in a covered regulated product.", "cross_references": [ "Annex I Section A", "Art. 17", "Annex VII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_43", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-43#art-43-3" }, { "obligation_id": "art-43-4", "article": 43, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "A high-risk AI system that has already undergone conformity assessment must undergo a new assessment after a substantial modification, whether redistributed or continued in use by the current deployer.", "quote": "\"High-risk AI systems that have already been subject to a conformity assessment procedure shall undergo a new conformity assessment procedure in the event of a substantial modification\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High for legal-AI vendors and deployers when substantial modifications affect high-risk legal or justice systems.", "cross_references": [ "Art. 3(23)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_43", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-43#art-43-4" }, { "obligation_id": "art-43-5", "article": 43, "paragraph": 5, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The Commission may adopt delegated acts under Article 97 to update Annexes VI and VII in light of technical progress.", "quote": "\"The Commission is empowered to adopt delegated acts in accordance with Article 97 in order to amend Annexes VI and VII by updating them in light of technical progress\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional power that may change conformity procedures applicable to legal-AI vendors.", "cross_references": [ "Art. 97", "Annex VI", "Annex VII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_43", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-43#art-43-5" }, { "obligation_id": "art-43-6", "article": 43, "paragraph": 6, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The Commission may amend Article 43(1) and (2) to require notified-body conformity assessment for Annex III points 2 to 8 systems, considering risk prevention and notified-body capacity.", "quote": "\"The Commission is empowered to adopt delegated acts in accordance with Article 97 in order to amend paragraphs 1 and 2 of this Article in order to subject high-risk AI systems referred to in points 2 to 8 of Annex III to the conformity assessment procedure referred to in Annex VII\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional power that could later alter conformity routes for legal or justice high-risk AI systems.", "cross_references": [ "Art. 97", "Annex III points 2 to 8", "Annex VII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_43", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-43#art-43-6" }, { "obligation_id": "art-44-1", "article": 44, "paragraph": 1, "point": null, "actor": [ "notified-body" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Certificates issued by notified bodies under Annex VII must be drawn up in a language easily understood by relevant authorities in the notified body’s Member State.", "quote": "\"Certificates issued by notified bodies in accordance with Annex VII shall be drawn-up in a language which can be easily understood by the relevant authorities in the Member State in which the notified body is established.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Annex VII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_44", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-44#art-44-1" }, { "obligation_id": "art-44-2", "article": 44, "paragraph": 2, "point": null, "actor": [ "notified-body" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Certificates must state their validity period, within the Article 44 maximums, and may be extended only after reassessment under applicable conformity procedures.", "quote": "\"Certificates shall be valid for the period they indicate, which shall not exceed five years for AI systems covered by Annex I, and four years for AI systems covered by Annex III. At the request of the provider, the validity of a certificate may be extended for further periods, each not exceeding\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "For high-risk AI systems that become high-risk through Art. 6(1) (Annex I products), corresponding obligations apply from 2027-08-02 under Art. 113(c).", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Annex I", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_44", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-44#art-44-2" }, { "obligation_id": "art-44-3", "article": 44, "paragraph": 3, "point": null, "actor": [ "notified-body" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "If an AI system no longer meets Section 2 requirements, the notified body must suspend, withdraw or restrict the certificate unless timely corrective action ensures compliance, and give reasons.", "quote": "\"Where a notified body finds that an AI system no longer meets the requirements set out in Section 2, it shall, taking account of the principle of proportionality, suspend or withdraw the certificate issued or impose restrictions on it, unless compliance with those requirements is ensured by appropriate corrective action taken by\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_44", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-44#art-44-3" }, { "obligation_id": "art-44-3-appeal", "article": 44, "paragraph": 3, "point": null, "actor": [ "member-state" ], "obligation_type": "right-of-person", "risk_tier": "high-risk", "summary": "An appeal procedure must be available against notified-body decisions, including decisions on conformity certificates issued.", "quote": "\"An appeal procedure against decisions of the notified bodies, including on conformity certificates issued, shall be available.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_44", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-44#art-44-3-appeal" }, { "obligation_id": "art-45-1", "article": 45, "paragraph": 1, "point": null, "actor": [ "notified-body" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Notified bodies must inform the notifying authority about issued certificates and approvals, refusals or restrictions, notification-scope circumstances, authority information requests and requested assessment activities.", "quote": "\"Notified bodies shall inform the notifying authority of the following:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Annex VII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_45", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-45#art-45-1" }, { "obligation_id": "art-45-2", "article": 45, "paragraph": 2, "point": null, "actor": [ "notified-body" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Each notified body must inform other notified bodies about refused, suspended, withdrawn or restricted quality-management approvals and Union technical documentation assessment certificates, and issued ones on request.", "quote": "\"Each notified body shall inform the other notified bodies of:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_45", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-45#art-45-2" }, { "obligation_id": "art-45-3", "article": 45, "paragraph": 3, "point": null, "actor": [ "notified-body" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Each notified body must provide similar notified bodies with relevant information on negative conformity assessment results and, on request, positive results.", "quote": "\"Each notified body shall provide the other notified bodies carrying out similar conformity assessment activities covering the same types of AI systems with relevant information on issues relating to negative and, on request, positive conformity assessment results.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_45", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-45#art-45-3" }, { "obligation_id": "art-45-4", "article": 45, "paragraph": 4, "point": null, "actor": [ "notified-body" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Notified bodies must safeguard the confidentiality of information they obtain under Article 78.", "quote": "\"Notified bodies shall safeguard the confidentiality of the information that they obtain, in accordance with Article 78.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Notified-body infrastructure; indirect relevance to legal-AI vendors seeking or relying on high-risk conformity assessment.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_45", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-45#art-45-4" }, { "obligation_id": "art-46-1", "article": 46, "paragraph": 1, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "A market surveillance authority may authorise specified high-risk AI systems before conformity assessment only for exceptional listed reasons, for a limited period, while assessment is completed without undue delay.", "quote": "\"By way of derogation from Article 43 and upon a duly justified request, any market surveillance authority may authorise the placing on the market or the putting into service of specific high-risk AI systems within the territory of the Member State concerned, for exceptional reasons of public security or the protection of\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [ "Art. 43" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_46", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-46#art-46-1" }, { "obligation_id": "art-46-2", "article": 46, "paragraph": 2, "point": null, "actor": [ "market-surveillance-authority", "public-authority-deployer" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "In urgent public-security or imminent physical-safety situations, law-enforcement or civil-protection authorities may use a system before authorisation if authorisation is promptly requested and use stops if refused.", "quote": "\"In a duly justified situation of urgency for exceptional reasons of public security or in the case of specific, substantial and imminent threat to the life or physical safety of natural persons, law-enforcement authorities or civil protection authorities may put a specific high-risk AI system into service without the authorisation referred to\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_46", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-46#art-46-2" }, { "obligation_id": "art-46-3", "article": 46, "paragraph": 3, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "The derogation authorisation may be issued only if the system complies with Section 2, and the authority must inform the Commission and other Member States.", "quote": "\"The authorisation referred to in paragraph 1 shall be issued only if the market surveillance authority concludes that the high-risk AI system complies with the requirements of Section 2. The market surveillance authority shall inform the Commission and the other Member States of any authorisation issued pursuant to paragraphs 1 and 2.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_46", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-46#art-46-3" }, { "obligation_id": "art-46-5", "article": 46, "paragraph": 5, "point": null, "actor": [ "commission" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "If objections are raised or the Commission considers an authorisation contrary to Union law or unfounded, it must consult the Member State and operators and decide whether authorisation is justified.", "quote": "\"Where, within 15 calendar days of receipt of the notification referred to in paragraph 3, objections are raised by a Member State against an authorisation issued by a market surveillance authority of another Member State, or where the Commission considers the authorisation to be contrary to Union law, or the conclusion of\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_46", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-46#art-46-5" }, { "obligation_id": "art-46-6", "article": 46, "paragraph": 6, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "Where the Commission considers a derogation authorisation unjustified, the market surveillance authority of the Member State concerned must withdraw it.", "quote": "\"Where the Commission considers the authorisation unjustified, it shall be withdrawn by the market surveillance authority of the Member State concerned.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_46", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-46#art-46-6" }, { "obligation_id": "art-46-7", "article": 46, "paragraph": 7, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "For high-risk AI systems related to Annex I Section A products, only conformity-assessment derogations established in the relevant Union harmonisation legislation apply.", "quote": "\"For high-risk AI systems related to products covered by Union harmonisation legislation listed in Section A of Annex I, only the derogations from the conformity assessment established in that Union harmonisation legislation shall apply.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "For high-risk AI systems that become high-risk through Art. 6(1) (Annex I products), corresponding obligations apply from 2027-08-02 under Art. 113(c).", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [ "Annex I Section A", "Art. 6(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_46", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-46#art-46-7" }, { "obligation_id": "art-47-1", "article": 47, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "The provider must draw up a written machine-readable, physical or electronically signed EU declaration of conformity for each high-risk AI system, keep it for 10 years, and submit a copy on request.", "quote": "\"The provider shall draw up a written machine readable, physical or electronically signed EU declaration of conformity for each high-risk AI system, and keep it at the disposal of the national competent authorities for 10 years after the high-risk AI system has been placed on the market or put into service. The\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall within Annex III justice or other high-risk categories; indirect for deployers.", "cross_references": [ "Annex V" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_47", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-47#art-47-1" }, { "obligation_id": "art-47-1-annex5", "article": 47, "paragraph": 1, "point": "Annex V", "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Annex V specifies the information required in an EU declaration of conformity, including system identification, provider details, responsibility statement, conformity statement and signature.", "quote": "\"The EU declaration of conformity referred to in Article 47, shall contain all of the following information\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "High-risk legal-AI providers may need an EU declaration of conformity before market placement.", "cross_references": [ "Art. 47" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#anx_V", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-47#art-47-1-annex5" }, { "obligation_id": "art-47-2", "article": 47, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "The EU declaration of conformity must state that the high-risk AI system meets Section 2 requirements, contain Annex V information, and be translated for relevant national competent authorities.", "quote": "\"The EU declaration of conformity shall state that the high-risk AI system concerned meets the requirements set out in Section 2. The EU declaration of conformity shall contain the information set out in Annex V, and shall be translated into a language that can be easily understood by the national competent authorities\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall within Annex III justice or other high-risk categories; indirect for deployers.", "cross_references": [ "Chapter III Section 2", "Annex V" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_47", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-47#art-47-2" }, { "obligation_id": "art-47-3", "article": 47, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Where other Union harmonisation legislation also requires a declaration, a single declaration must cover all applicable Union law and identify the legislation concerned.", "quote": "\"Where high-risk AI systems are subject to other Union harmonisation legislation which also requires an EU declaration of conformity, a single EU declaration of conformity shall be drawn up in respect of all Union law applicable to the high-risk AI system. The declaration shall contain all the information required to identify the\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall within Annex III justice or other high-risk categories; indirect for deployers.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_47", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-47#art-47-3" }, { "obligation_id": "art-47-4", "article": 47, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "By drawing up the EU declaration of conformity, the provider assumes responsibility for Section 2 compliance and must keep the declaration up to date.", "quote": "\"By drawing up the EU declaration of conformity, the provider shall assume responsibility for compliance with the requirements set out in Section 2. The provider shall keep the EU declaration of conformity up-to-date as appropriate.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall within Annex III justice or other high-risk categories; indirect for deployers.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_47", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-47#art-47-4" }, { "obligation_id": "art-47-5", "article": 47, "paragraph": 5, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "high-risk", "summary": "The Commission may adopt delegated acts updating Annex V declaration content when technical progress makes new elements necessary.", "quote": "\"The Commission is empowered to adopt delegated acts in accordance with Article 97 in order to amend Annex V by updating the content of the EU declaration of conformity set out in that Annex, in order to introduce elements that become necessary in light of technical progress.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [ "Art. 97", "Annex V" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_47", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-47#art-47-5" }, { "obligation_id": "art-48-1", "article": 48, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "The CE marking for high-risk AI systems is subject to Article 30 of Regulation (EC) No 765/2008 general principles.", "quote": "\"The CE marking shall be subject to the general principles set out in Article 30 of Regulation (EC) No 765/2008.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall within Annex III justice or other high-risk categories; indirect for deployers.", "cross_references": [ "Regulation (EC) No 765/2008 Art. 30" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_48", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-48#art-48-1" }, { "obligation_id": "art-48-2", "article": 48, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "For digitally provided high-risk AI systems, a digital CE marking may be used only if easily accessible through the system interface or another machine-readable or electronic means.", "quote": "\"For high-risk AI systems provided digitally, a digital CE marking shall be used, only if it can easily be accessed via the interface from which that system is accessed or via an easily accessible machine-readable code or other electronic means.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall within Annex III justice or other high-risk categories; indirect for deployers.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_48", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-48#art-48-2" }, { "obligation_id": "art-48-3", "article": 48, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "The CE marking must be visibly, legibly and indelibly affixed to the high-risk AI system, or where appropriate to packaging or accompanying documentation.", "quote": "\"The CE marking shall be affixed visibly, legibly and indelibly for high-risk AI systems. Where that is not possible or not warranted on account of the nature of the high-risk AI system, it shall be affixed to the packaging or to the accompanying documentation, as appropriate.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall within Annex III justice or other high-risk categories; indirect for deployers.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_48", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-48#art-48-3" }, { "obligation_id": "art-48-4", "article": 48, "paragraph": 4, "point": null, "actor": [ "provider", "authorised-representative", "notified-body" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Where applicable, the CE marking must be followed by the notified body identification number, and that number must also appear in promotional material mentioning CE marking compliance.", "quote": "\"Where applicable, the CE marking shall be followed by the identification number of the notified body responsible for the conformity assessment procedures set out in Article 43. The identification number of the notified body shall be affixed by the body itself or, under its instructions, by the provider or by the provider’s\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall within Annex III justice or other high-risk categories; indirect for deployers.", "cross_references": [ "Art. 43" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_48", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-48#art-48-4" }, { "obligation_id": "art-48-5", "article": 48, "paragraph": 5, "point": null, "actor": [ "provider" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Where other Union law also requires CE marking, the marking must indicate that the high-risk AI system also fulfils that other law.", "quote": "\"Where high-risk AI systems are subject to other Union law which also provides for the affixing of the CE marking, the CE marking shall indicate that the high-risk AI system also fulfil the requirements of that other law.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "For high-risk AI systems that become high-risk through Art. 6(1) (Annex I products), corresponding obligations apply from 2027-08-02 under Art. 113(c).", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall within Annex III justice or other high-risk categories; indirect for deployers.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_48", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-48#art-48-5" }, { "obligation_id": "art-49-1", "article": 49, "paragraph": 1, "point": null, "actor": [ "provider", "authorised-representative" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Before placing on the market or putting into service most Annex III high-risk AI systems, the provider or authorised representative must register itself and the system in the Article 71 EU database.", "quote": "\"Before placing on the market or putting into service a high-risk AI system listed in Annex III, with the exception of high-risk AI systems referred to in point 2 of Annex III, the provider or, where applicable, the authorised representative shall register\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors whose systems fall in Annex III, including administration-of-justice systems.", "cross_references": [ "Annex III", "Art. 71" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_49", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-49#art-49-1" }, { "obligation_id": "art-49-2", "article": 49, "paragraph": 2, "point": null, "actor": [ "provider", "authorised-representative" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Before placing on the market or putting into service an AI system the provider has concluded is not high-risk under Article 6(3), the provider or authorised representative must register itself and the system in the EU database.", "quote": "\"Before placing on the market or putting into service an AI system for which the provider has concluded that it is not high-risk according to Article 6(3), that provider or, where applicable, the authorised representative shall register\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors relying on an Article 6(3) non-high-risk conclusion.", "cross_references": [ "Art. 6(3)", "Art. 71" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_49", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-49#art-49-2" }, { "obligation_id": "art-49-3", "article": 49, "paragraph": 3, "point": null, "actor": [ "public-authority-deployer", "union-institution" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Before putting into service or using most Annex III high-risk AI systems, public-authority and Union-institution deployers, or persons acting on their behalf, must register themselves, select the system, and register its use in the EU database.", "quote": "\"Before putting into service or using a high-risk AI system listed in Annex III, with the exception of high-risk AI systems listed in point 2 of Annex III, deployers that are public authorities, Union institutions, bodies, offices or agencies\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite. Art. 111(2) gives certain existing public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for courts, regulators, public legal departments, and persons acting for them when deploying Annex III high-risk systems.", "cross_references": [ "Annex III", "Art. 71" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_49", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-49#art-49-3" }, { "obligation_id": "art-49-4-info", "article": 49, "paragraph": 4, "point": null, "actor": [ "provider", "authorised-representative", "public-authority-deployer" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Secure non-public registrations for the listed sensitive Annex III systems may include only the specified information from Annex VIII and Annex IX.", "quote": "\"shall include only the following information, as applicable, referred to in:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite. Art. 111(2) gives certain existing public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Limits the registration information visible for sensitive public-sector systems with indirect legal-practice relevance.", "cross_references": [ "Annex VIII", "Annex IX", "Art. 71" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_49", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-49#art-49-4-info" }, { "obligation_id": "art-49-4-secure", "article": 49, "paragraph": 4, "point": null, "actor": [ "provider", "authorised-representative", "public-authority-deployer" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Registrations for Annex III points 1, 6 and 7 high-risk systems in law enforcement, migration, asylum and border-control areas must be made in the secure non-public section of the EU database.", "quote": "\"For high-risk AI systems referred to in points 1, 6 and 7 of Annex III, in the areas of law enforcement, migration, asylum and border control management, the registration referred to in paragraphs 1, 2 and 3 of this Article shall be in a secure non-public section\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite. Art. 111(2) gives certain existing public-authority high-risk systems until 2030-08-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Mostly indirect for legal practice except public-sector legal or enforcement bodies using these systems.", "cross_references": [ "Annex III points 1, 6 and 7", "Art. 71" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_49", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-49#art-49-4-secure" }, { "obligation_id": "art-49-5", "article": 49, "paragraph": 5, "point": null, "actor": [ "provider", "deployer" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Annex III point 2 high-risk AI systems must be registered at national level rather than through the main EU-database route.", "quote": "\"High-risk AI systems referred to in point 2 of Annex III shall be registered at national level\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors or public bodies if their AI system falls under Annex III point 2.", "cross_references": [ "Annex III point 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_49", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-49#art-49-5" }, { "obligation_id": "art-50-1", "article": 50, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "information-to-persons", "risk_tier": "transparency-risk", "summary": "Providers must design and develop AI systems intended to interact directly with natural persons so those persons are informed they are interacting with AI, unless obvious or covered by the specified law-enforcement exception.", "quote": "\"Providers shall ensure that AI systems intended to interact directly with natural persons are designed and developed in such a way that the natural persons concerned are informed that they are interacting with an AI system\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High for legal-AI chatbots, intake assistants, and advice tools that interact directly with clients, witnesses, employees, or the public.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_50", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-50#art-50-1" }, { "obligation_id": "art-50-2", "article": 50, "paragraph": 2, "point": null, "actor": [ "provider", "gpai-provider" ], "obligation_type": "transparency", "risk_tier": "transparency-risk", "summary": "Providers of AI systems, including GPAI systems, that generate synthetic audio, image, video or text content must mark outputs in machine-readable and detectable form, subject to the stated assistive-function and law-enforcement exceptions.", "quote": "\"Providers of AI systems, including general-purpose AI systems, generating synthetic audio, image, video or text content, shall ensure that the outputs of the AI system are marked in a machine-readable format and detectable as artificially generated or manipulated\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Under Art. 111(4), providers of AI systems, including general-purpose AI systems, generating synthetic audio, image, video or text content that were placed on the market before 2026-08-02 must comply with Art. 50(2) by 2026-12-02.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High for vendors whose legal-AI systems generate draft text or other synthetic content for external use.", "cross_references": [ "Art. 111(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_50", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-50#art-50-2" }, { "obligation_id": "art-50-3", "article": 50, "paragraph": 3, "point": null, "actor": [ "deployer" ], "obligation_type": "information-to-persons", "risk_tier": "transparency-risk", "summary": "Deployers of emotion-recognition or biometric-categorisation systems must inform exposed natural persons of the system operation and process personal data under applicable EU data-protection law, except for the stated law-enforcement use.", "quote": "\"Deployers of an emotion recognition system or a biometric categorisation system shall inform the natural persons exposed thereto of the operation of the system\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Potentially relevant to legal employers, courts, or public bodies if they deploy emotion-recognition or biometric categorisation tools.", "cross_references": [ "Regulation (EU) 2016/679", "Regulation (EU) 2018/1725", "Directive (EU) 2016/680" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_50", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-50#art-50-3" }, { "obligation_id": "art-50-4", "article": 50, "paragraph": 4, "point": null, "actor": [ "deployer" ], "obligation_type": "transparency", "risk_tier": "transparency-risk", "summary": "Deployers of AI systems that generate or manipulate image, audio or video content constituting a deep fake must disclose that the content was artificially generated or manipulated, subject to law-enforcement and expressive-work limits.", "quote": "\"Deployers of an AI system that generates or manipulates image, audio or video content constituting a deep fake, shall disclose that the content has been artificially generated or manipulated\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High for law firms, legal departments, courts, or legal-AI vendors publishing AI-generated public-facing audiovisual content.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_50", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-50#art-50-4" }, { "obligation_id": "art-50-5", "article": 50, "paragraph": 5, "point": null, "actor": [ "provider", "deployer" ], "obligation_type": "information-to-persons", "risk_tier": "transparency-risk", "summary": "Information required by Article 50(1) to (4) must be given clearly and distinguishably by the first interaction or exposure and must meet applicable accessibility requirements.", "quote": "\"The information referred to in paragraphs 1 to 4 shall be provided to the natural persons concerned in a clear and distinguishable manner at the latest at the time of the first interaction or exposure\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High because legal-AI notices to clients, consumers, employees, or the public must be timely, clear, and accessible.", "cross_references": [ "Art. 50(1)", "Art. 50(2)", "Art. 50(3)", "Art. 50(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_50", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-50#art-50-5" }, { "obligation_id": "art-50-6", "article": 50, "paragraph": 6, "point": null, "actor": [ "provider", "deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "transparency-risk", "summary": "Article 50 transparency obligations do not affect Chapter III high-risk requirements and do not displace other Union or national transparency obligations for AI deployers.", "quote": "\"Paragraphs 1 to 4 shall not affect the requirements and obligations set out in Chapter III, and shall be without prejudice to other transparency obligations laid down in Union or national law for deployers of AI systems\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Clarifies that legal AI may have overlapping high-risk and sectoral transparency duties.", "cross_references": [ "Chapter III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_50", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-50#art-50-6" }, { "obligation_id": "art-50-7", "article": 50, "paragraph": 7, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "transparency-risk", "summary": "The Commission must encourage and facilitate Union-level codes of practice for detecting, marking and labelling artificially generated or manipulated content and may adopt common implementation rules if codes are inadequate.", "quote": "\"The Commission shall encourage and facilitate the drawing up of codes of practice at Union level to facilitate the effective implementation of the obligations regarding the detection, marking and labelling of artificially generated or manipulated content\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional support for transparency rules that legal-AI providers and deployers may follow.", "cross_references": [ "Art. 56(6)", "Art. 98(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_50", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-50#art-50-7" }, { "obligation_id": "art-51-1-2", "article": 51, "paragraph": 1, "point": null, "actor": [ "gpai-provider", "commission" ], "obligation_type": "scope-or-definition", "risk_tier": "gpai-systemic-risk", "summary": "A general-purpose AI model is classified as systemic-risk when it has high-impact capabilities or Commission-designated equivalent capabilities or impact, with a FLOP-based presumption for high-impact capabilities.", "quote": "\"A general-purpose AI model shall be classified as a general-purpose AI model with systemic risk if it meets any of the following conditions:\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [ "Annex XIII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_51", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-51#art-51-1-2" }, { "obligation_id": "art-51-1-annex13", "article": 51, "paragraph": 1, "point": "Annex XIII", "actor": [ "commission", "gpai-provider" ], "obligation_type": "scope-or-definition", "risk_tier": "gpai-systemic-risk", "summary": "Annex XIII lists criteria the Commission must consider when determining GPAI models have capabilities or impact equivalent to high-impact capabilities under Article 51.", "quote": "\"the Commission shall take into account the following criteria\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Systemic-risk classification can affect GPAI models used in legal AI products.", "cross_references": [ "Art. 51(1)(b)", "Art. 52(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#anx_XIII", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-51#art-51-1-annex13" }, { "obligation_id": "art-51-3", "article": 51, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "gpai-systemic-risk", "summary": "The Commission must adopt delegated acts to amend systemic-risk thresholds and supplement benchmarks and indicators as needed to reflect technological developments and the state of the art.", "quote": "\"The Commission shall adopt delegated acts in accordance with Article 97 to amend the thresholds listed in paragraphs 1 and 2 of this Article, as well as to supplement benchmarks and indicators in light of evolving technological developments, such as algorithmic improvements or increased hardware efficiency, when necessary, for these thresholds to\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [ "Art. 97" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_51", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-51#art-51-3" }, { "obligation_id": "art-52-1-designate-unnotified", "article": 52, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "enforcement-power", "risk_tier": "gpai-systemic-risk", "summary": "If the Commission becomes aware of an unnotified GPAI model presenting systemic risks, it may designate the model as one with systemic risk.", "quote": "\"If the Commission becomes aware of a general-purpose AI model presenting systemic risks of which it has not been notified, it may decide to designate it as a model with systemic risk\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Commission classification power indirectly affects legal-AI products built on systemic GPAI models.", "cross_references": [ "Art. 51" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_52", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-52#art-52-1-designate-unnotified" }, { "obligation_id": "art-52-1-notify", "article": 52, "paragraph": 1, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai-systemic-risk", "summary": "A provider whose GPAI model meets the Article 51(1)(a) systemic-risk condition must notify the Commission without delay and within two weeks, including information demonstrating that the condition is met.", "quote": "\"the relevant provider shall notify the Commission without delay and in any event within two weeks after that requirement is met or it becomes known that it will be met\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": "Under Art. 111(3), providers of general-purpose AI models placed on the market before 2025-08-02 must take the necessary steps to comply with Chapter V obligations by 2027-08-02.", "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors that provide or build on GPAI models approaching systemic-risk thresholds.", "cross_references": [ "Art. 51(1)(a)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_52", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-52#art-52-1-notify" }, { "obligation_id": "art-52-2", "article": 52, "paragraph": 2, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "gpai-systemic-risk", "summary": "A provider of a model meeting the Article 51(1)(a) threshold may submit substantiated arguments with its notification to show the model exceptionally does not present systemic risks.", "quote": "\"may present, with its notification, sufficiently substantiated arguments to demonstrate that, exceptionally, although it meets that requirement, the general-purpose AI model does not present, due to its specific characteristics, systemic risks\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to GPAI vendors contesting systemic-risk classification for models used in legal AI.", "cross_references": [ "Art. 51(1)(a)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_52", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-52#art-52-2" }, { "obligation_id": "art-52-3", "article": 52, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "enforcement-power", "risk_tier": "gpai-systemic-risk", "summary": "If the Commission finds a provider’s Article 52(2) arguments insufficient and the provider cannot demonstrate absence of systemic risk, it must reject the arguments and the model is considered systemic-risk GPAI.", "quote": "\"it shall reject those arguments, and the general-purpose AI model shall be considered to be a general-purpose AI model with systemic risk\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Commission classification decision indirectly affects legal-AI vendors using the model.", "cross_references": [ "Art. 52(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_52", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-52#art-52-3" }, { "obligation_id": "art-52-4", "article": 52, "paragraph": 4, "point": null, "actor": [ "commission" ], "obligation_type": "enforcement-power", "risk_tier": "gpai-systemic-risk", "summary": "The Commission may designate a GPAI model as presenting systemic risks on its own initiative or after a qualified alert from the scientific panel, using Annex XIII criteria.", "quote": "\"The Commission may designate a general-purpose AI model as presenting systemic risks, ex officio or following a qualified alert from the scientific panel pursuant to Article 90(1), point (a), on the basis of criteria set out in Annex XIII\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Commission systemic-risk designation affects the regulatory status of GPAI models used by legal-AI vendors.", "cross_references": [ "Art. 90(1)(a)", "Annex XIII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_52", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-52#art-52-4" }, { "obligation_id": "art-52-5", "article": 52, "paragraph": 5, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "right-of-person", "risk_tier": "gpai-systemic-risk", "summary": "A provider whose GPAI model was designated systemic-risk under Article 52(4) may request reassessment with objective, detailed and new reasons, no earlier than six months after designation or a maintained designation.", "quote": "\"Providers may request reassessment at the earliest six months after the designation decision\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to GPAI vendors seeking removal of systemic-risk classification for models used in legal AI.", "cross_references": [ "Art. 52(4)", "Annex XIII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_52", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-52#art-52-5" }, { "obligation_id": "art-52-6", "article": 52, "paragraph": 6, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "gpai-systemic-risk", "summary": "The Commission must publish and keep updated a list of GPAI models with systemic risk while protecting intellectual property, confidential business information, and trade secrets.", "quote": "\"The Commission shall ensure that a list of general-purpose AI models with systemic risk is published and shall keep that list up to date\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "The public list helps legal-AI vendors and deployers identify systemic-risk GPAI models they rely on.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_52", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-52#art-52-6" }, { "obligation_id": "art-53-1-a", "article": 53, "paragraph": 1, "point": "a", "actor": [ "gpai-provider" ], "obligation_type": "documentation", "risk_tier": "gpai", "summary": "Providers of GPAI models must draw up and keep current technical documentation of the model, including training, testing and evaluation results, with at least Annex XI information for provision to the AI Office and national competent authorities on request.", "quote": "\"draw up and keep up-to-date the technical documentation of the model, including its training and testing process and the results of its evaluation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": "Under Art. 111(3), providers of general-purpose AI models placed on the market before 2025-08-02 must take the necessary steps to comply with Chapter V obligations by 2027-08-02.", "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors that provide GPAI models used in legal-AI products.", "cross_references": [ "Annex XI", "AI Office", "National competent authorities" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-1-a" }, { "obligation_id": "art-53-1-b", "article": 53, "paragraph": 1, "point": "b", "actor": [ "gpai-provider" ], "obligation_type": "documentation", "risk_tier": "gpai", "summary": "Providers of GPAI models must draw up, keep current and make available information and documentation for AI-system providers that intend to integrate the model, enabling understanding of capabilities and limitations and regulatory compliance.", "quote": "\"draw up, keep up-to-date and make available information and documentation to providers of AI systems who intend to integrate the general-purpose AI model into their AI systems\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": "Under Art. 111(3), providers of general-purpose AI models placed on the market before 2025-08-02 must take the necessary steps to comply with Chapter V obligations by 2027-08-02.", "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for GPAI vendors supplying model documentation to downstream legal-AI providers.", "cross_references": [ "Annex XII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-1-b" }, { "obligation_id": "art-53-1-c", "article": 53, "paragraph": 1, "point": "c", "actor": [ "gpai-provider" ], "obligation_type": "requirement", "risk_tier": "gpai", "summary": "Providers of GPAI models must put in place a policy to comply with Union copyright and related-rights law, including identifying and complying with machine-readable rights reservations under Directive (EU) 2019/790.", "quote": "\"put in place a policy to comply with Union law on copyright and related rights, and in particular to identify and comply with, including through state-of-the-art technologies, a reservation of rights\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": "Under Art. 111(3), providers of general-purpose AI models placed on the market before 2025-08-02 must take the necessary steps to comply with Chapter V obligations by 2027-08-02.", "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for GPAI vendors whose models may be used by legal-AI systems and trained on protected content.", "cross_references": [ "Directive (EU) 2019/790 Art. 4(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-1-c" }, { "obligation_id": "art-53-1-d", "article": 53, "paragraph": 1, "point": "d", "actor": [ "gpai-provider" ], "obligation_type": "transparency", "risk_tier": "gpai", "summary": "Providers of GPAI models must draw up and make publicly available a sufficiently detailed summary of training content using the AI Office template.", "quote": "\"draw up and make publicly available a sufficiently detailed summary about the content used for training of the general-purpose AI model, according to a template provided by the AI Office\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": "Under Art. 111(3), providers of general-purpose AI models placed on the market before 2025-08-02 must take the necessary steps to comply with Chapter V obligations by 2027-08-02.", "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for GPAI vendors and downstream legal-AI providers evaluating training-content disclosures.", "cross_references": [ "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-1-d" }, { "obligation_id": "art-53-2", "article": 53, "paragraph": 2, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "gpai", "summary": "The Article 53(1)(a) and (b) documentation duties do not apply to qualifying free and open-source AI models with public parameters, weights, architecture and usage information, but the exception does not cover systemic-risk GPAI models.", "quote": "\"This exception shall not apply to general-purpose AI models with systemic risks\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI vendors relying on open-source GPAI models; systemic-risk models remain covered.", "cross_references": [ "Art. 53(1)(a)", "Art. 53(1)(b)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-2" }, { "obligation_id": "art-53-3", "article": 53, "paragraph": 3, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai", "summary": "Providers of GPAI models must cooperate as necessary with the Commission and national competent authorities when those authorities exercise their AI Act competences and powers.", "quote": "\"Providers of general-purpose AI models shall cooperate as necessary with the Commission and the national competent authorities in the exercise of their competences and powers pursuant to this Regulation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": "Under Art. 111(3), providers of general-purpose AI models placed on the market before 2025-08-02 must take the necessary steps to comply with Chapter V obligations by 2027-08-02.", "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for GPAI vendors active in legal AI when Commission or national authorities request cooperation.", "cross_references": [ "Commission", "National competent authorities" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-3" }, { "obligation_id": "art-53-4", "article": 53, "paragraph": 4, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai", "summary": "Providers of GPAI models may rely on codes of practice until harmonised standards are published; providers not adhering to an approved code or European harmonised standard must demonstrate alternative adequate compliance means to the Commission.", "quote": "\"Providers of general-purpose AI models who do not adhere to an approved code of practice or do not comply with a European harmonised standard shall demonstrate alternative adequate means of compliance for assessment by the Commission\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": "Under Art. 111(3), providers of general-purpose AI models placed on the market before 2025-08-02 must take the necessary steps to comply with Chapter V obligations by 2027-08-02.", "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for GPAI vendors choosing compliance routes for models incorporated into legal-AI systems.", "cross_references": [ "Art. 56" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-4" }, { "obligation_id": "art-53-5", "article": 53, "paragraph": 5, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "gpai", "summary": "The Commission may adopt delegated acts under Article 97 to detail measurement and calculation methodologies that allow comparable and verifiable Annex XI documentation.", "quote": "\"the Commission is empowered to adopt delegated acts in accordance with Article 97 to detail measurement and calculation methodologies with a view to allowing for comparable and verifiable documentation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional power indirectly affects GPAI documentation available to legal-AI vendors.", "cross_references": [ "Art. 97", "Annex XI" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-5" }, { "obligation_id": "art-53-6", "article": 53, "paragraph": 6, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "gpai", "summary": "The Commission may adopt delegated acts under Article 97(2) to amend Annexes XI and XII in light of evolving technological developments.", "quote": "\"The Commission is empowered to adopt delegated acts in accordance with Article 97(2) to amend Annexes XI and XII in light of evolving technological developments\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional power indirectly changes GPAI documentation requirements for legal-AI vendors.", "cross_references": [ "Art. 97(2)", "Annex XI", "Annex XII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-6" }, { "obligation_id": "art-53-7", "article": 53, "paragraph": 7, "point": null, "actor": [ "commission", "ai-office", "national-competent-authority" ], "obligation_type": "governance-institutional", "risk_tier": "gpai", "summary": "Information and documentation obtained under Article 53, including trade secrets, must be treated according to Article 78 confidentiality obligations.", "quote": "\"Any information or documentation obtained pursuant to this Article, including trade secrets, shall be treated in accordance with the confidentiality obligations set out in Article 78\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Protects confidential GPAI information that may include legal-AI vendor or model-provider materials.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_53", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-53#art-53-7" }, { "obligation_id": "art-54-1", "article": 54, "paragraph": 1, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "requirement", "risk_tier": "gpai", "summary": "Before placing a GPAI model on the Union market, a provider established in a third country must appoint an authorised representative in the Union by written mandate.", "quote": "\"Prior to placing a general-purpose AI model on the Union market, providers established in third countries shall, by written mandate, appoint an authorised representative which is established in the Union.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_54", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-54#art-54-1" }, { "obligation_id": "art-54-2-4", "article": 54, "paragraph": 2, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai", "summary": "The provider must enable the authorised representative to perform its mandated tasks, and the mandate must empower the representative to be addressed by the AI Office or competent authorities.", "quote": "\"The provider shall enable its authorised representative to perform the tasks specified in the mandate received from the provider.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_54", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-54#art-54-2-4" }, { "obligation_id": "art-54-3-a-b", "article": 54, "paragraph": 3, "point": null, "actor": [ "authorised-representative" ], "obligation_type": "documentation", "risk_tier": "gpai", "summary": "The authorised representative must verify that Annex XI technical documentation is drawn up and obligations are fulfilled, and keep a copy of that documentation and provider contact details for 10 years.", "quote": "\"The authorised representative shall perform the tasks specified in the mandate received from the provider. It shall provide a copy of the mandate to the AI Office upon request, in one of the official languages of the institutions of the Union. For the purposes of this Regulation, the mandate shall empower the\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [ "Annex XI", "Art. 53", "Art. 55" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_54", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-54#art-54-3-a-b" }, { "obligation_id": "art-54-3-c-d", "article": 54, "paragraph": 3, "point": null, "actor": [ "authorised-representative" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai", "summary": "The authorised representative must provide the AI Office, on reasoned request, compliance information and documentation and cooperate with the AI Office and competent authorities on GPAI-model actions.", "quote": "\"The authorised representative shall perform the tasks specified in the mandate received from the provider. It shall provide a copy of the mandate to the AI Office upon request, in one of the official languages of the institutions of the Union. For the purposes of this Regulation, the mandate shall empower the\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_54", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-54#art-54-3-c-d" }, { "obligation_id": "art-54-5-6", "article": 54, "paragraph": 5, "point": null, "actor": [ "authorised-representative", "gpai-provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "gpai", "summary": "The authorised representative must terminate the mandate and immediately inform the AI Office if it considers the provider non-compliant; Article 54 does not apply to qualifying open-source models unless systemic-risk.", "quote": "\"The authorised representative shall terminate the mandate if it considers or has reason to consider the provider to be acting contrary to its obligations pursuant to this Regulation. In such a case, it shall also immediately inform the AI Office about the termination of the mandate and the reasons therefor.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_54", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-54#art-54-5-6" }, { "obligation_id": "art-55-1-a", "article": 55, "paragraph": 1, "point": "a", "actor": [ "gpai-provider-systemic-risk" ], "obligation_type": "risk-management", "risk_tier": "gpai-systemic-risk", "summary": "Providers of GPAI models with systemic risk must perform model evaluation using state-of-the-art standardised protocols and tools, including documented adversarial testing to identify and mitigate systemic risks.", "quote": "\"perform model evaluation in accordance with standardised protocols and tools reflecting the state of the art, including conducting and documenting adversarial testing of the model with a view to identifying and mitigating systemic risks;\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_55", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-55#art-55-1-a" }, { "obligation_id": "art-55-1-b", "article": 55, "paragraph": 1, "point": "b", "actor": [ "gpai-provider-systemic-risk" ], "obligation_type": "risk-management", "risk_tier": "gpai-systemic-risk", "summary": "Providers of GPAI models with systemic risk must assess and mitigate possible Union-level systemic risks and their sources from development, market placement or use of the model.", "quote": "\"assess and mitigate possible systemic risks at Union level, including their sources, that may stem from the development, the placing on the market, or the use of general-purpose AI models with systemic risk;\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_55", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-55#art-55-1-b" }, { "obligation_id": "art-55-1-c", "article": 55, "paragraph": 1, "point": "c", "actor": [ "gpai-provider-systemic-risk" ], "obligation_type": "incident-reporting", "risk_tier": "gpai-systemic-risk", "summary": "Providers of GPAI models with systemic risk must track, document and report serious incidents and possible corrective measures without undue delay to the AI Office and, where appropriate, national competent authorities.", "quote": "\"keep track of, document, and report, without undue delay, to the AI Office and, as appropriate, to national competent authorities, relevant information about serious incidents and possible corrective measures to address them;\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_55", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-55#art-55-1-c" }, { "obligation_id": "art-55-1-d", "article": 55, "paragraph": 1, "point": "d", "actor": [ "gpai-provider-systemic-risk" ], "obligation_type": "requirement", "risk_tier": "gpai-systemic-risk", "summary": "Providers of GPAI models with systemic risk must ensure adequate cybersecurity protection for the model and its physical infrastructure.", "quote": "\"ensure an adequate level of cybersecurity protection for the general-purpose AI model with systemic risk and the physical infrastructure of the model.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_55", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-55#art-55-1-d" }, { "obligation_id": "art-55-2-3", "article": 55, "paragraph": 2, "point": null, "actor": [ "gpai-provider-systemic-risk" ], "obligation_type": "documentation", "risk_tier": "gpai-systemic-risk", "summary": "Providers of systemic-risk GPAI models may rely on codes of practice or harmonised standards to demonstrate compliance, and must demonstrate alternative adequate means if not using them; information obtained is confidential.", "quote": "\"Providers of general-purpose AI models with systemic risk may rely on codes of practice within the meaning of Article 56 to demonstrate compliance with the obligations set out in paragraph 1 of this Article, until a harmonised standard is published. Compliance with European harmonised standards grants providers the presumption of conformity to\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Medium for vendors building legal-AI products on foundation models or providing general-purpose AI models.", "cross_references": [ "Art. 56", "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_55", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-55#art-55-2-3" }, { "obligation_id": "art-56-1", "article": 56, "paragraph": 1, "point": null, "actor": [ "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "gpai", "summary": "The AI Office must encourage and facilitate Union-level codes of practice that contribute to proper AI Act application while taking international approaches into account.", "quote": "\"The AI Office shall encourage and facilitate the drawing up of codes of practice at Union level in order to contribute to the proper application of this Regulation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance row with indirect importance for legal-AI vendors using GPAI models.", "cross_references": [ "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_56", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-56#art-56-1" }, { "obligation_id": "art-56-2", "article": 56, "paragraph": 2, "point": null, "actor": [ "ai-office", "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "gpai", "summary": "The AI Office and Board must aim for codes of practice to cover Articles 53 and 55, including current information, training-content summaries, systemic-risk types, and systemic-risk assessment and management measures.", "quote": "\"The AI Office and the Board shall aim to ensure that the codes of practice cover at least the obligations provided for in Articles 53 and 55\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance of GPAI compliance tools that downstream legal-AI vendors may rely on.", "cross_references": [ "Art. 53", "Art. 55" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_56", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-56#art-56-2" }, { "obligation_id": "art-56-3", "article": 56, "paragraph": 3, "point": null, "actor": [ "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "gpai", "summary": "The AI Office may invite GPAI model providers and relevant national competent authorities to participate in code drafting, with support from civil society, industry, academia and other stakeholders.", "quote": "\"The AI Office may invite all providers of general-purpose AI models, as well as relevant national competent authorities, to participate in the drawing-up of codes of practice\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance participation route for GPAI vendors, including those serving legal-AI markets.", "cross_references": [ "National competent authorities" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_56", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-56#art-56-3" }, { "obligation_id": "art-56-4", "article": 56, "paragraph": 4, "point": null, "actor": [ "ai-office", "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "gpai", "summary": "The AI Office and Board must aim for codes of practice to state specific objectives and contain commitments or measures, including KPIs where appropriate, while considering interested parties and affected persons.", "quote": "\"The AI Office and the Board shall aim to ensure that the codes of practice clearly set out their specific objectives and contain commitments or measures\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect governance of the codes that may structure GPAI compliance for legal-AI vendors.", "cross_references": [ "Affected persons" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_56", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-56#art-56-4" }, { "obligation_id": "art-56-5", "article": 56, "paragraph": 5, "point": null, "actor": [ "ai-office" ], "obligation_type": "monitoring", "risk_tier": "gpai", "summary": "The AI Office must aim for code participants to report regularly on implementation of commitments, measures, outcomes and KPIs, with reporting reflecting participant size and capacity.", "quote": "\"The AI Office shall aim to ensure that participants to the codes of practice report regularly to the AI Office on the implementation of the commitments and the measures taken and their outcomes\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect monitoring framework for GPAI providers whose models may support legal AI.", "cross_references": [ "Art. 56 codes of practice" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_56", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-56#art-56-5" }, { "obligation_id": "art-56-6", "article": 56, "paragraph": 6, "point": null, "actor": [ "commission", "ai-board" ], "obligation_type": "monitoring", "risk_tier": "gpai", "summary": "The Commission and Board must monitor and evaluate code objectives and contribution to proper application; the Commission must assess coverage of Articles 53 and 55 and publish its adequacy assessment.", "quote": "\"The Commission and the Board shall regularly monitor and evaluate the achievement of the objectives of the codes of practice by the participants and their contribution to the proper application of this Regulation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance assessment that indirectly affects GPAI compliance expectations for legal-AI vendors.", "cross_references": [ "Art. 53", "Art. 55" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_56", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-56#art-56-6" }, { "obligation_id": "art-56-7", "article": 56, "paragraph": 7, "point": null, "actor": [ "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "gpai", "summary": "The AI Office may invite all GPAI model providers to adhere to codes of practice, with non-systemic providers limited to Article 53 obligations unless they choose the full code.", "quote": "\"The AI Office may invite all providers of general-purpose AI models to adhere to the codes of practice\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance invitation relevant to GPAI vendors whose models may be integrated into legal-AI systems.", "cross_references": [ "Art. 53" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_56", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-56#art-56-7" }, { "obligation_id": "art-56-8", "article": 56, "paragraph": 8, "point": null, "actor": [ "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "gpai", "summary": "The AI Office must, where appropriate, encourage and facilitate review and adaptation of codes of practice, especially in light of emerging standards, and assist in assessing available standards.", "quote": "\"The AI Office shall, as appropriate, also encourage and facilitate the review and adaptation of the codes of practice, in particular in light of emerging standards\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirectly affects updates to GPAI codes used by legal-AI providers.", "cross_references": [ "Harmonised standards" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_56", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-56#art-56-8" }, { "obligation_id": "art-56-9", "article": 56, "paragraph": 9, "point": null, "actor": [ "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "gpai", "summary": "Codes of practice had to be ready by 2 May 2025, and the AI Office had to take necessary steps, including inviting providers to adhere.", "quote": "\"Codes of practice shall be ready at the latest by 2 May 2025. The AI Office shall take the necessary steps, including inviting providers pursuant to paragraph 7\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance deadline for GPAI codes that may guide legal-AI vendors.", "cross_references": [ "Art. 56(7)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_56", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-56#art-56-9" }, { "obligation_id": "art-57-1", "article": 57, "paragraph": 1, "point": null, "actor": [ "member-state" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "Member States must ensure their competent authorities establish at least one national AI regulatory sandbox, operational by 2 August 2027; it may be established jointly with other Member States.", "quote": "\"Member States shall ensure that their competent authorities establish at least one AI regulatory sandbox at national level, which shall be operational by 2 August 2027\"", "applies_from": "2027-08-02", "applies_from_basis": "Art. 57(1) operational deadline as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Sandbox availability may help legal-AI providers test innovative systems, but this is a Member State infrastructure duty.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph; Art. 57(1) as enacted required operation by 2 August 2026", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-1" }, { "obligation_id": "art-57-1-commission", "article": 57, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The Commission may provide technical support, advice and tools for the establishment and operation of AI regulatory sandboxes.", "quote": "\"The Commission may provide technical support, advice and tools for the establishment and operation of AI regulatory sandboxes\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional support with indirect benefit for legal-AI innovators using sandboxes.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-1-commission" }, { "obligation_id": "art-57-2", "article": 57, "paragraph": 2, "point": null, "actor": [ "member-state", "national-competent-authority" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "Additional AI regulatory sandboxes may be established at regional or local level, or jointly with competent authorities of other Member States.", "quote": "\"Additional AI regulatory sandboxes at regional or local level, or established jointly with the competent authorities of other Member States may also be established\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Additional sandbox capacity may indirectly support legal-AI providers.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-2" }, { "obligation_id": "art-57-3", "article": 57, "paragraph": 3, "point": null, "actor": [ "union-institution" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The European Data Protection Supervisor may establish an AI regulatory sandbox for Union institutions, bodies, offices and agencies, with Chapter VI references to national competent authorities construed accordingly.", "quote": "\"The European Data Protection Supervisor may establish an AI regulatory sandbox for Union institutions, bodies, offices and agencies\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Relevant mainly to EU institutions, with indirect legal-practice relevance for EU public-sector legal functions.", "cross_references": [ "Chapter VI" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-3" }, { "obligation_id": "art-57-4-cooperation", "article": 57, "paragraph": 4, "point": null, "actor": [ "member-state", "national-competent-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "National competent authorities may cooperate with other relevant authorities and involve other AI-ecosystem actors; Member States must ensure cooperation between supervisors of other sandboxes and national competent authorities.", "quote": "\"Member States shall ensure an appropriate level of cooperation between the authorities supervising those other sandboxes and the national competent authorities\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Coordination of sandbox authorities indirectly affects legal-AI innovators seeking multi-regime guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-4-cooperation" }, { "obligation_id": "art-57-4-resources", "article": 57, "paragraph": 4, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Member States must ensure competent authorities allocate sufficient resources to comply with Article 57 effectively and in a timely manner.", "quote": "\"Member States shall ensure that the competent authorities referred to in paragraphs 1 and 2 allocate sufficient resources to comply with this Article effectively and in a timely manner\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance resource duty that indirectly supports sandbox access for legal-AI providers.", "cross_references": [ "Art. 57(1)", "Art. 57(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-4-resources" }, { "obligation_id": "art-57-5-controlled", "article": 57, "paragraph": 5, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "AI regulatory sandboxes must provide a controlled environment that supports development, training, testing and validation of innovative AI systems for a limited time before market placement or service, under an agreed plan with safeguards.", "quote": "\"AI regulatory sandboxes established under this Article shall provide for a controlled environment that fosters innovation and facilitates the development, training, testing and validation of innovative AI systems\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers using sandboxes to develop or test innovative legal-sector AI systems.", "cross_references": [ "Art. 57 sandbox plan" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-5-controlled" }, { "obligation_id": "art-57-5-testing-plan", "article": 57, "paragraph": 5, "point": null, "actor": [ "provider", "national-competent-authority" ], "obligation_type": "documentation", "risk_tier": "not-tier-specific", "summary": "Where a sandbox includes testing in real world conditions, the sandbox plan must incorporate the real-world testing plan referred to in Articles 60 and 60a where applicable.", "quote": "\"Where applicable, the sandbox plan shall incorporate the real-world testing plan referred to in Articles 60 and 60a\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers conducting sandbox-based real-world testing.", "cross_references": [ "Art. 60", "Art. 60a" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-5-testing-plan" }, { "obligation_id": "art-57-6", "article": 57, "paragraph": 6, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "Competent authorities must provide guidance, supervision and support within AI regulatory sandboxes to identify risks, testing, mitigation measures and their effectiveness under the AI Act and other supervised law.", "quote": "\"Competent authorities shall provide, as appropriate, guidance, supervision and support within the AI regulatory sandbox with a view to identifying risks\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Sandbox guidance may help legal-AI providers understand regulatory expectations.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-6" }, { "obligation_id": "art-57-7", "article": 57, "paragraph": 7, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "Competent authorities must provide participating providers and prospective providers with guidance on regulatory expectations and how to fulfil AI Act requirements and obligations.", "quote": "\"Competent authorities shall provide providers and prospective providers participating in the AI regulatory sandbox with guidance on regulatory expectations and how to fulfil the requirements and obligations set out in this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Directly useful to legal-AI providers participating in a sandbox.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-7" }, { "obligation_id": "art-57-8", "article": 57, "paragraph": 8, "point": null, "actor": [ "commission", "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Subject to confidentiality and provider agreement, the Commission and Board may access sandbox exit reports and consider them when performing AI Act tasks; an exit report may be made public if both provider and authority agree.", "quote": "\"the Commission and the Board shall be authorised to access the exit reports and shall take them into account, as appropriate, when exercising their tasks under this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Exit reports may inform AI Act governance affecting legal-AI sandbox participants.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-8" }, { "obligation_id": "art-57-9", "article": 57, "paragraph": 9, "point": null, "actor": [ "member-state", "national-competent-authority" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "AI regulatory sandboxes must aim to improve legal certainty, share best practices, foster innovation and competitiveness, support evidence-based regulatory learning, and facilitate and accelerate Union-market access, especially for SMEs, start-ups and SMCs.", "quote": "\"The establishment of AI regulatory sandboxes shall aim to contribute to the following objectives:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Sandbox objectives may benefit legal-AI SMEs and start-ups but are principally institutional.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-9" }, { "obligation_id": "art-57-10", "article": 57, "paragraph": 10, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "data-governance", "risk_tier": "not-tier-specific", "summary": "National competent authorities must associate data protection authorities and other competent authorities with sandbox operation and supervision when innovative AI systems involve personal-data processing or fall within those authorities’ remits.", "quote": "\"National competent authorities shall ensure that, to the extent the innovative AI systems involve the processing of personal data or otherwise fall under the supervisory remit of other national authorities\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI sandbox projects processing client, employee, court, or public-sector personal data.", "cross_references": [ "Regulation (EU) 2016/679" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-10" }, { "obligation_id": "art-57-11", "article": 57, "paragraph": 11, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "Significant health, safety or fundamental-rights risks identified during sandbox development and testing must be adequately mitigated; national competent authorities may temporarily or permanently suspend testing or participation if effective mitigation is impossible and must inform the AI Office.", "quote": "\"Any significant risks to health and safety and fundamental rights identified during the development and testing of such AI systems shall result in an adequate mitigation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI sandbox tests that may affect fundamental rights or access to justice.", "cross_references": [ "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-11" }, { "obligation_id": "art-57-12", "article": 57, "paragraph": 12, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "not-tier-specific", "summary": "Sandbox participants remain liable for third-party damage from experimentation, but no administrative fines are imposed for AI Act infringements when prospective providers follow the plan, participation terms and good-faith authority guidance.", "quote": "\"Providers and prospective providers participating in the AI regulatory sandbox shall remain liable under applicable Union and national liability law for any damage inflicted on third parties\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers experimenting in sandboxes because liability remains despite fine relief.", "cross_references": [ "Art. 57 sandbox plan" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-12" }, { "obligation_id": "art-57-13", "article": 57, "paragraph": 13, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "AI regulatory sandboxes must be designed and implemented so that, where relevant, they facilitate cross-border cooperation between national competent authorities.", "quote": "\"The AI regulatory sandboxes shall be designed and implemented in such a way that, where relevant, they facilitate cross-border cooperation between national competent authorities\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Cross-border sandbox cooperation may indirectly help legal-AI providers operating in multiple Member States.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-13" }, { "obligation_id": "art-57-14", "article": 57, "paragraph": 14, "point": null, "actor": [ "national-competent-authority", "union-institution", "ai-office", "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "National competent authorities, the EDPS and the AI Office must coordinate and cooperate within the Board framework, and may support joint sandbox establishment, operation and exchange of best practices.", "quote": "\"National competent authorities, the European Data Protection Supervisor and the AI Office, shall, as appropriate and within their respective competences, coordinate their activities and cooperate within the framework of the Board\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional coordination may improve sandbox consistency for legal-AI providers.", "cross_references": [ "AI Board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-14" }, { "obligation_id": "art-57-15", "article": 57, "paragraph": 15, "point": null, "actor": [ "national-competent-authority", "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "National competent authorities must inform the AI Office and Board when establishing a sandbox and may ask for support; the AI Office must publish and update a list of planned and existing sandboxes.", "quote": "\"National competent authorities shall inform the AI Office and the Board of the establishment of a sandbox, and may ask them for support and guidance\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Public sandbox information helps legal-AI innovators identify available sandboxes.", "cross_references": [ "AI Board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-15" }, { "obligation_id": "art-57-16", "article": 57, "paragraph": 16, "point": null, "actor": [ "national-competent-authority", "commission" ], "obligation_type": "monitoring", "risk_tier": "not-tier-specific", "summary": "National competent authorities must submit annual and final sandbox reports to the AI Office and Board, publish the reports or abstracts online, and the Commission must consider them where appropriate when exercising AI Act tasks.", "quote": "\"National competent authorities shall submit annual reports to the AI Office and to the Board, from one year after the establishment of the AI regulatory sandbox and every year thereafter until its termination, and a final report\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Sandbox reporting may indirectly surface lessons for legal-AI systems tested in sandboxes.", "cross_references": [ "AI Office", "AI Board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-16" }, { "obligation_id": "art-57-17", "article": 57, "paragraph": 17, "point": null, "actor": [ "commission" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The Commission must develop a single dedicated interface containing relevant sandbox information so stakeholders can interact with sandboxes, raise enquiries and seek non-binding guidance on conformity of innovative AI-embedded offerings.", "quote": "\"The Commission shall develop a single and dedicated interface containing all relevant information related to AI regulatory sandboxes to allow stakeholders to interact with AI regulatory sandboxes\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "The interface may help legal-AI providers find sandbox contacts and non-binding conformity guidance.", "cross_references": [ "Art. 62(1)(c)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-17" }, { "obligation_id": "art-57-3a", "article": 57, "paragraph": "3a", "point": null, "actor": [ "ai-office" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The AI Office may establish a Union-level AI regulatory sandbox for Article 75(1) systems, in close cooperation with relevant authorities and with priority access for SMEs, start-ups and SMCs.", "quote": "\"The AI Office may establish an AI regulatory sandbox at Union level for AI systems covered by Article 75(1)\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Union-level sandbox may indirectly assist legal-AI SMEs and start-ups whose systems fall under Article 75(1).", "cross_references": [ "Art. 75(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_57", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-57#art-57-3a" }, { "obligation_id": "art-58-1", "article": 58, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "To avoid Union fragmentation, the Commission must adopt implementing acts specifying detailed arrangements for AI regulatory sandbox establishment, development, implementation, operation, governance and supervision, including common principles.", "quote": "\"the Commission shall adopt implementing acts specifying the detailed arrangements for the establishment, development, implementation, operation, governance, and supervision of the AI regulatory sandboxes\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional rules for sandboxes that may be used by legal-AI providers.", "cross_references": [ "Art. 98(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_58", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-58#art-58-1" }, { "obligation_id": "art-58-2", "article": 58, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The sandbox implementing acts must ensure transparent and fair access, broad and equal participation, flexibility, free SME access subject to limited cost recovery, streamlined procedures, mutual recognition, appropriate duration and testing infrastructure.", "quote": "\"The implementing acts referred to in paragraph 1 shall ensure:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Implementation principles can affect how legal-AI SMEs and providers access sandboxes.", "cross_references": [ "Art. 58(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_58", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-58#art-58-2" }, { "obligation_id": "art-58-3", "article": 58, "paragraph": 3, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "Prospective providers in AI regulatory sandboxes, especially SMEs and start-ups, must be directed where relevant to pre-deployment guidance and other value-adding services such as standardisation, certification, testing facilities, EDIHs and centres of excellence.", "quote": "\"Prospective providers in the AI regulatory sandboxes, in particular SMEs and start-ups, shall be directed, where relevant, to pre-deployment services such as guidance on the implementation of this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Useful to legal-AI SMEs or start-ups seeking pre-deployment support.", "cross_references": [ "Art. 95" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_58", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-58#art-58-3" }, { "obligation_id": "art-58-4-cooperation", "article": 58, "paragraph": 4, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Where appropriate, national competent authorities must cooperate with other national competent authorities to ensure consistent practices for real-world testing supervised in sandboxes across the Union.", "quote": "\"Where appropriate, they shall cooperate with other national competent authorities with a view to ensuring consistent practices across the Union\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Consistency of sandbox testing practices indirectly benefits legal-AI providers operating cross-border.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_58", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-58#art-58-4-cooperation" }, { "obligation_id": "art-58-4-safeguards", "article": 58, "paragraph": 4, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "When national competent authorities consider authorising real-world testing supervised in a sandbox, they must specifically agree the testing terms, conditions and appropriate safeguards with participants to protect fundamental rights, health and safety.", "quote": "\"they shall specifically agree the terms and conditions of such testing and, in particular, the appropriate safeguards with the participants, with a view to protecting fundamental rights, health and safety\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers testing systems that may affect rights, clients, court users, or public services.", "cross_references": [ "Art. 60", "Art. 60a" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_58", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-58#art-58-4-safeguards" }, { "obligation_id": "art-59-1", "article": 59, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "In an AI regulatory sandbox, personal data lawfully collected for other purposes may be processed only to develop, train and test certain AI systems when all Article 59(1) cumulative conditions are met.", "quote": "\"personal data lawfully collected for other purposes may be processed solely for the purpose of developing, training and testing certain AI systems in the sandbox when all of the following conditions are met\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI sandbox projects using existing personal data to develop or test AI systems.", "cross_references": [ "Art. 57", "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1" }, { "obligation_id": "art-59-1-a", "article": 59, "paragraph": 1, "point": "a", "actor": [ "provider", "public-authority-deployer", "other" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "The sandbox AI system must be developed to safeguard a substantial public interest by a public authority or another person in one or more listed areas such as public safety, health, environment, energy, transport, critical infrastructure, public administration or public services.", "quote": "\"AI systems shall be developed for safeguarding substantial public interest by a public authority or another natural or legal person and in one or more of the following areas\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Usually indirect for legal practice unless a public legal body develops AI for public administration or services.", "cross_references": [ "Art. 59(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-a" }, { "obligation_id": "art-59-1-b", "article": 59, "paragraph": 1, "point": "b", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "The personal data processed in the sandbox must be necessary to comply with one or more Chapter III Section 2 requirements that cannot effectively be met with anonymised, synthetic or other non-personal data.", "quote": "\"the data processed are necessary for complying with one or more of the requirements referred to in Chapter III, Section 2 where those requirements cannot effectively be fulfilled by processing anonymised, synthetic or other non-personal data\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant when legal-AI sandbox testing needs real personal data to meet high-risk requirements.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-b" }, { "obligation_id": "art-59-1-c", "article": 59, "paragraph": 1, "point": "c", "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Effective monitoring mechanisms must identify whether high risks to data-subject rights and freedoms arise during sandbox experimentation, with response mechanisms to promptly mitigate risks and stop processing where necessary.", "quote": "\"there are effective monitoring mechanisms to identify if any high risks to the rights and freedoms of the data subjects\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI sandbox projects processing sensitive client, employee, court-user, or public-service personal data.", "cross_references": [ "Art. 35 Regulation (EU) 2016/679", "Art. 39 Regulation (EU) 2018/1725" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-c" }, { "obligation_id": "art-59-1-d", "article": 59, "paragraph": 1, "point": "d", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Personal data processed in a sandbox must be kept in a functionally separate, isolated and protected data-processing environment under the prospective provider’s control, with access limited to authorised persons.", "quote": "\"any personal data to be processed in the context of the sandbox are in a functionally separate, isolated and protected data processing environment under the control of the prospective provider\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI sandbox tests involving confidential or personal legal data.", "cross_references": [ "Regulation (EU) 2016/679" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-d" }, { "obligation_id": "art-59-1-e", "article": 59, "paragraph": 1, "point": "e", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Providers may further share originally collected personal data only under Union data-protection law, and personal data created in the sandbox may not be shared outside the sandbox.", "quote": "\"providers can further share the originally collected data only in accordance with Union data protection law; any personal data created in the sandbox cannot be shared outside the sandbox\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers limiting onward sharing of personal data generated or used during sandbox tests.", "cross_references": [ "Regulation (EU) 2016/679" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-e" }, { "obligation_id": "art-59-1-f", "article": 59, "paragraph": 1, "point": "f", "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Personal-data processing in the sandbox must not lead to measures or decisions affecting data subjects and must not affect their Union data-protection rights.", "quote": "\"any processing of personal data in the context of the sandbox neither leads to measures or decisions affecting the data subjects nor does it affect the application of their rights\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI sandbox projects so experimentation does not determine legal outcomes for data subjects.", "cross_references": [ "Regulation (EU) 2016/679" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-f" }, { "obligation_id": "art-59-1-g", "article": 59, "paragraph": 1, "point": "g", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Personal data processed in the sandbox must be protected by appropriate technical and organisational measures and deleted once sandbox participation ends or the retention period expires.", "quote": "\"any personal data processed in the context of the sandbox are protected by means of appropriate technical and organisational measures and deleted once the participation in the sandbox has terminated\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to retention and deletion of personal legal data in sandbox projects.", "cross_references": [ "Regulation (EU) 2016/679" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-g" }, { "obligation_id": "art-59-1-h", "article": 59, "paragraph": 1, "point": "h", "actor": [ "provider" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Logs of personal-data processing in the sandbox must be kept for the duration of sandbox participation unless Union or national law provides otherwise.", "quote": "\"the logs of the processing of personal data in the context of the sandbox are kept for the duration of the participation in the sandbox\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to auditability of legal-AI sandbox projects using personal data.", "cross_references": [ "Regulation (EU) 2016/679" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-h" }, { "obligation_id": "art-59-1-i", "article": 59, "paragraph": 1, "point": "i", "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "A complete and detailed description of the process and rationale behind the AI system’s training, testing and validation must be kept with testing results as part of Annex IV technical documentation.", "quote": "\"a complete and detailed description of the process and rationale behind the training, testing and validation of the AI system is kept together with the testing results\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to high-risk legal-AI providers creating technical documentation during sandbox development.", "cross_references": [ "Annex IV" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-i" }, { "obligation_id": "art-59-1-j", "article": 59, "paragraph": 1, "point": "j", "actor": [ "national-competent-authority" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "A short summary of the sandbox AI project, objectives and expected results must be published on the competent authority’s website, excluding sensitive operational data for law enforcement, border, immigration or asylum authorities.", "quote": "\"a short summary of the AI project developed in the sandbox, its objectives and expected results is published on the website of the competent authorities\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Public summaries may describe public-interest legal-AI sandbox projects without sensitive operational data.", "cross_references": [ "Art. 59(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-1-j" }, { "obligation_id": "art-59-2", "article": 59, "paragraph": 2, "point": null, "actor": [ "public-authority-deployer" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "For law-enforcement purposes under authority control and responsibility, personal-data processing in AI regulatory sandboxes must be based on specific Union or national law and meet the same cumulative conditions as Article 59(1).", "quote": "\"the processing of personal data in AI regulatory sandboxes shall be based on a specific Union or national law and subject to the same cumulative conditions as referred to in paragraph 1\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Relevant mainly to public legal or law-enforcement authorities, not ordinary legal practice.", "cross_references": [ "Art. 59(1)", "Directive (EU) 2016/680" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-2" }, { "obligation_id": "art-59-3", "article": 59, "paragraph": 3, "point": null, "actor": [ "provider", "public-authority-deployer" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Article 59(1) does not override Union or national laws excluding further processing or laws providing a separate basis for developing, testing or training innovative AI systems in compliance with EU data-protection law.", "quote": "\"Paragraph 1 is without prejudice to Union or national law which excludes processing of personal data for other purposes than those explicitly mentioned in that law\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Clarifies that legal-AI sandbox projects must still respect applicable data-protection and sectoral limits.", "cross_references": [ "Regulation (EU) 2016/679" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_59", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-59#art-59-3" }, { "obligation_id": "art-60-1", "article": 60, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Providers or prospective providers may conduct real-world testing of Annex III or Annex I Section A high-risk AI systems outside sandboxes only under Article 60 and the real-world testing plan, without prejudice to Article 5 prohibitions.", "quote": "\"Testing of high-risk AI systems in real world conditions outside AI regulatory sandboxes may be conducted by providers or prospective providers of high-risk AI systems listed in Annex III or covered by Union harmonisation legislation listed in Section A of Annex I\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers testing Annex III high-risk systems outside sandboxes.", "cross_references": [ "Annex III", "Annex I Section A", "Art. 5" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-1" }, { "obligation_id": "art-60-2", "article": 60, "paragraph": 2, "point": null, "actor": [ "provider", "deployer" ], "obligation_type": "support-measure", "risk_tier": "high-risk", "summary": "Providers or prospective providers may conduct pre-market real-world testing of covered high-risk AI systems on their own or with deployers or prospective deployers.", "quote": "\"Providers or prospective providers may conduct testing of high-risk AI systems referred to in Annex III or covered by Union harmonisation legislation listed in Section A of Annex I in real world conditions at any time before the placing on the market\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers and participating deployers in pre-market tests of high-risk systems.", "cross_references": [ "Annex III", "Annex I Section A" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-2" }, { "obligation_id": "art-60-3", "article": 60, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "scope-or-definition", "risk_tier": "high-risk", "summary": "Real-world testing under Article 60 does not displace any ethical review required by Union or national law.", "quote": "\"The testing of high-risk AI systems in real world conditions under this Article shall be without prejudice to any ethical review that is required by Union or national law\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant where legal-AI testing involving people, courts or public services triggers ethical review.", "cross_references": [ "Union or national ethical-review law" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-3" }, { "obligation_id": "art-60-4-a", "article": 60, "paragraph": 4, "point": "a", "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "A provider or prospective provider may conduct real-world testing only after drawing up a real-world testing plan and submitting it to the market surveillance authority in the Member State where testing will occur.", "quote": "\"the provider or prospective provider has drawn up a real-world testing plan and submitted it to the market surveillance authority in the Member State where the testing in real world conditions is to be conducted\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers planning high-risk real-world tests.", "cross_references": [ "Market surveillance authority" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-a" }, { "obligation_id": "art-60-4-b", "article": 60, "paragraph": 4, "point": "b", "actor": [ "provider", "market-surveillance-authority" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "Real-world testing may proceed only when the market surveillance authority approves the testing and plan, or where applicable is deemed to have approved after 30 days; national law may require express authorisation.", "quote": "\"the market surveillance authority in the Member State where the testing in real world conditions is to be conducted has approved the testing in real world conditions and the real-world testing plan\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers needing authority approval for high-risk real-world tests.", "cross_references": [ "Market surveillance authority" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-b" }, { "obligation_id": "art-60-4-c", "article": 60, "paragraph": 4, "point": "c", "actor": [ "provider" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "The provider or prospective provider must register real-world testing with the required Union-wide identification number and information in the appropriate EU database, secure non-public database section, or national register depending on the system category.", "quote": "\"the provider or prospective provider, with the exception of providers or prospective providers of high-risk AI systems referred to in points 1, 6 and 7 of Annex III\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers registering high-risk real-world tests.", "cross_references": [ "Art. 71(4)", "Art. 49(4)", "Art. 49(5)", "Annex IX" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-c" }, { "obligation_id": "art-60-4-d", "article": 60, "paragraph": 4, "point": "d", "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "The provider or prospective provider conducting real-world testing must be established in the Union or have appointed a legal representative established in the Union.", "quote": "\"the provider or prospective provider conducting the testing in real world conditions is established in the Union or has appointed a legal representative who is established in the Union\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to non-EU legal-AI vendors conducting high-risk testing in the Union.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-d" }, { "obligation_id": "art-60-4-e", "article": 60, "paragraph": 4, "point": "e", "actor": [ "provider" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "Data collected and processed for real-world testing may be transferred to third countries only when appropriate and applicable Union-law safeguards are implemented.", "quote": "\"data collected and processed for the purpose of the testing in real world conditions shall be transferred to third countries only provided that appropriate and applicable safeguards under Union law are implemented\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI testing involving cross-border processing of personal or confidential data.", "cross_references": [ "Union data-protection law" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-e" }, { "obligation_id": "art-60-4-f", "article": 60, "paragraph": 4, "point": "f", "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Real-world testing must last no longer than necessary and no longer than six months, with one additional six-month extension only after prior notification to the market surveillance authority and an explanation of need.", "quote": "\"the testing in real world conditions does not last longer than necessary to achieve its objectives and in any case not longer than six months\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers setting duration for high-risk real-world tests.", "cross_references": [ "Market surveillance authority" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-f" }, { "obligation_id": "art-60-4-g", "article": 60, "paragraph": 4, "point": "g", "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "Persons belonging to vulnerable groups due to age or disability who are subjects of real-world testing must be appropriately protected.", "quote": "\"the subjects of the testing in real world conditions who are persons belonging to vulnerable groups due to their age or disability, are appropriately protected\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI tests involving children, older persons, or persons with disabilities.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-g" }, { "obligation_id": "art-60-4-h", "article": 60, "paragraph": 4, "point": "h", "actor": [ "provider", "deployer" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "When a provider or prospective provider tests with deployers or prospective deployers, they must inform them of relevant testing aspects, provide Article 13 instructions for use, and conclude an agreement specifying roles and responsibilities for compliance.", "quote": "\"the latter have been informed of all aspects of the testing that are relevant to their decision to participate, and given the relevant instructions for use of the AI system referred to in Article 13\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant when law firms, courts, or legal departments participate as deployers in high-risk tests.", "cross_references": [ "Art. 13" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-h" }, { "obligation_id": "art-60-4-i", "article": 60, "paragraph": 4, "point": "i", "actor": [ "provider" ], "obligation_type": "information-to-persons", "risk_tier": "high-risk", "summary": "Real-world testing subjects must give informed consent under Article 61, except in the specified law-enforcement case where testing and outcomes must not negatively affect subjects and personal data must be deleted after the test.", "quote": "\"the subjects of the testing in real world conditions have given informed consent in accordance with Article 61\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers running tests with clients, employees, court users, or the public.", "cross_references": [ "Art. 61" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-i" }, { "obligation_id": "art-60-4-j", "article": 60, "paragraph": 4, "point": "j", "actor": [ "provider", "deployer" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "Real-world testing must be effectively overseen by the provider or prospective provider and by participating deployers or prospective deployers through suitably qualified persons with the necessary capacity, training and authority.", "quote": "\"the testing in real world conditions is effectively overseen by the provider or prospective provider, as well as by deployers or prospective deployers through persons who are suitably qualified\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to law firms, courts, or legal departments participating in supervised high-risk testing.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-j" }, { "obligation_id": "art-60-4-k", "article": 60, "paragraph": 4, "point": "k", "actor": [ "provider" ], "obligation_type": "human-oversight", "risk_tier": "high-risk", "summary": "The predictions, recommendations or decisions of the AI system used in real-world testing must be capable of being effectively reversed and disregarded.", "quote": "\"the predictions, recommendations or decisions of the AI system can be effectively reversed and disregarded\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High for legal or justice AI tests because AI outputs must not irreversibly determine legal outcomes.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-4-k" }, { "obligation_id": "art-60-5", "article": 60, "paragraph": 5, "point": null, "actor": [ "natural-person" ], "obligation_type": "right-of-person", "risk_tier": "high-risk", "summary": "Any real-world testing subject, or legally designated representative, may withdraw at any time without detriment or justification by revoking informed consent and may request immediate and permanent deletion of personal data.", "quote": "\"Any subjects of the testing in real world conditions, or their legally designated representative, as appropriate, may, without any resulting detriment and without having to provide any justification, withdraw from the testing at any time\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to individuals participating in legal-AI or justice-AI real-world tests.", "cross_references": [ "Art. 61" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-5" }, { "obligation_id": "art-60-6", "article": 60, "paragraph": 6, "point": null, "actor": [ "member-state", "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "Member States must confer powers on market surveillance authorities to require information, conduct unannounced remote or on-site inspections, and check real-world testing and related high-risk AI systems; authorities must use those powers to ensure safe testing development.", "quote": "\"Member States shall confer on their market surveillance authorities the powers of requiring providers and prospective providers to provide information, of carrying out unannounced remote or on-site inspections\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Enforcement powers may affect legal-AI providers conducting high-risk real-world testing.", "cross_references": [ "Art. 75" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-6" }, { "obligation_id": "art-60-7-mitigate", "article": 60, "paragraph": 7, "point": null, "actor": [ "provider" ], "obligation_type": "risk-management", "risk_tier": "high-risk", "summary": "After a serious incident in real-world testing, the provider or prospective provider must adopt immediate mitigation measures or suspend testing until mitigation occurs, or otherwise terminate it.", "quote": "\"The provider or prospective provider shall adopt immediate mitigation measures or, failing that, shall suspend the testing in real world conditions until such mitigation takes place, or otherwise terminate it\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers managing incidents during high-risk testing.", "cross_references": [ "Art. 73" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-7-mitigate" }, { "obligation_id": "art-60-7-recall", "article": 60, "paragraph": 7, "point": null, "actor": [ "provider" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "Upon termination of real-world testing after a serious incident, the provider or prospective provider must have a procedure for promptly recalling the AI system.", "quote": "\"The provider or prospective provider shall establish a procedure for the prompt recall of the AI system upon such termination of the testing in real world conditions\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers terminating a high-risk test after an incident.", "cross_references": [ "Art. 73" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-7-recall" }, { "obligation_id": "art-60-7-report", "article": 60, "paragraph": 7, "point": null, "actor": [ "provider" ], "obligation_type": "incident-reporting", "risk_tier": "high-risk", "summary": "Any serious incident identified during real-world testing must be reported to the national market surveillance authority in accordance with Article 73.", "quote": "\"Any serious incident identified in the course of the testing in real world conditions shall be reported to the national market surveillance authority in accordance with Article 73\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers if high-risk testing causes or reveals serious incidents.", "cross_references": [ "Art. 73" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-7-report" }, { "obligation_id": "art-60-8", "article": 60, "paragraph": 8, "point": null, "actor": [ "provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Providers or prospective providers must notify the national market surveillance authority in the testing Member State of suspension or termination of real-world testing and of final outcomes.", "quote": "\"Providers or prospective providers shall notify the national market surveillance authority in the Member State where the testing in real world conditions is to be conducted of the suspension or termination of the testing in real world conditions and of the final outcomes\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers closing or suspending high-risk tests.", "cross_references": [ "Market surveillance authority" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-8" }, { "obligation_id": "art-60-9", "article": 60, "paragraph": 9, "point": null, "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "The provider or prospective provider is liable under applicable Union and national liability law for damage caused during real-world testing.", "quote": "\"The provider or prospective provider shall be liable under applicable Union and national liability law for any damage caused in the course of their testing in real world conditions\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": "Chapter III Sections 1-3 apply from 2027-12-02 for Annex III high-risk systems and 2028-08-02 for Annex I high-risk systems under Art. 113(c) as amended; this row applies when the relevant high-risk rules bite.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Relevant to legal-AI providers because liability remains for harms during high-risk tests.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60#art-60-9" }, { "obligation_id": "art-60a-1", "article": "60a", "paragraph": 1, "point": null, "actor": [ "member-state" ], "obligation_type": "support-measure", "risk_tier": "high-risk", "summary": "Member States may allow real-world testing outside sandboxes by providers or prospective providers of AI-enabled products covered by Annex I Section B harmonisation legislation to assess and verify conformity with Articles 8 to 15.", "quote": "\"Member States may allow, in accordance with this Article, the testing of high-risk AI systems in real world conditions outside AI regulatory sandboxes by providers or prospective providers of AI enabled products\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Mostly indirect for legal practice unless a legal-AI system is part of an Annex I Section B product.", "cross_references": [ "Annex I Section B", "Art. 8", "Art. 15" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60a#art-60a-1" }, { "obligation_id": "art-60a-2", "article": "60a", "paragraph": 2, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "Member States that choose to allow Article 60a testing must, individually or jointly, adopt frameworks for real-world testing.", "quote": "\"Member States that choose to allow testing as referred to in paragraph 1 shall, individually or jointly, adopt frameworks for real-world testing\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Framework duty has indirect relevance to legal-AI providers in regulated products.", "cross_references": [ "Art. 60a(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60a#art-60a-2" }, { "obligation_id": "art-60a-3", "article": "60a", "paragraph": 3, "point": null, "actor": [ "member-state" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Each Member State must notify the Commission of any real-world testing framework it adopts before implementing the framework, without affecting Commission competences under Annex I Section B harmonisation legislation.", "quote": "\"Each Member State shall notify the Commission of any real-world testing framework it adopts before implementing it\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional notification with indirect legal-practice relevance.", "cross_references": [ "Commission", "Annex I Section B" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60a#art-60a-3" }, { "obligation_id": "art-60a-4", "article": "60a", "paragraph": 4, "point": null, "actor": [ "member-state", "national-competent-authority" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "Member States with real-world testing frameworks must ensure relevant competent, relevant and public infrastructure authorities cooperate closely in good faith and remove practical obstacles, including procedural barriers to physical public infrastructure access when necessary.", "quote": "\"shall ensure that the relevant national competent authorities, relevant authorities and public authorities responsible for the management and operation of infrastructure and products covered by Union harmonisation legislation listed in Section B of Annex I cooperate closely with each other in good faith\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Mostly indirect for legal practice unless legal-AI products depend on regulated public infrastructure.", "cross_references": [ "Annex I Section B" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60a#art-60a-4" }, { "obligation_id": "art-60a-5-b-d", "article": "60a", "paragraph": 5, "point": null, "actor": [ "member-state" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Article 60a frameworks must ensure compliance with listed Article 60 testing safeguards, include effective governance and accountability arrangements, and ensure a high level of health, safety and fundamental-rights protection.", "quote": "\"ensure compliance with the requirements laid down in Article 60(2), (3), (4)(d)-(j) and (5)-(9)\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Indirect for legal-AI providers unless they test AI-enabled regulated products under Annex I Section B.", "cross_references": [ "Art. 60(2)", "Art. 60(3)", "Art. 60(4)(d)-(j)", "Art. 60(5)-(9)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60a#art-60a-5-b-d" }, { "obligation_id": "art-60a-5-a", "article": "60a", "paragraph": 5, "point": "a", "actor": [ "member-state" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "Article 60a real-world testing frameworks must require a mandatory testing plan agreed between the provider or prospective provider and the national competent or relevant authority under Annex I Section B harmonisation legislation.", "quote": "\"include the provision of a mandatory real-world testing plan to be agreed between the provider or prospective provider and the national competent authority or relevant authority\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Indirect for legal-AI providers unless they test AI-enabled regulated products.", "cross_references": [ "Annex I Section B" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60a#art-60a-5-a" }, { "obligation_id": "art-60a-6", "article": "60a", "paragraph": 6, "point": null, "actor": [ "provider" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Real-world testing under Article 60a must comply with applicable provisions of Annex I Section B Union harmonisation legislation, without those provisions preventing Article 60a testing to the extent necessary.", "quote": "\"The real-world testing shall comply with the applicable provisions laid down in the Union harmonisation legislation listed in Section B of Annex I\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "Indirect for legal-AI providers unless covered by Annex I Section B harmonisation legislation.", "cross_references": [ "Annex I Section B" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_60a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-60a#art-60a-6" }, { "obligation_id": "art-61-1", "article": 61, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "information-to-persons", "risk_tier": "high-risk", "summary": "For Article 60 real-world testing, freely given informed consent must be obtained before participation after concise, clear, relevant and understandable information on nature, conditions, rights, reversal arrangements and identification/contact details.", "quote": "\"For the purpose of testing in real world conditions under Article 60, freely-given informed consent shall be obtained from the subjects of testing prior to their participation in such testing and after their having been duly informed with concise, clear, relevant, and understandable information regarding:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI vendors testing high-risk systems with natural-person subjects.", "cross_references": [ "Art. 60" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_61", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-61#art-61-1" }, { "obligation_id": "art-61-2", "article": 61, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "record-keeping", "risk_tier": "high-risk", "summary": "Informed consent for Article 60 real-world testing must be dated and documented, and a copy must be given to the test subject or legal representative.", "quote": "\"The informed consent shall be dated and documented and a copy shall be given to the subjects of testing or their legal representative.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI real-world testing documentation.", "cross_references": [ "Art. 60" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_61", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-61#art-61-2" }, { "obligation_id": "art-62-1-2", "article": 62, "paragraph": 1, "point": null, "actor": [ "member-state" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "Member States must support SMEs, start-ups, deployers and relevant public authorities through priority sandbox access, tailored awareness and training, advice channels, participation in standardisation, and proportionate conformity-assessment fees.", "quote": "\"Member States shall undertake the following actions:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for small legal-AI vendors and deployers seeking guidance, standardisation participation or reduced conformity-assessment burdens.", "cross_references": [ "Art. 43" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_62", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-62#art-62-1-2" }, { "obligation_id": "art-62-3", "article": 62, "paragraph": 3, "point": null, "actor": [ "ai-office" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The AI Office must provide standardised templates, maintain a single information platform, organise awareness campaigns, and evaluate and promote procurement best-practice convergence for AI systems.", "quote": "\"The AI Office shall undertake the following actions:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for legal-AI operators using official templates, guidance and procurement practices.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_62", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-62#art-62-3" }, { "obligation_id": "art-63-1", "article": 63, "paragraph": 1, "point": null, "actor": [ "commission", "provider" ], "obligation_type": "quality-management", "risk_tier": "high-risk", "summary": "Eligible microenterprises may comply with certain Article 17 quality-management elements in a simplified manner, and the Commission must develop guidelines on the simplified elements without reducing protection or compliance needs.", "quote": "\"Microenterprises within the meaning of Recommendation 2003/361/EC may comply with certain elements of the quality management system required by Article 17 of this Regulation in a simplified manner, provided that they do not have partner enterprises or linked enterprises within the meaning of that Recommendation. For that purpose, the Commission shall develop\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for microenterprise legal-AI vendors subject to high-risk quality-management duties.", "cross_references": [ "Art. 17" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_63", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-63#art-63-1" }, { "obligation_id": "art-63-2", "article": 63, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "The microenterprise simplification must not be interpreted as exempting operators from any other Regulation requirements or obligations, including listed high-risk and post-market obligations.", "quote": "\"Paragraph 1 of this Article shall not be interpreted as exempting those operators from fulfilling any other requirements or obligations laid down in this Regulation, including those established in Articles 9, 10, 11, 12, 13, 14, 15, 72 and 73.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Medium for small legal-AI vendors because simplification does not remove other duties.", "cross_references": [ "Art. 9", "Art. 10", "Art. 11", "Art. 12", "Art. 13", "Art. 14", "Art. 15", "Art. 72", "Art. 73" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_63", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-63#art-63-2" }, { "obligation_id": "art-64-1", "article": 64, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Commission must develop Union expertise and capabilities in AI through the AI Office.", "quote": "\"The Commission shall develop Union expertise and capabilities in the field of AI through the AI Office\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance row with indirect relevance to legal practice.", "cross_references": [ "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_64", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-64#art-64-1" }, { "obligation_id": "art-64-2", "article": 64, "paragraph": 2, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Member States must facilitate the tasks entrusted to the AI Office under the Regulation.", "quote": "\"Member States shall facilitate the tasks entrusted to the AI Office, as reflected in this Regulation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance row with indirect relevance to legal practice.", "cross_references": [ "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_64", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-64#art-64-2" }, { "obligation_id": "art-64-3", "article": 64, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The AI Office must be allocated adequate resources to perform its duties and exercise its enforcement powers effectively, without prejudice to the budgetary procedure.", "quote": "\"the AI Office shall be allocated adequate resources to effectively perform its duties and exercise its powers in relation to the enforcement of this Regulation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance resource row with indirect relevance to legal practice.", "cross_references": [ "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_64", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-64#art-64-3" }, { "obligation_id": "art-65-1", "article": 65, "paragraph": 1, "point": null, "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Regulation establishes the European Artificial Intelligence Board.", "quote": "\"A European Artificial Intelligence Board (the ‘Board’) is hereby established\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance row with indirect relevance to legal practice.", "cross_references": [ "AI Board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_65", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-65#art-65-1" }, { "obligation_id": "art-65-2", "article": 65, "paragraph": 2, "point": null, "actor": [ "ai-board", "member-state", "union-institution", "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board is composed of one representative per Member State, with the EDPS as observer and the AI Office attending without voting; other relevant authorities, bodies or experts may be invited case by case.", "quote": "\"The Board shall be composed of one representative per Member State. The European Data Protection Supervisor shall participate as observer\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance composition row with indirect relevance to legal practice.", "cross_references": [ "European Data Protection Supervisor", "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_65", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-65#art-65-2" }, { "obligation_id": "art-65-3", "article": 65, "paragraph": 3, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Each Board representative must be designated by the Member State for a three-year term, renewable once.", "quote": "\"Each representative shall be designated by their Member State for a period of three years, renewable once\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance appointment row with indirect relevance to legal practice.", "cross_references": [ "AI Board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_65", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-65#art-65-3" }, { "obligation_id": "art-65-4", "article": 65, "paragraph": 4, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Member States must ensure their Board representatives have relevant competences and powers, act as single contact points where appropriate, and are empowered to facilitate national consistency and coordination for AI Act implementation.", "quote": "\"Member States shall ensure that their representatives on the Board:\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance coordination row with indirect relevance to legal practice.", "cross_references": [ "Art. 66" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_65", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-65#art-65-4" }, { "obligation_id": "art-65-5", "article": 65, "paragraph": 5, "point": null, "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Member State representatives must adopt the Board’s rules of procedure by two-thirds majority, covering Chair selection, mandate, tasks, voting and organisation of Board and subgroup activities.", "quote": "\"The designated representatives of the Member States shall adopt the Board’s rules of procedure by a two-thirds majority\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance procedure row with indirect relevance to legal practice.", "cross_references": [ "AI Board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_65", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-65#art-65-5" }, { "obligation_id": "art-65-6", "article": 65, "paragraph": 6, "point": null, "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board must establish two standing subgroups for cooperation and exchange among market surveillance authorities and notifying authorities on market-surveillance and notified-body issues.", "quote": "\"The Board shall establish two standing sub-groups to provide a platform for cooperation and exchange among market surveillance authorities and notifying authorities\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance row with indirect relevance to notified-body and enforcement consistency.", "cross_references": [ "Market surveillance authorities", "Notifying authorities" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_65", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-65#art-65-6" }, { "obligation_id": "art-65-7", "article": 65, "paragraph": 7, "point": null, "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board must be organised and operated to safeguard the objectivity and impartiality of its activities.", "quote": "\"The Board shall be organised and operated so as to safeguard the objectivity and impartiality of its activities\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance integrity row with indirect legal-practice relevance.", "cross_references": [ "AI Board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_65", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-65#art-65-7" }, { "obligation_id": "art-65-8", "article": 65, "paragraph": 8, "point": null, "actor": [ "ai-board", "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board is chaired by a Member State representative; the AI Office must provide the secretariat, convene meetings on the Chair’s request, and prepare the agenda under the Board’s tasks and rules.", "quote": "\"The AI Office shall provide the secretariat for the Board, convene the meetings upon request of the Chair, and prepare the agenda\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance support row with indirect relevance to legal practice.", "cross_references": [ "Art. 66" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_65", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-65#art-65-8" }, { "obligation_id": "art-66-a", "article": 66, "paragraph": null, "point": "a", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board may coordinate national competent authorities and, with agreement of the market surveillance authorities concerned, support joint market-surveillance activities under Article 74(11).", "quote": "\"contribute to the coordination among national competent authorities responsible for the application of this Regulation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance task affecting enforcement consistency for legal-AI providers and deployers.", "cross_references": [ "Art. 74(11)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-a" }, { "obligation_id": "art-66-b", "article": 66, "paragraph": null, "point": "b", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board may collect and share technical and regulatory expertise and best practices among Member States.", "quote": "\"collect and share technical and regulatory expertise and best practices among Member States\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance knowledge-sharing with indirect relevance to legal practice.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-b" }, { "obligation_id": "art-66-c", "article": 66, "paragraph": null, "point": "c", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board may advise on AI Act implementation, particularly enforcement of rules on general-purpose AI models.", "quote": "\"provide advice on the implementation of this Regulation, in particular as regards the enforcement of rules on general-purpose AI models\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect relevance for legal-AI vendors that use or provide GPAI models.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-c" }, { "obligation_id": "art-66-d", "article": 66, "paragraph": null, "point": "d", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board may help harmonise Member State administrative practices, including for conformity-assessment derogations, AI regulatory sandboxes, and real-world testing.", "quote": "\"contribute to the harmonisation of administrative practices in the Member States\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect relevance to legal-AI providers using conformity routes, sandboxes, or real-world testing.", "cross_references": [ "Art. 46", "Art. 57", "Art. 59", "Art. 60" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-d" }, { "obligation_id": "art-66-e", "article": 66, "paragraph": null, "point": "e", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "At the Commission’s request or on its own initiative, the Board may issue recommendations and written opinions on AI Act implementation and consistent, effective application across listed matters.", "quote": "\"issue recommendations and written opinions on any relevant matters related to the implementation of this Regulation and to its consistent and effective application\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance recommendations may influence legal-AI compliance expectations.", "cross_references": [ "Art. 112", "Art. 73", "Art. 71", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-e" }, { "obligation_id": "art-66-f", "article": 66, "paragraph": null, "point": "f", "actor": [ "ai-board" ], "obligation_type": "support-measure", "risk_tier": "all-ai-systems", "summary": "The Board may support the Commission in promoting AI literacy, public awareness and understanding of AI benefits, risks, safeguards, rights and obligations.", "quote": "\"support the Commission in promoting AI literacy, public awareness and understanding of the benefits, risks, safeguards and rights and obligations in relation to the use of AI systems\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "AI-literacy governance indirectly supports legal AI users and deployers.", "cross_references": [ "Art. 4" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-f" }, { "obligation_id": "art-66-g", "article": 66, "paragraph": null, "point": "g", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board may facilitate common criteria and shared understanding among market operators and authorities of AI Act concepts, including by contributing to benchmark development.", "quote": "\"facilitate the development of common criteria and a shared understanding among market operators and competent authorities of the relevant concepts provided for in this Regulation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Shared concepts can affect legal-AI classification and compliance interpretation.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-g" }, { "obligation_id": "art-66-h", "article": 66, "paragraph": null, "point": "h", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board may cooperate with Union institutions, bodies, offices, agencies, expert groups and networks across product safety, cybersecurity, competition, digital and media services, finance, consumer protection, data and fundamental rights.", "quote": "\"cooperate, as appropriate, with other Union institutions, bodies, offices and agencies, as well as relevant Union expert groups and networks\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Cross-regulatory cooperation indirectly affects legal-AI systems intersecting with data, cybersecurity or consumer rules.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-h" }, { "obligation_id": "art-66-i", "article": 66, "paragraph": null, "point": "i", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board may contribute to effective cooperation with third-country competent authorities and international organisations.", "quote": "\"contribute to effective cooperation with the competent authorities of third countries and with international organisations\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "International cooperation indirectly affects cross-border legal-AI providers.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-i" }, { "obligation_id": "art-66-j", "article": 66, "paragraph": null, "point": "j", "actor": [ "ai-board" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The Board may assist national competent authorities and the Commission in developing organisational and technical expertise for AI Act implementation, including staff training-needs assessment.", "quote": "\"assist national competent authorities and the Commission in developing the organisational and technical expertise required for the implementation of this Regulation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Authority capacity-building indirectly affects enforcement experienced by legal-AI providers and deployers.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-j" }, { "obligation_id": "art-66-k", "article": 66, "paragraph": null, "point": "k", "actor": [ "ai-board" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The Board may assist the AI Office in supporting national competent authorities with AI regulatory sandboxes and may facilitate cooperation and information-sharing among sandboxes.", "quote": "\"assist the AI Office in supporting national competent authorities in the establishment and development of AI regulatory sandboxes\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Sandbox support may indirectly benefit legal-AI innovators.", "cross_references": [ "Art. 57" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-k" }, { "obligation_id": "art-66-l", "article": 66, "paragraph": null, "point": "l", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board may contribute to and provide relevant advice on developing guidance documents.", "quote": "\"contribute to, and provide relevant advice on, the development of guidance documents\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Guidance documents can affect legal-AI compliance interpretation.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-l" }, { "obligation_id": "art-66-m", "article": 66, "paragraph": null, "point": "m", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Board may advise the Commission on international AI matters.", "quote": "\"advise the Commission in relation to international matters on AI\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "International AI policy advice has indirect relevance to cross-border legal AI.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-m" }, { "obligation_id": "art-66-n", "article": 66, "paragraph": null, "point": "n", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "gpai-systemic-risk", "summary": "The Board may provide opinions to the Commission on qualified alerts concerning general-purpose AI models.", "quote": "\"provide opinions to the Commission on the qualified alerts regarding general-purpose AI models\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirectly relevant to legal-AI products based on GPAI models that may be subject to qualified alerts.", "cross_references": [ "Art. 90" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-n" }, { "obligation_id": "art-66-o", "article": 66, "paragraph": null, "point": "o", "actor": [ "ai-board" ], "obligation_type": "governance-institutional", "risk_tier": "gpai-systemic-risk", "summary": "The Board may receive Member State opinions on qualified alerts about general-purpose AI models and on national monitoring and enforcement experience, including systems integrating GPAI models.", "quote": "\"receive opinions by the Member States on qualified alerts regarding general-purpose AI models, and on national experiences and practices on the monitoring and enforcement of AI systems\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirect relevance to legal-AI systems integrating GPAI models.", "cross_references": [ "Art. 90" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_66", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-66#art-66-o" }, { "obligation_id": "art-67-1-5", "article": 67, "paragraph": 1, "point": null, "actor": [ "advisory-forum", "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "An advisory forum is established to provide technical expertise and advice, with balanced stakeholder membership appointed by the Commission and permanent members from specified Union and standards bodies.", "quote": "\"An advisory forum shall be established to provide technical expertise and advise the Board and the Commission, and to contribute to their tasks under this Regulation.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_67", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-67#art-67-1-5" }, { "obligation_id": "art-67-6-10", "article": 67, "paragraph": 6, "point": null, "actor": [ "advisory-forum" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The advisory forum must draw up rules of procedure, elect co-chairs, meet at least twice yearly, may prepare opinions and establish sub-groups, and must publish an annual activity report.", "quote": "\"The advisory forum shall draw up its rules of procedure. It shall elect two co-chairs from among its members, in accordance with criteria set out in paragraph 2. The term of office of the co-chairs shall be two years, renewable once.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_67", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-67#art-67-6-10" }, { "obligation_id": "art-68-1", "article": 68, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The Commission must adopt an implementing act establishing a scientific panel of independent experts to support enforcement activities under the AI Act.", "quote": "\"The Commission shall, by means of an implementing act, make provisions on the establishment of a scientific panel of independent experts\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance enforcement-support row with indirect relevance to legal-AI providers.", "cross_references": [ "Art. 98(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_68", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-68#art-68-1" }, { "obligation_id": "art-68-2", "article": 68, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The scientific panel must consist of experts selected by the Commission for current AI scientific or technical expertise and ability to demonstrate expertise, independence from AI-system or GPAI-model providers, and diligent, accurate, objective work.", "quote": "\"The scientific panel shall consist of experts selected by the Commission on the basis of up-to-date scientific or technical expertise in the field of AI\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Panel-selection governance with indirect relevance to legal-AI enforcement.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_68", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-68#art-68-2" }, { "obligation_id": "art-68-3-a", "article": 68, "paragraph": 3, "point": "a", "actor": [ "scientific-panel" ], "obligation_type": "governance-institutional", "risk_tier": "gpai-systemic-risk", "summary": "The scientific panel must advise and support the AI Office on GPAI-model and system implementation and enforcement, including alerts, evaluation tools, systemic-risk classification advice, broader GPAI classification advice, and tools and templates.", "quote": "\"The scientific panel shall advise and support the AI Office, in particular with regard to the following tasks:\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Indirectly relevant to legal-AI providers using GPAI models subject to AI Office enforcement.", "cross_references": [ "Art. 90", "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_68", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-68#art-68-3-a" }, { "obligation_id": "art-68-3-b", "article": 68, "paragraph": 3, "point": "b", "actor": [ "scientific-panel" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The scientific panel must support market surveillance authorities at their request.", "quote": "\"supporting the work of market surveillance authorities, at their request\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Enforcement-support role that may indirectly affect legal-AI providers under market surveillance.", "cross_references": [ "Market surveillance authorities" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_68", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-68#art-68-3-b" }, { "obligation_id": "art-68-3-c", "article": 68, "paragraph": 3, "point": "c", "actor": [ "scientific-panel" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The scientific panel must support cross-border market surveillance activities under Article 74(11), without prejudice to market surveillance authority powers.", "quote": "\"supporting cross-border market surveillance activities as referred to in Article 74(11), without prejudice to the powers of market surveillance authorities\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Cross-border enforcement support may indirectly affect legal-AI providers operating in multiple Member States.", "cross_references": [ "Art. 74(11)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_68", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-68#art-68-3-c" }, { "obligation_id": "art-68-3-d", "article": 68, "paragraph": 3, "point": "d", "actor": [ "scientific-panel" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The scientific panel must support the AI Office in carrying out duties under the Union safeguard procedure in Article 81.", "quote": "\"supporting the AI Office in carrying out its duties in the context of the Union safeguard procedure pursuant to Article 81\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Union safeguard support indirectly affects legal-AI systems subject to EU-level measures.", "cross_references": [ "Art. 81" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_68", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-68#art-68-3-d" }, { "obligation_id": "art-68-4", "article": 68, "paragraph": 4, "point": null, "actor": [ "scientific-panel", "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Scientific-panel experts must act impartially and objectively, keep information confidential, avoid seeking or taking instructions, publish declarations of interests, and the AI Office must manage and prevent conflicts of interest.", "quote": "\"The experts on the scientific panel shall perform their tasks with impartiality and objectivity, and shall ensure the confidentiality of information and data obtained\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance integrity row with indirect relevance to legal-AI enforcement.", "cross_references": [ "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_68", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-68#art-68-4" }, { "obligation_id": "art-68-5", "article": 68, "paragraph": 5, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The Commission implementing act establishing the scientific panel must include conditions, procedures and detailed arrangements for panel members to issue alerts and request AI Office assistance.", "quote": "\"The implementing act referred to in paragraph 1 shall include provisions on the conditions, procedures and detailed arrangements for the scientific panel and its members to issue alerts\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Procedural governance for scientific-panel enforcement support with indirect legal-practice relevance.", "cross_references": [ "Art. 68(1)", "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_68", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-68#art-68-5" }, { "obligation_id": "art-69-1", "article": 69, "paragraph": 1, "point": null, "actor": [ "member-state", "scientific-panel" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "Member States may call upon scientific-panel experts to support their AI Act enforcement activities.", "quote": "\"Member States may call upon experts of the scientific panel to support their enforcement activities under this Regulation\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Enforcement-support mechanism with indirect relevance to legal-AI providers and deployers.", "cross_references": [ "Art. 68" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_69", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-69#art-69-1" }, { "obligation_id": "art-69-2", "article": 69, "paragraph": 2, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Member States may be required to pay fees for expert advice and support at a rate equivalent to Commission remuneration fees under the Article 68(1) implementing act.", "quote": "\"The Member States may be required to pay fees for the advice and support provided by the experts at a rate equivalent to the remuneration fees applicable to the Commission\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Administrative funding row with indirect relevance to legal practice.", "cross_references": [ "Art. 68(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_69", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-69#art-69-2" }, { "obligation_id": "art-69-3", "article": 69, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Commission must facilitate Member States’ timely access to scientific-panel experts and organise expert support and Union AI testing support efficiently for best added value.", "quote": "\"The Commission shall facilitate timely access to the experts by the Member States, as needed\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Governance coordination row with indirect relevance to legal-AI enforcement.", "cross_references": [ "Art. 84" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng#art_69", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-69#art-69-3" }, { "obligation_id": "art-70-1", "article": 70, "paragraph": 1, "point": null, "actor": [ "member-state", "national-competent-authority" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Each Member State must establish or designate at least one notifying authority and at least one market surveillance authority, which must exercise powers independently, impartially and without bias.", "quote": "\"Each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of this Regulation. Those national competent authorities shall exercise their powers independently, impartially and without bias so as to safeguard the objectivity of their activities and\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_70", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-70#art-70-1" }, { "obligation_id": "art-70-2", "article": 70, "paragraph": 2, "point": null, "actor": [ "member-state", "commission" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Member States must communicate authority identities and tasks and later changes to the Commission, publish contact information by 2 August 2025, designate a single point of contact and notify it, and the Commission must publish the list.", "quote": "\"Member States shall communicate to the Commission the identity of the notifying authorities and the market surveillance authorities and the tasks of those authorities, as well as any subsequent changes thereto. Member States shall make publicly available information on how competent authorities and single points of contact can be contacted, through electronic\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_70", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-70#art-70-2" }, { "obligation_id": "art-70-3-6", "article": 70, "paragraph": 3, "point": null, "actor": [ "member-state", "national-competent-authority", "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Member States must resource national competent authorities, assess resources annually, ensure adequate cybersecurity and confidentiality, and report resource status to the Commission every two years from 2 August 2025 for Board discussion.", "quote": "\"Member States shall ensure that their national competent authorities are provided with adequate technical, financial and human resources, and with infrastructure to fulfil their tasks effectively under this Regulation. In particular, the national competent authorities shall have a sufficient number of personnel permanently available whose competences and expertise shall include an in-depth\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_70", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-70#art-70-3-6" }, { "obligation_id": "art-70-7-9", "article": 70, "paragraph": 7, "point": null, "actor": [ "commission", "national-competent-authority", "member-state", "union-institution" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The Commission must facilitate exchanges among national competent authorities, national authorities may provide guidance and consult other Union-law authorities where relevant, and the EDPS supervises Union institutions, bodies, offices and agencies.", "quote": "\"The Commission shall facilitate the exchange of experience between national competent authorities.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Institutional governance mechanics; indirect relevance to legal practices through oversight and guidance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_70", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-70#art-70-7-9" }, { "obligation_id": "art-71-1-database", "article": 71, "paragraph": 1, "point": null, "actor": [ "commission", "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "The Commission, with Member States, must set up and maintain the EU database for Annex III high-risk AI systems and certain non-high-risk registrations.", "quote": "\"The Commission shall, in collaboration with the Member States, set up and maintain an EU database containing information referred to in paragraphs 2 and 3 of this Article concerning high-risk AI systems referred to in Article 6(2)\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal AI vendors and public-authority deployers may appear in this public EU database.", "cross_references": [ "Art. 6(2)", "Art. 49", "Art. 60", "Annex VIII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_71", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-71#art-71-1-database" }, { "obligation_id": "art-71-2-provider-data", "article": 71, "paragraph": 2, "point": null, "actor": [ "provider", "authorised-representative" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Providers or authorised representatives must enter Annex VIII Sections A and B data into the EU database for covered high-risk and non-high-risk systems.", "quote": "\"The data listed in Sections A and B of Annex VIII shall be entered into the EU database by the provider or, where applicable, by the authorised representative.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "A legal-AI vendor providing an Annex III high-risk system would be responsible for this registration data.", "cross_references": [ "Annex VIII", "Art. 49" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_71", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-71#art-71-2-provider-data" }, { "obligation_id": "art-71-3-deployer-data", "article": 71, "paragraph": 3, "point": null, "actor": [ "public-authority-deployer" ], "obligation_type": "registration", "risk_tier": "high-risk", "summary": "Public-authority deployers, or those acting for them, must enter Annex VIII Section C data into the EU database under Article 49.", "quote": "\"The data listed in Section C of Annex VIII shall be entered into the EU database by the deployer who is, or who acts on behalf of, a public authority, agency or body\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Courts and public legal bodies deploying high-risk AI are public-authority deployers for this registration duty.", "cross_references": [ "Art. 49(3)", "Art. 49(4)", "Annex VIII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_71", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-71#art-71-3-deployer-data" }, { "obligation_id": "art-71-4-public-access", "article": 71, "paragraph": 4, "point": null, "actor": [ "commission" ], "obligation_type": "transparency", "risk_tier": "high-risk", "summary": "The EU database must make most Article 49 registration information public, user-friendly, navigable and machine-readable, while real-world testing data remains restricted unless consent is given.", "quote": "\"the information contained in the EU database registered in accordance with Article 49 shall be accessible and publicly available in a user-friendly manner\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Public availability may identify registered legal-sector high-risk systems and public deployments.", "cross_references": [ "Art. 49", "Art. 60(4)(c)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_71", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-71#art-71-4-public-access" }, { "obligation_id": "art-71-5-personal-data", "article": 71, "paragraph": 5, "point": null, "actor": [ "commission" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "The EU database may contain personal data only as necessary for collecting and processing information under the Regulation.", "quote": "\"The EU database shall contain personal data only in so far as necessary for collecting and processing information in accordance with this Regulation.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Registration may include contact details for persons representing a provider or deployer.", "cross_references": [ "Annex VIII" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_71", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-71#art-71-5-personal-data" }, { "obligation_id": "art-71-6-controller-support", "article": 71, "paragraph": 6, "point": null, "actor": [ "commission" ], "obligation_type": "data-governance", "risk_tier": "high-risk", "summary": "The Commission is controller of the EU database and must provide technical and administrative support and ensure accessibility requirements are met.", "quote": "\"The Commission shall be the controller of the EU database. It shall make available to providers, prospective providers and deployers adequate technical and administrative support.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This supports operators, including legal-sector providers and deployers, that must use the database.", "cross_references": [ "Art. 49", "Art. 60" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_71", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-71#art-71-6-controller-support" }, { "obligation_id": "art-72-1-monitoring-system", "article": 72, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "Providers of high-risk AI systems must establish and document a proportionate post-market monitoring system for the nature and risks of the system.", "quote": "\"Providers shall establish and document a post-market monitoring system in a manner that is proportionate to the nature of the AI technologies and the risks of the high-risk AI system.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "A legal-AI vendor whose system is high-risk must operate documented post-market monitoring.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_72", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-72#art-72-1-monitoring-system" }, { "obligation_id": "art-72-2-continuous-compliance", "article": 72, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "Post-market monitoring must allow the provider to evaluate continuous compliance with Chapter III Section 2 requirements and, where relevant, interactions with other AI systems.", "quote": "\"allow the provider to evaluate the continuous compliance of AI systems with the requirements set out in Chapter III, Section 2. Where relevant, post-market monitoring shall include an analysis of the interaction with other AI systems.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Compliance monitoring for high-risk legal AI must consider continuing conformity and relevant interactions with other systems.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_72", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-72#art-72-2-continuous-compliance" }, { "obligation_id": "art-72-2-data-analysis", "article": 72, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "monitoring", "risk_tier": "high-risk", "summary": "The post-market monitoring system must actively and systematically collect, document and analyse relevant performance data throughout the high-risk AI system lifetime.", "quote": "\"The post-market monitoring system shall actively and systematically collect, document and analyse relevant data which may be provided by deployers or which may be collected through other sources\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI providers must analyse deployer and other data to check continuing compliance.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_72", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-72#art-72-2-data-analysis" }, { "obligation_id": "art-72-2-law-enforcement-exclusion", "article": 72, "paragraph": 2, "point": null, "actor": [ "provider", "public-authority-deployer" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "The post-market monitoring data obligation excludes sensitive operational data of deployers that are law-enforcement authorities.", "quote": "\"This obligation shall not cover sensitive operational data of deployers which are law-enforcement authorities.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This carve-out is specific to law-enforcement deployers rather than ordinary legal practice.", "cross_references": [ "Art. 72(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_72", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-72#art-72-2-law-enforcement-exclusion" }, { "obligation_id": "art-72-3-commission-guidance", "article": 72, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "support-measure", "risk_tier": "high-risk", "summary": "The Commission must adopt guidance, including a template, on the post-market monitoring plan by 2 September 2027, taking utmost account of the Board opinion.", "quote": "\"The Commission, taking utmost account of the opinion of the Board, shall adopt guidance, including a template, on the post-market monitoring plan by 2 September 2027.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": "Guidance deadline: 2 September 2027.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "The guidance will shape documentation expectations for high-risk legal-AI providers.", "cross_references": [ "ai-board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_72", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-72#art-72-3-commission-guidance" }, { "obligation_id": "art-72-3-monitoring-plan", "article": 72, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "documentation", "risk_tier": "high-risk", "summary": "The post-market monitoring system must be based on a plan that forms part of the Annex IV technical documentation.", "quote": "\"The post-market monitoring system shall be based on a post-market monitoring plan. The post-market monitoring plan shall be part of the technical documentation referred to in Annex IV.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI providers must include the monitoring plan in technical documentation.", "cross_references": [ "Annex IV" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_72", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-72#art-72-3-monitoring-plan" }, { "obligation_id": "art-72-4-sector-integration", "article": 72, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "For Annex I Section A product systems with equivalent sectoral post-market monitoring, providers may integrate the AI Act elements into existing systems and plans.", "quote": "\"providers shall have a choice of integrating, as appropriate, the necessary elements described in paragraphs 1, 2 and 3 using the template referred in paragraph 3 into systems and plans already existing under that legislation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This mainly concerns product-regulated high-risk systems rather than legal-practice deployments.", "cross_references": [ "Annex I Section A", "Art. 72(1)", "Art. 72(2)", "Art. 72(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_72", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-72#art-72-4-sector-integration" }, { "obligation_id": "art-73-1-serious-incident-report", "article": 73, "paragraph": 1, "point": null, "actor": [ "provider" ], "obligation_type": "incident-reporting", "risk_tier": "high-risk", "summary": "Providers of high-risk AI systems placed on the Union market must report any serious incident to the market surveillance authorities where the incident occurred.", "quote": "\"Providers of high-risk AI systems placed on the Union market shall report any serious incident to the market surveillance authorities of the Member States where that incident occurred.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors of high-risk systems must report serious incidents in the relevant Member State.", "cross_references": [ "Art. 3(49)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-1-serious-incident-report" }, { "obligation_id": "art-73-2-fifteen-day-deadline", "article": 73, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "incident-reporting", "risk_tier": "high-risk", "summary": "The serious-incident report must be made immediately after causal link or reasonable likelihood is established, and no later than 15 days after awareness.", "quote": "\"not later than 15 days after the provider or, where applicable, the deployer, becomes aware of the serious incident.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "This fixes the ordinary reporting deadline for high-risk legal-AI serious incidents.", "cross_references": [ "Art. 73(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-2-fifteen-day-deadline" }, { "obligation_id": "art-73-3-two-day-deadline", "article": 73, "paragraph": 3, "point": null, "actor": [ "provider" ], "obligation_type": "incident-reporting", "risk_tier": "high-risk", "summary": "For a widespread infringement or an Article 3(49)(b) serious incident, the report must be immediate and no later than two days after awareness.", "quote": "\"the report referred to in paragraph 1 of this Article shall be provided immediately, and not later than two days after the provider or, where applicable, the deployer becomes aware of that incident.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI providers have a shorter two-day deadline for the specified serious incidents.", "cross_references": [ "Art. 3(49)(b)", "Art. 73(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-3-two-day-deadline" }, { "obligation_id": "art-73-4-death-deadline", "article": 73, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "incident-reporting", "risk_tier": "high-risk", "summary": "Where a serious incident involves a death, the report must be immediate after causal relationship is established or suspected, and no later than 10 days after awareness.", "quote": "\"in the event of the death of a person, the report shall be provided immediately after the provider or the deployer has established, or as soon as it suspects, a causal relationship\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "This special deadline applies to high-risk systems, including any high-risk legal AI linked to death.", "cross_references": [ "Art. 73(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-4-death-deadline" }, { "obligation_id": "art-73-5-initial-report", "article": 73, "paragraph": 5, "point": null, "actor": [ "provider", "deployer" ], "obligation_type": "incident-reporting", "risk_tier": "high-risk", "summary": "Where needed for timely reporting, the provider or applicable deployer may submit an incomplete initial report followed by a complete report.", "quote": "\"the provider or, where applicable, the deployer, may submit an initial report that is incomplete, followed by a complete report.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "This permits staged reporting for high-risk legal-AI incidents when complete facts are not yet available.", "cross_references": [ "Art. 73(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-5-initial-report" }, { "obligation_id": "art-73-6-investigation", "article": 73, "paragraph": 6, "point": null, "actor": [ "provider" ], "obligation_type": "incident-reporting", "risk_tier": "high-risk", "summary": "After reporting a serious incident, the provider must investigate without delay, including risk assessment of the incident and corrective action.", "quote": "\"the provider shall, without delay, perform the necessary investigations in relation to the serious incident and the AI system concerned. This shall include a risk assessment of the incident, and corrective action.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "A high-risk legal-AI provider must investigate reported incidents and take corrective action.", "cross_references": [ "Art. 73(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-6-investigation" }, { "obligation_id": "art-73-7-commission-guidance", "article": 73, "paragraph": 7, "point": null, "actor": [ "commission" ], "obligation_type": "support-measure", "risk_tier": "high-risk", "summary": "The Commission must develop dedicated serious-incident reporting guidance by 2 August 2025 and assess it regularly.", "quote": "\"The Commission shall develop dedicated guidance to facilitate compliance with the obligations set out in paragraph 1 of this Article. That guidance shall be issued by 2 August 2025, and shall be assessed regularly.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": "Guidance deadline: 2 August 2025.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "The guidance informs high-risk legal-AI serious-incident reporting practice.", "cross_references": [ "Art. 73(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-7-commission-guidance" }, { "obligation_id": "art-73-7-rights-authority-notice", "article": 73, "paragraph": 7, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "When notified of an Article 3(49)(c) serious incident, the relevant market surveillance authority must inform the fundamental-rights authorities or bodies referred to in Article 77(1).", "quote": "\"the relevant market surveillance authority shall inform the national public authorities or bodies referred to in Article 77(1).\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Serious incidents affecting fundamental-rights obligations may reach equality, data-protection or similar authorities relevant to legal disputes.", "cross_references": [ "Art. 3(49)(c)", "Art. 77(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-7-rights-authority-notice" }, { "obligation_id": "art-73-8-market-surveillance-measures", "article": 73, "paragraph": 8, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "The market surveillance authority must take appropriate Regulation 2019/1020 measures within seven days of receiving a serious-incident notification and follow notification procedures.", "quote": "\"The market surveillance authority shall take appropriate measures, as provided for in Article 19 of Regulation (EU) 2019/1020, within seven days from the date it received the notification\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This governs regulatory response to serious incidents involving high-risk legal AI.", "cross_references": [ "Regulation (EU) 2019/1020 Article 19", "Art. 73(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-8-market-surveillance-measures" }, { "obligation_id": "art-73-9-sector-reporting-limits", "article": 73, "paragraph": 9, "point": null, "actor": [ "provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "For Annex III high-risk systems covered by equivalent Union reporting instruments, serious-incident notification is limited to Article 3(49)(c) incidents.", "quote": "\"the notification of serious incidents shall be limited to those referred to in Article 3, point (49)(c).\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "medium", "legal_practice_note": "This may affect high-risk legal-sector systems only if equivalent Union reporting obligations already apply.", "cross_references": [ "Annex III", "Art. 3(49)(c)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-9-sector-reporting-limits" }, { "obligation_id": "art-73-10-medical-device-reporting", "article": 73, "paragraph": 10, "point": null, "actor": [ "provider" ], "obligation_type": "incident-reporting", "risk_tier": "high-risk", "summary": "For high-risk AI that is, or is a safety component of, covered medical devices, Article 3(49)(c) serious incidents must be notified to the chosen national competent authority.", "quote": "\"shall be made to the national competent authority chosen for that purpose by the Member States where the incident occurred.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "low", "legal_practice_note": "This is mainly relevant to medical-device AI rather than legal practice.", "cross_references": [ "Regulation (EU) 2017/745", "Regulation (EU) 2017/746", "Art. 3(49)(c)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-10-medical-device-reporting" }, { "obligation_id": "art-73-11-commission-notice", "article": 73, "paragraph": 11, "point": null, "actor": [ "national-competent-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "National competent authorities must immediately notify the Commission of any serious incident, whether or not they have acted on it.", "quote": "\"National competent authorities shall immediately notify the Commission of any serious incident, whether or not they have taken action on it, in accordance with Article 20 of Regulation (EU) 2019/1020.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This ensures Commission visibility of serious incidents involving high-risk systems, including legal-sector systems.", "cross_references": [ "Regulation (EU) 2019/1020 Article 20" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_73", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-73#art-73-11-commission-notice" }, { "obligation_id": "art-74-1-reg-2019-1020", "article": 74, "paragraph": 1, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "all-ai-systems", "summary": "Regulation 2019/1020 applies to AI systems covered by the AI Act, with references to economic operators and products read as operators and AI systems.", "quote": "\"Regulation (EU) 2019/1020 shall apply to AI systems covered by this Regulation.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Market-surveillance powers can reach legal-sector AI operators when their systems fall within the Act.", "cross_references": [ "Regulation (EU) 2019/1020", "Art. 2(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-1-reg-2019-1020" }, { "obligation_id": "art-74-2-annual-reporting", "article": 74, "paragraph": 2, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Market surveillance authorities must annually report competition-relevant information, prohibited-practice use and measures taken to the Commission and relevant competition authorities.", "quote": "\"They shall also annually report to the Commission about the use of prohibited practices that occurred during that year and about the measures taken.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Reports on prohibited practices can include legal-sector AI uses if discovered during market surveillance.", "cross_references": [ "Regulation (EU) 2019/1020 Article 34(4)", "Art. 5" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-2-annual-reporting" }, { "obligation_id": "art-74-3-sector-authority", "article": 74, "paragraph": 3, "point": null, "actor": [ "member-state", "market-surveillance-authority" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "For high-risk AI related to Annex I Section A products, the sectoral market surveillance authority under that legislation acts as AI Act market surveillance authority.", "quote": "\"the market surveillance authority for the purposes of this Regulation shall be the authority responsible for market surveillance activities designated under those legal acts.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This mostly concerns product-regulated AI outside ordinary legal practice.", "cross_references": [ "Annex I Section A" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-3-sector-authority" }, { "obligation_id": "art-74-4-sector-procedures", "article": 74, "paragraph": 4, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "Articles 79 to 83 procedures do not apply to Annex I Section A product-related AI where equivalent sectoral procedures with the same objective already apply.", "quote": "\"the relevant sectoral procedures shall apply instead.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This limits overlap for product-regulated systems and is mostly indirect for legal practice.", "cross_references": [ "Art. 79", "Art. 80", "Art. 81", "Art. 82", "Art. 83", "Annex I Section A" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-4-sector-procedures" }, { "obligation_id": "art-74-5-remote-powers", "article": 74, "paragraph": 5, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "Market surveillance authorities may exercise specified Regulation 2019/1020 powers remotely where appropriate to enforce the AI Act effectively.", "quote": "\"market surveillance authorities may exercise the powers referred to in Article 14(4), points (d) and (j), of that Regulation remotely, as appropriate.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Remote investigative or enforcement powers may affect legal-AI providers and deployers subject to market surveillance.", "cross_references": [ "Regulation (EU) 2019/1020 Article 14(4)(d)", "Regulation (EU) 2019/1020 Article 14(4)(j)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-5-remote-powers" }, { "obligation_id": "art-74-6-financial-authority", "article": 74, "paragraph": 6, "point": null, "actor": [ "market-surveillance-authority", "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "For high-risk AI used by financial institutions in direct connection with financial services, the relevant financial supervisory authority acts as market surveillance authority.", "quote": "\"the market surveillance authority for the purposes of this Regulation shall be the relevant national authority responsible for the financial supervision of those institutions\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "In-house legal teams at financial institutions may deal with financial supervisors as AI Act market surveillance authorities.", "cross_references": [ "Union financial services law" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-6-financial-authority" }, { "obligation_id": "art-74-7-alternative-authority", "article": 74, "paragraph": 7, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "A Member State may identify another relevant authority as market surveillance authority in appropriate circumstances if coordination is ensured.", "quote": "\"another relevant authority may be identified by the Member State as market surveillance authority for the purposes of this Regulation.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is institutional allocation of supervisory responsibility.", "cross_references": [ "Art. 74(6)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-7-alternative-authority" }, { "obligation_id": "art-74-8-annex-iii-authority", "article": 74, "paragraph": 8, "point": null, "actor": [ "member-state", "market-surveillance-authority" ], "obligation_type": "governance-institutional", "risk_tier": "high-risk", "summary": "For specified Annex III law-enforcement, border, justice and democracy systems, Member States must designate data-protection supervisory authorities or similarly conditioned authorities.", "quote": "\"Member States shall designate as market surveillance authorities for the purposes of this Regulation either the competent data protection supervisory authorities\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This covers Annex III point 8 administration-of-justice systems and therefore court-facing legal AI.", "cross_references": [ "Annex III point 1", "Annex III point 6", "Annex III point 7", "Annex III point 8", "Directive (EU) 2016/680" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-8-annex-iii-authority" }, { "obligation_id": "art-74-8-judicial-independence", "article": 74, "paragraph": 8, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Market surveillance activities must not affect judicial independence or interfere with judicial authorities when they act in their judicial capacity.", "quote": "\"Market surveillance activities shall in no way affect the independence of judicial authorities, or otherwise interfere with their activities when acting in their judicial capacity.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This is directly relevant to courts deploying or overseeing AI in judicial work.", "cross_references": [ "Annex III point 8" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-8-judicial-independence" }, { "obligation_id": "art-74-9-edps-authority", "article": 74, "paragraph": 9, "point": null, "actor": [ "market-surveillance-authority", "union-institution" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The European Data Protection Supervisor acts as market surveillance authority for Union institutions, bodies, offices and agencies, except for the CJEU acting judicially.", "quote": "\"the European Data Protection Supervisor shall act as their market surveillance authority, except in relation to the Court of Justice of the European Union acting in its judicial capacity.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This may affect EU institutions using legal or adjudicative AI, while preserving the CJEU judicial capacity exception.", "cross_references": [ "European Data Protection Supervisor" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-9-edps-authority" }, { "obligation_id": "art-74-10-coordination", "article": 74, "paragraph": 10, "point": null, "actor": [ "member-state" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Member States must facilitate coordination between AI Act market surveillance authorities and other relevant national or Union-law supervisory authorities.", "quote": "\"Member States shall facilitate coordination between market surveillance authorities designated under this Regulation and other relevant national authorities or bodies\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Coordinated supervision may involve justice, data-protection or sectoral bodies relevant to legal-sector AI.", "cross_references": [ "Annex I", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-10-coordination" }, { "obligation_id": "art-74-11-joint-activities", "article": 74, "paragraph": 11, "point": null, "actor": [ "market-surveillance-authority", "commission", "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "Market surveillance authorities and the Commission may propose joint compliance, investigation, awareness or guidance activities for high-risk AI presenting serious risk in multiple Member States; the AI Office supports coordination.", "quote": "\"Market surveillance authorities and the Commission shall be able to propose joint activities, including joint investigations\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Cross-border investigations may affect high-risk legal-AI systems deployed in multiple Member States.", "cross_references": [ "Regulation (EU) 2019/1020 Article 9" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-11-joint-activities" }, { "obligation_id": "art-74-12-provider-access", "article": 74, "paragraph": 12, "point": null, "actor": [ "provider", "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Providers must grant market surveillance authorities full access to documentation and training, validation and testing data sets where relevant and necessary for their tasks.", "quote": "\"the market surveillance authorities shall be granted full access by providers to the documentation as well as the training, validation and testing data sets used for the development of high-risk AI systems\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI providers may have to provide documentation and datasets to regulators.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-12-provider-access" }, { "obligation_id": "art-74-13-source-code-access", "article": 74, "paragraph": 13, "point": null, "actor": [ "provider", "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "Market surveillance authorities may access high-risk AI source code on reasoned request only when source access is necessary and other data, documentation and audit methods are exhausted or insufficient.", "quote": "\"Market surveillance authorities shall be granted access to the source code of the high-risk AI system upon a reasoned request and only when both of the following conditions are fulfilled:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI providers of high-risk systems may face source-code access requests in narrow circumstances.", "cross_references": [ "Chapter III Section 2", "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-13-source-code-access" }, { "obligation_id": "art-74-14-confidentiality", "article": 74, "paragraph": 14, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Information and documentation obtained by market surveillance authorities under Article 74 must be treated under Article 78 confidentiality obligations.", "quote": "\"Any information or documentation obtained by market surveillance authorities shall be treated in accordance with the confidentiality obligations set out in Article 78.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Confidentiality is important for legal-AI vendors providing sensitive documentation, data or source code.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_74", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-74#art-74-14-confidentiality" }, { "obligation_id": "art-75-1-gpai-same-provider", "article": 75, "paragraph": 1, "point": "a", "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "The AI Office is exclusively competent for supervision and enforcement for AI systems based on general-purpose AI models developed by the same provider or same undertaking, subject to listed exceptions.", "quote": "\"The AI Office shall be exclusively competent for the supervision and enforcement of the obligations under this Regulation in relation to the following AI systems:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI systems based on an in-house or same-undertaking GPAI model may fall under AI Office supervision unless an exception applies.", "cross_references": [ "Art. 75(1)(a)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-1-gpai-same-provider" }, { "obligation_id": "art-75-1-vlop-vlose", "article": 75, "paragraph": 1, "point": "b", "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "The AI Office is exclusively competent for AI systems that constitute or are integrated into designated very large online platforms or very large online search engines.", "quote": "\"AI systems that constitute or that are integrated into a very large online platform or very large online search engine designated in accordance with Regulation (EU) 2022/2065.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This mainly affects platform and search-engine AI rather than ordinary legal practice.", "cross_references": [ "Regulation (EU) 2022/2065" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-1-vlop-vlose" }, { "obligation_id": "art-75-2-compliance-evaluations", "article": 75, "paragraph": 2, "point": null, "actor": [ "market-surveillance-authority", "ai-office" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Where market surveillance authorities have sufficient reason to consider directly deployable general-purpose AI systems usable for a high-risk purpose non-compliant, they must cooperate with the AI Office on compliance evaluations and inform the Board and other authorities.", "quote": "\"they shall cooperate with the AI Office to carry out compliance evaluations, and shall inform the Board and other market surveillance authorities accordingly.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "General-purpose AI systems used directly for high-risk legal or justice purposes may trigger joint evaluations.", "cross_references": [ "ai-board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-2-compliance-evaluations" }, { "obligation_id": "art-75-3-information-access", "article": 75, "paragraph": 3, "point": null, "actor": [ "market-surveillance-authority", "ai-office" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Where a market surveillance authority cannot conclude a high-risk AI investigation because it lacks information on the GPAI model, it may request AI Office enforcement of access; the AI Office must supply relevant information within 30 days.", "quote": "\"the AI Office shall supply to the applicant authority without delay, and in any event within 30 days, any information that the AI Office considers to be relevant\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This supports investigations of high-risk legal AI that depends on general-purpose models.", "cross_references": [ "Art. 78", "Regulation (EU) 2019/1020 Chapter VI" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-3-information-access" }, { "obligation_id": "art-75-1a-serious-incidents", "article": 75, "paragraph": "1a", "point": null, "actor": [ "provider", "ai-office" ], "obligation_type": "incident-reporting", "risk_tier": "high-risk", "summary": "Providers of high-risk AI systems supervised by the AI Office must report serious incidents to the AI Office, with Article 73(2) to (9) applying mutatis mutandis; the AI Office must transmit relevant information onward.", "quote": "\"providers of high-risk AI systems subject to the competence of the AI Office pursuant to paragraph 1 of this Article shall report any serious incidents to the AI Office.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI providers under AI Office competence report serious incidents to the AI Office rather than national market surveillance authorities.", "cross_references": [ "Art. 73(2)", "Art. 73(9)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-1a-serious-incidents" }, { "obligation_id": "art-75-1b-assistance", "article": 75, "paragraph": "1b", "point": null, "actor": [ "national-competent-authority", "market-surveillance-authority", "ai-office" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Authorities involved in applying the AI Act must cooperate actively with and provide necessary assistance to the AI Office, including for inspections or other enforcement measures.", "quote": "\"The authorities involved in the application of this Regulation shall cooperate actively with the AI Office and provide the AI Office the necessary assistance for the exercise of its powers\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "National cooperation can affect investigations of legal-AI systems supervised by the AI Office.", "cross_references": [ "Regulation (EU) 2019/1020" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-1b-assistance" }, { "obligation_id": "art-75-1c-public-authority-access", "article": 75, "paragraph": "1c", "point": null, "actor": [ "ai-office", "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "When AI Office investigatory or enforcement action in a Member State involves access to a public authority data or AI system, the relevant market surveillance authority must assist.", "quote": "\"the AI Office shall be assisted by the relevant market surveillance authority.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This can matter for public-authority or court systems containing legal or justice data.", "cross_references": [ "Art. 75(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-1c-public-authority-access" }, { "obligation_id": "art-75-1d-national-market-notice", "article": 75, "paragraph": "1d", "point": null, "actor": [ "ai-office", "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Before prohibiting, restricting, withdrawing or recalling an AI system on a national market, the AI Office must notify the competent market surveillance authority without undue delay and consult where appropriate.", "quote": "\"the AI Office shall, without undue delay, notify the market surveillance authority competent for that market of its intention to take such a decision.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This coordinates AI Office action affecting systems available to legal-sector deployers in national markets.", "cross_references": [ "Art. 75(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-1d-national-market-notice" }, { "obligation_id": "art-75-1e-conformity-tests", "article": 75, "paragraph": "1e", "point": null, "actor": [ "ai-office", "commission", "notified-body" ], "obligation_type": "conformity-assessment", "risk_tier": "high-risk", "summary": "For Article 75(1) AI systems that are high-risk and require third-party conformity assessment under Article 43, the AI Office is responsible for pre-market assessments and tests, with delegated notified bodies acting for the Commission.", "quote": "\"The AI Office shall be responsible for conformity assessments and tests of AI systems referred to in paragraph 1 of this Article that are classified as high-risk\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI vendors under AI Office competence may face AI Office-led conformity testing before market placement.", "cross_references": [ "Art. 43", "Art. 75(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-1e-conformity-tests" }, { "obligation_id": "art-75-1e-withdraw-delegation", "article": 75, "paragraph": "1e", "point": null, "actor": [ "commission", "notified-body" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "If a notified body delegated to perform Article 75(1e) tests or assessments does not perform adequately, the Commission may withdraw the delegation immediately.", "quote": "\"the Commission may withdraw the delegation with immediate effect.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is notified-body oversight with indirect effects on high-risk legal-AI conformity assessment capacity.", "cross_references": [ "Art. 75(1e)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-1e-withdraw-delegation" }, { "obligation_id": "art-75-2a-request-ai-office", "article": 75, "paragraph": "2a", "point": null, "actor": [ "market-surveillance-authority", "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "A market surveillance authority with well-founded and sufficient reasons to suspect infringement by an Article 75(1) provider or deployer may request AI Office assessment through the single point of contact.", "quote": "\"it may request, through the relevant single point of contact designated in accordance with Article 70(2), the AI Office to assess the matter\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "National authorities can route suspected infringements involving AI Office-supervised legal-AI systems to the AI Office.", "cross_references": [ "Art. 70(2)", "Art. 75(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75#art-75-2a-request-ai-office" }, { "obligation_id": "art-75a-1-powers-costs", "article": "75a", "paragraph": 1, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "For Article 75(1) supervision and enforcement, the AI Office has all market-surveillance powers in the AI Act section and Regulation 2019/1020 and may reclaim supervision and enforcement costs for non-compliance.", "quote": "\"the AI Office shall have all the powers of a market surveillance authority provided for in this Section and in Article 14(4) and Article 16(3) of Regulation (EU) 2019/1020.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Operators of legal-AI systems under AI Office competence can face market-surveillance powers and cost recovery.", "cross_references": [ "Art. 75(1)", "Regulation (EU) 2019/1020 Article 14(4)", "Regulation (EU) 2019/1020 Article 16(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75a#art-75a-1-powers-costs" }, { "obligation_id": "art-75a-2-investigation", "article": "75a", "paragraph": 2, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "Where the AI Office has reasonable grounds to suspect non-compliance by an Article 75(1) provider or deployer, it may start an investigation and must notify the operator.", "quote": "\"it may adopt a decision to start an investigation into that non-compliance in accordance with Article 14(4), point (f) of Regulation (EU) 2019/1020.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI providers or deployers under AI Office competence may become subject to AI Office investigations.", "cross_references": [ "Art. 75(1)", "Regulation (EU) 2019/1020 Article 14(4)(f)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75a#art-75a-2-investigation" }, { "obligation_id": "art-75a-2-own-initiative-complaint", "article": "75a", "paragraph": 2, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "The AI Office may exercise its powers on its own initiative or following an Article 85 complaint, even before formally starting an investigation.", "quote": "\"The AI Office may exercise the powers referred to in paragraph 1 of this Article on its own initiative or following a complaint received pursuant to Article 85 of this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Complaints may trigger AI Office powers against supervised legal-AI systems before a formal investigation starts.", "cross_references": [ "Art. 75a(1)", "Art. 85" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75a#art-75a-2-own-initiative-complaint" }, { "obligation_id": "art-75a-3-request-or-decision", "article": "75a", "paragraph": 3, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "The AI Office may use specified information-gathering and access powers by simple request or by formal decision.", "quote": "\"The AI Office may exercise the powers listed in Article 14(4), points (a), (b) and (c) of Regulation (EU) 2019/1020 and Article 74(12) and (13) of this Regulation by simple request or by decision.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This defines how the AI Office can request information or access from supervised legal-AI operators.", "cross_references": [ "Art. 74(12)", "Art. 74(13)", "Regulation (EU) 2019/1020 Article 14(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75a#art-75a-3-request-or-decision" }, { "obligation_id": "art-75a-4-inspections", "article": "75a", "paragraph": 4, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "The AI Office may conduct necessary remote or on-site inspections for its section tasks and must inform the provider of the subject, purpose, possible fines, review right and notify the relevant market surveillance authority beforehand.", "quote": "\"the AI Office may conduct all necessary remote or on-site inspections pursuant to the powers laid down in Article 14(4), points (d) and (e) of Regulation (EU) 2019/1020\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "AI Office inspections may affect legal-AI providers under Article 75(1).", "cross_references": [ "Art. 99(5)", "Regulation (EU) 2019/1020 Article 14(4)(d)", "Regulation (EU) 2019/1020 Article 14(4)(e)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75a#art-75a-4-inspections" }, { "obligation_id": "art-75a-5-member-state-measures", "article": "75a", "paragraph": 5, "point": null, "actor": [ "market-surveillance-authority", "ai-office" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "At the AI Office request, a Member State market surveillance authority may carry out investigations, inspections or other fact-finding measures in its territory on behalf of the AI Office.", "quote": "\"the competent market surveillance authority of a Member State may in its own territory carry out any investigation, inspection or other fact-finding measure on behalf and for the account of the AI Office\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "National authorities may assist AI Office investigations of legal-AI systems located in their territory.", "cross_references": [ "Art. 75a(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75a#art-75a-5-member-state-measures" }, { "obligation_id": "art-75a-6-access-retention-orders", "article": "75a", "paragraph": 6, "point": null, "actor": [ "ai-office", "operator-any" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "In Article 75(1) competences, the AI Office may order operators to provide access and explanations for AI systems and to retain data and documents needed to assess implementation and compliance.", "quote": "\"order operators to provide access to, and explanations relating to, their AI systems;\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI operators under AI Office competence may receive access, explanation and retention orders.", "cross_references": [ "Art. 75(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75a#art-75a-6-access-retention-orders" }, { "obligation_id": "art-75a-7-experts-auditors", "article": "75a", "paragraph": 7, "point": null, "actor": [ "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The AI Office may appoint independent experts, auditors, investigative teams and Member State experts to support monitoring and enforcement expertise, and share resulting information with relevant national authorities.", "quote": "\"the AI Office may appoint independent external experts and auditors, as well as experts, investigative teams and auditors from the Member State’s competent authorities\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is institutional support for AI Office supervision and may indirectly affect supervised legal-AI systems.", "cross_references": [ "Art. 75(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75a#art-75a-7-experts-auditors" }, { "obligation_id": "art-75a-8-use-limitation", "article": "75a", "paragraph": 8, "point": null, "actor": [ "ai-office" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Information collected under Article 75a may be used only for the purposes of the AI Act.", "quote": "\"Information collected pursuant to this Article shall be used only for the purpose of this Regulation.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This limits use of information collected from supervised legal-AI providers or deployers.", "cross_references": [ "Art. 75a" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75a", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75a#art-75a-8-use-limitation" }, { "obligation_id": "art-75b-0-binding-commitments", "article": "75b", "paragraph": null, "point": null, "actor": [ "ai-office", "operator-any" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "During Article 75a(2) proceedings, if the operator offers commitments to ensure compliance, the AI Office may make them binding and declare no further grounds for action.", "quote": "\"the AI Office may, by decision, make those commitments binding on the operator concerned and declare that there are no further grounds for action.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Operators of supervised legal-AI systems may resolve AI Office proceedings through binding commitments.", "cross_references": [ "Art. 75a(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75b", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75b#art-75b-0-binding-commitments" }, { "obligation_id": "art-75b-0-reject-commitments", "article": "75b", "paragraph": null, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "Where offered commitments cannot ensure effective compliance with the AI Act, the AI Office must reject them in a reasoned decision when concluding proceedings.", "quote": "\"it shall reject those commitments in a reasoned decision when concluding the proceedings.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "AI Office proceedings against supervised legal-AI operators need not end through inadequate commitments.", "cross_references": [ "Art. 75b" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75b", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75b#art-75b-0-reject-commitments" }, { "obligation_id": "art-75b-0-reopen-material-change", "article": "75b", "paragraph": null, "point": "a", "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "The AI Office may reopen commitment proceedings where there has been a material change in the facts on which its decision was based.", "quote": "\"there has been a material change in any of the facts on which the decision was based;\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "AI Office commitments involving legal-AI operators can be reopened if the factual basis materially changes.", "cross_references": [ "Art. 75b" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75b", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75b#art-75b-0-reopen-material-change" }, { "obligation_id": "art-75b-0-reopen-contrary", "article": "75b", "paragraph": null, "point": "b", "actor": [ "ai-office", "operator-any" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "The AI Office may reopen proceedings where the operator acts contrary to commitments that were made binding.", "quote": "\"the operator acts contrary to its commitments;\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "A supervised legal-AI operator that breaches commitments can face reopened AI Office proceedings.", "cross_references": [ "Art. 75b" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75b", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75b#art-75b-0-reopen-contrary" }, { "obligation_id": "art-75b-0-reopen-misleading", "article": "75b", "paragraph": null, "point": "c", "actor": [ "ai-office", "operator-any" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "The AI Office may reopen proceedings where its commitment decision was based on incomplete, incorrect or misleading information from the operator.", "quote": "\"the decision was based on incomplete, incorrect or misleading information provided by the operator concerned.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Incomplete or misleading information from a legal-AI operator can reopen AI Office proceedings.", "cross_references": [ "Art. 75b" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75b", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75b#art-75b-0-reopen-misleading" }, { "obligation_id": "art-75c-1-non-compliance-decision", "article": "75c", "paragraph": 1, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "If the AI Office finds that an Article 75(1) operator does not comply with the Act or binding commitments, it must adopt a decision establishing non-compliance.", "quote": "\"it shall adopt a decision establishing such non-compliance.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Supervised legal-AI operators can receive AI Office non-compliance decisions.", "cross_references": [ "Art. 75(1)", "Art. 75b" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-1-non-compliance-decision" }, { "obligation_id": "art-75c-2-preliminary-findings", "article": "75c", "paragraph": 2, "point": null, "actor": [ "ai-office", "operator-any" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Before adopting a non-compliance decision, the AI Office must communicate preliminary findings and explain measures it is considering or considers the operator should take.", "quote": "\"the AI Office shall communicate its preliminary findings to the operator concerned.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This gives supervised legal-AI operators notice of the AI Office case and contemplated measures.", "cross_references": [ "Art. 75c(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-2-preliminary-findings" }, { "obligation_id": "art-75c-3-compliance-measures", "article": "75c", "paragraph": 3, "point": null, "actor": [ "ai-office", "operator-any" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "In a non-compliance decision, the AI Office may order necessary measures within a specified reasonable period and require information on intended and implemented compliance measures.", "quote": "\"the AI Office shall, where relevant, order the operator concerned to take the necessary measures to ensure compliance with the relevant provisions of this Regulation within a reasonable period specified therein\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI operators under AI Office competence may be ordered to remedy non-compliance and report implementation.", "cross_references": [ "Art. 75c(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-3-compliance-measures" }, { "obligation_id": "art-75c-3-structured-dialogue", "article": "75c", "paragraph": 3, "point": null, "actor": [ "ai-office", "operator-any" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Before requesting any measure, the AI Office may engage in structured dialogue with the operator, during which the operator may propose Article 75b commitments.", "quote": "\"the AI Office may engage in a structured dialogue with the operator of the AI system in question.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Structured dialogue can shape commitments or measures for supervised legal-AI systems.", "cross_references": [ "Art. 75b" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-3-structured-dialogue" }, { "obligation_id": "art-75c-4-fines", "article": "75c", "paragraph": 4, "point": null, "actor": [ "ai-office", "operator-any" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "An AI Office non-compliance decision may be accompanied by penalties under Article 99(3) to (7), applied mutatis mutandis to AI Office supervision and enforcement.", "quote": "\"may be accompanied by the imposition of penalties in accordance with Article 99(3) to (7), which provisions shall apply mutatis mutandis to the AI Office\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(3)-(7)", "legal_practice_relevance": "high", "legal_practice_note": "Supervised legal-AI operators can face AI Office-imposed penalties by reference to Article 99 tiers.", "cross_references": [ "Art. 99(3)", "Art. 99(4)", "Art. 99(5)", "Art. 99(6)", "Art. 99(7)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-4-fines" }, { "obligation_id": "art-75c-5-periodic-payments", "article": "75c", "paragraph": 5, "point": null, "actor": [ "ai-office", "operator-any" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "The AI Office may impose periodic penalty payments to compel Article 75(1) operators to submit to investigations or inspections, comply with information requests, give correct explanations, carry out corrective actions, comply with commitments or comply with non-compliance decisions.", "quote": "\"The AI Office may adopt a decision imposing periodic penalty payments to compel the operators subject to its competence pursuant to Article 75(1)\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 75c(5)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI operators under AI Office competence may face recurring penalties to compel cooperation or compliance.", "cross_references": [ "Art. 75(1)", "Art. 75a(3)", "Art. 75a(4)", "Art. 75b" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-5-periodic-payments" }, { "obligation_id": "art-75c-6-cjeu-review", "article": "75c", "paragraph": 6, "point": null, "actor": [ "other" ], "obligation_type": "right-of-person", "risk_tier": "not-tier-specific", "summary": "The Court of Justice has unlimited jurisdiction to review AI Office decisions fixing fines or periodic penalty payments and may cancel, reduce or increase them.", "quote": "\"It may cancel, reduce or increase the fine or periodic penalty payment imposed.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This judicial review safeguard can matter to supervised legal-AI operators fined by the AI Office.", "cross_references": [ "Court of Justice of the European Union" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-6-cjeu-review" }, { "obligation_id": "art-75c-7-budget", "article": "75c", "paragraph": 7, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Funds collected from Article 75c fines or periodic penalty payments contribute to the general budget of the Union.", "quote": "\"Funds collected through the imposition of fines or periodic penalty payments pursuant to this Article shall contribute to the general budget of the Union.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "This budget rule has no direct legal-practice compliance effect.", "cross_references": [ "Art. 75c" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-7-budget" }, { "obligation_id": "art-75c-8-limitation-period", "article": "75c", "paragraph": 8, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "AI Office powers under Article 75c are subject to a five-year limitation period running from the infringement, or from cessation for continuing or repeated infringements.", "quote": "\"The powers conferred on the AI Office by this Article shall be subject to a limitation period of five years.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This limits the timing of AI Office enforcement against supervised legal-AI operators.", "cross_references": [ "Art. 75c" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-8-limitation-period" }, { "obligation_id": "art-75c-9-close-proceeding", "article": "75c", "paragraph": 9, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "Where the AI Office determines there are no grounds for a non-compliance decision, it must close the proceeding by immediately effective decision.", "quote": "\"Where the AI Office determines that there are no grounds to adopt a decision of non-compliance, it shall close the proceeding by a decision.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This ends AI Office proceedings where allegations against a supervised legal-AI operator are not sustained.", "cross_references": [ "Art. 75c(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75c", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75c#art-75c-9-close-proceeding" }, { "obligation_id": "art-75d-1-safeguards", "article": "75d", "paragraph": 1, "point": null, "actor": [ "operator-any" ], "obligation_type": "right-of-person", "risk_tier": "not-tier-specific", "summary": "Article 18 of Regulation 2019/1020 procedural safeguards apply mutatis mutandis to operators under AI Office competence, without prejudice to more specific AI Act rights.", "quote": "\"Article 18 of Regulation (EU) 2019/1020 shall apply mutatis mutandis to operators subject to the AI Office’s competence pursuant to Article 75(1) of this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI operators under AI Office competence receive procedural safeguards.", "cross_references": [ "Art. 75(1)", "Regulation (EU) 2019/1020 Article 18" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75d", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75d#art-75d-1-safeguards" }, { "obligation_id": "art-75d-2-defence-file-access", "article": "75d", "paragraph": 2, "point": null, "actor": [ "operator-any", "ai-office" ], "obligation_type": "right-of-person", "risk_tier": "not-tier-specific", "summary": "Operators under Article 75(1) have rights of defence and access to the AI Office file through negotiated disclosure, subject to protection of business secrets and confidential information.", "quote": "\"The rights of defence and of access to the file of operators falling within the scope of Article 75(1) shall be fully respected in proceedings.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This protects supervised legal-AI operators in AI Office proceedings.", "cross_references": [ "Art. 75(1)", "Art. 75c(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75d", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75d#art-75d-2-defence-file-access" }, { "obligation_id": "art-75d-2-disclosure-terms", "article": "75d", "paragraph": 2, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "If parties disagree on negotiated disclosure terms for file access, the AI Office may adopt decisions setting out those terms.", "quote": "\"The AI Office shall have the power to adopt decisions setting out such terms of disclosure in the case of disagreement between the parties.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Disclosure decisions may shape access to confidential material in legal-AI enforcement proceedings.", "cross_references": [ "Art. 75d(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75d", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75d#art-75d-2-disclosure-terms" }, { "obligation_id": "art-75d-3-implementing-acts", "article": "75d", "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The Commission may adopt implementing acts on practical arrangements for file access and negotiated disclosure under Article 75d(2).", "quote": "\"The Commission may adopt implementing acts concerning the practical arrangements for access to the file and the negotiated disclosure of information provided for in paragraph 2.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Procedural implementing acts indirectly affect supervised legal-AI operators in AI Office cases.", "cross_references": [ "Art. 75d(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75d", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75d#art-75d-3-implementing-acts" }, { "obligation_id": "art-75d-4-publish-decisions", "article": "75d", "paragraph": 4, "point": null, "actor": [ "ai-office" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The AI Office must publish Article 75b and 75c decisions, stating party names and main content including penalties, while respecting confidential information interests.", "quote": "\"The AI Office shall publish the decisions it adopts pursuant to Articles 75b and 75c.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Publication can expose enforcement outcomes involving supervised legal-AI operators.", "cross_references": [ "Art. 75b", "Art. 75c" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_75d", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-75d#art-75d-4-publish-decisions" }, { "obligation_id": "art-76-1-testing-powers", "article": 76, "paragraph": 1, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "Market surveillance authorities have competence and powers to ensure that testing in real-world conditions complies with the Regulation, including sandbox-supervised testing.", "quote": "\"Market surveillance authorities shall have competences and powers to ensure that testing in real world conditions is in accordance with this Regulation.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Providers or prospective providers testing high-risk legal AI may be supervised under these powers.", "cross_references": [ "Art. 58", "Art. 60" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_76", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-76#art-76-1-testing-powers" }, { "obligation_id": "art-76-3-testing-decisions", "article": 76, "paragraph": 3, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "If serious incidents or unmet testing conditions arise, a market surveillance authority may suspend or terminate testing or require modifications by providers and deployers.", "quote": "\"it may take either of the following decisions on its territory, as appropriate:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Real-world testing of high-risk legal AI could be stopped or changed by authorities.", "cross_references": [ "Art. 60", "Art. 61" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_76", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-76#art-76-3-testing-decisions" }, { "obligation_id": "art-76-4-testing-reasons", "article": 76, "paragraph": 4, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Authority decisions or objections on real-world testing must state reasons and challenge routes, and grounds must be communicated to other Member State authorities when applicable.", "quote": "\"the decision or the objection shall indicate the grounds therefor and how the provider or prospective provider can challenge the decision or objection\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is a procedural protection for supervised real-world testing.", "cross_references": [ "Art. 60(4)(b)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_76", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-76#art-76-4-testing-reasons" }, { "obligation_id": "art-77-1-rights-authority-access", "article": 77, "paragraph": 1, "point": null, "actor": [ "other", "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "National authorities or bodies supervising Union fundamental-rights obligations have power to request and access necessary AI Act information or documentation from the relevant market surveillance authority in accessible, machine-readable electronic form.", "quote": "\"shall have the power to request and access any information or documentation created or maintained from the relevant market surveillance authority pursuant to this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Fundamental-rights authorities may obtain information about high-risk legal or justice AI affecting discrimination or other rights.", "cross_references": [ "Art. 77(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_77", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-77#art-77-1-rights-authority-access" }, { "obligation_id": "art-77-2-identify-authorities", "article": 77, "paragraph": 2, "point": null, "actor": [ "member-state" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Each Member State must identify Article 77(1) public authorities or bodies, publish the list, notify the Commission and other Member States, and keep the list updated.", "quote": "\"each Member State shall identify the public authorities or bodies referred to in paragraph 1 and make a list of them publicly available.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This identifies authorities that may be involved in legal-AI fundamental-rights supervision.", "cross_references": [ "Art. 77(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_77", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-77#art-77-2-identify-authorities" }, { "obligation_id": "art-77-3-testing-request", "article": 77, "paragraph": 3, "point": null, "actor": [ "other", "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "Where documentation is insufficient to determine whether Union fundamental-rights obligations were infringed, the public authority or body may request technical testing and the market surveillance authority must organise it with close involvement of the requester.", "quote": "\"the public authority or body referred to in paragraph 1 may make a reasoned request to the market surveillance authority, to organise testing of the high-risk AI system through technical means.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal or justice AI can be technically tested where rights authorities cannot assess infringements from documentation alone.", "cross_references": [ "Art. 77(1)", "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_77", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-77#art-77-3-testing-request" }, { "obligation_id": "art-77-4-confidentiality", "article": 77, "paragraph": 4, "point": null, "actor": [ "other" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Information or documentation obtained by national fundamental-rights authorities or bodies under Article 77 must be treated under Article 78 confidentiality obligations.", "quote": "\"Any information or documentation obtained by the national public authorities or bodies referred to in paragraph 1 of this Article pursuant to this Article shall be treated in accordance with the confidentiality obligations set out in Article 78.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Confidentiality protects legal-AI providers and deployers when information reaches rights authorities.", "cross_references": [ "Art. 78" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_77", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-77#art-77-4-confidentiality" }, { "obligation_id": "art-77-1a-msa-grant-access", "article": 77, "paragraph": "1a", "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Subject to Article 77 conditions, the market surveillance authority must grant those public authorities or bodies access, including by requesting information from providers or deployers where necessary and without undue delay.", "quote": "\"the market surveillance authority shall grant the relevant public authority or body referred to in paragraph 1 access to such information or documentation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This can require regulator-to-regulator access to information about legal-AI providers or deployers.", "cross_references": [ "Art. 77(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_77", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-77#art-77-1a-msa-grant-access" }, { "obligation_id": "art-77-1b-mutual-assistance", "article": 77, "paragraph": "1b", "point": null, "actor": [ "market-surveillance-authority", "other" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Market surveillance authorities and fundamental-rights authorities must cooperate closely, provide mutual assistance and exchange necessary information to ensure coherent application and streamlined procedures.", "quote": "\"Market surveillance authorities and public authorities or bodies referred to in paragraph 1 shall cooperate closely and provide each other with the mutual assistance necessary\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This supports coordinated handling of legal-AI systems that raise fundamental-rights issues.", "cross_references": [ "Art. 77(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_77", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-77#art-77-1b-mutual-assistance" }, { "obligation_id": "art-78-1-confidentiality-duty", "article": 78, "paragraph": 1, "point": null, "actor": [ "commission", "market-surveillance-authority", "notified-body", "natural-person", "other" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "The Commission, market surveillance authorities, notified bodies and others applying the Act must respect confidentiality of information and data obtained in their tasks and activities.", "quote": "\"shall, in accordance with Union or national law, respect the confidentiality of information and data obtained in carrying out their tasks and activities\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Confidentiality is important for legal-AI vendors and deployers sharing sensitive documentation, data or source code.", "cross_references": [ "Art. 74", "Art. 77" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_78", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-78#art-78-1-confidentiality-duty" }, { "obligation_id": "art-78-1-protected-interests", "article": 78, "paragraph": 1, "point": null, "actor": [ "commission", "market-surveillance-authority", "notified-body", "other" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Confidentiality must protect intellectual property, trade secrets, effective enforcement, public and national security, criminal or administrative proceedings, and classified information.", "quote": "\"the intellectual property rights and confidential business information or trade secrets of a natural or legal person, including source code\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI source code, trade secrets and sensitive enforcement information receive express confidentiality protection.", "cross_references": [ "Directive (EU) 2016/943 Article 5" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_78", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-78#art-78-1-protected-interests" }, { "obligation_id": "art-78-2-data-minimisation-security", "article": 78, "paragraph": 2, "point": null, "actor": [ "commission", "market-surveillance-authority", "notified-body", "national-competent-authority" ], "obligation_type": "data-governance", "risk_tier": "not-tier-specific", "summary": "Authorities applying the Act must request only strictly necessary data, protect obtained information with adequate and effective cybersecurity measures, and delete data when no longer needed.", "quote": "\"shall request only data that is strictly necessary for the assessment of the risk posed by AI systems and for the exercise of their powers\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This limits and secures regulatory data collection from legal-AI providers and deployers.", "cross_references": [ "Regulation (EU) 2019/1020" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_78", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-78#art-78-2-data-minimisation-security" }, { "obligation_id": "art-78-3-no-disclosure-without-consultation", "article": 78, "paragraph": 3, "point": null, "actor": [ "national-competent-authority", "commission" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Confidential information exchanged among national competent authorities or with the Commission must not be disclosed without prior consultation of the originating authority and deployer in specified law-enforcement, border, immigration or asylum uses where disclosure would jeopardise security.", "quote": "\"shall not be disclosed without prior consultation of the originating national competent authority and the deployer\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This safeguards sensitive public-authority deployments and may affect justice-related AI where security interests arise.", "cross_references": [ "Annex III point 1", "Annex III point 6", "Annex III point 7" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_78", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-78#art-78-3-no-disclosure-without-consultation" }, { "obligation_id": "art-78-5-third-country-confidentiality", "article": 78, "paragraph": 5, "point": null, "actor": [ "commission", "member-state" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "The Commission and Member States may exchange necessary confidential information with third-country regulatory authorities under international or trade agreements and confidentiality arrangements with adequate protection.", "quote": "\"The Commission and Member States may exchange, where necessary and in accordance with relevant provisions of international and trade agreements, confidential information with regulatory authorities of third countries\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is cross-border regulatory cooperation and is usually indirect for legal practice.", "cross_references": [ "international and trade agreements" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_78", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-78#art-78-5-third-country-confidentiality" }, { "obligation_id": "art-79-1-risk-definition", "article": 79, "paragraph": 1, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "scope-or-definition", "risk_tier": "all-ai-systems", "summary": "For market-surveillance procedure, AI systems presenting health, safety or fundamental-rights risks are treated as products presenting a risk under Regulation 2019/1020.", "quote": "\"AI systems presenting a risk shall be understood as a ‘product presenting a risk’ as defined in Article 3, point 19 of Regulation (EU) 2019/1020\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This frames regulatory action for risky legal-AI systems that affect rights, health or safety.", "cross_references": [ "Regulation (EU) 2019/1020 Article 3(19)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_79", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-79#art-79-1-risk-definition" }, { "obligation_id": "art-79-2-evaluation-cooperation", "article": 79, "paragraph": 2, "point": null, "actor": [ "market-surveillance-authority", "operator-any" ], "obligation_type": "enforcement-power", "risk_tier": "all-ai-systems", "summary": "Where a Member State market surveillance authority has sufficient reason to consider an AI system risky, it must evaluate compliance, pay particular attention to vulnerable groups, cooperate with Article 77 bodies when fundamental-rights risks appear, and operators must cooperate as necessary.", "quote": "\"it shall carry out an evaluation of the AI system concerned in respect of its compliance with all the requirements and obligations laid down in this Regulation.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Risk evaluations can cover legal-AI systems affecting clients, litigants, employees or vulnerable groups.", "cross_references": [ "Art. 77(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_79", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-79#art-79-2-evaluation-cooperation" }, { "obligation_id": "art-79-3-cross-border-notice", "article": 79, "paragraph": 3, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "all-ai-systems", "summary": "If non-compliance is not restricted to its territory, the market surveillance authority must inform the Commission and other Member States without undue delay of evaluation results and required operator actions.", "quote": "\"it shall inform the Commission and the other Member States without undue delay of the results of the evaluation and of the actions which it has required the operator to take.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Cross-border legal-AI deployments may prompt EU-wide notices of required operator actions.", "cross_references": [ "Art. 79(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_79", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-79#art-79-3-cross-border-notice" }, { "obligation_id": "art-79-4-corrective-action", "article": 79, "paragraph": 4, "point": null, "actor": [ "operator-any" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "all-ai-systems", "summary": "The operator must ensure all appropriate corrective action is taken for all AI systems concerned that it has made available on the Union market.", "quote": "\"The operator shall ensure that all appropriate corrective action is taken in respect of all the AI systems concerned that it has made available on the Union market.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI providers or other operators must remedy risky systems they made available in the Union.", "cross_references": [ "Art. 79(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_79", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-79#art-79-4-corrective-action" }, { "obligation_id": "art-79-5-provisional-measures", "article": 79, "paragraph": 5, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "all-ai-systems", "summary": "If the AI system operator fails to take adequate corrective action in time, the market surveillance authority must take provisional measures to prohibit, restrict, withdraw or recall the AI system and notify the Commission and other Member States.", "quote": "\"the market surveillance authority shall take all appropriate provisional measures to prohibit or restrict the AI system’s being made available on its national market or put into service\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Risky legal-AI systems can be restricted, withdrawn or recalled if operators do not correct them.", "cross_references": [ "Art. 79(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_79", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-79#art-79-5-provisional-measures" }, { "obligation_id": "art-79-6-notification-details", "article": 79, "paragraph": 6, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "all-ai-systems", "summary": "The provisional-measure notification must include identifying, origin, supply-chain, non-compliance, risk, measure and operator-argument details and state whether the issue concerns Article 5, Chapter III Section 2, standards or Article 50.", "quote": "\"The notification referred to in paragraph 5 shall include all available details\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This structures regulator notices that may concern prohibited, high-risk or transparency obligations in legal-sector AI.", "cross_references": [ "Art. 5", "Chapter III Section 2", "Art. 40", "Art. 41", "Art. 50" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_79", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-79#art-79-6-notification-details" }, { "obligation_id": "art-79-7-other-authorities", "article": 79, "paragraph": 7, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "all-ai-systems", "summary": "Other Member State market surveillance authorities must inform the Commission and Member States without undue delay of measures, additional information or objections concerning the notified non-compliance.", "quote": "\"shall, without undue delay, inform the Commission and the other Member States of any measures adopted and of any additional information at their disposal relating to the non-compliance\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This coordinates national responses to risky legal-AI systems across Member States.", "cross_references": [ "Art. 79(5)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_79", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-79#art-79-7-other-authorities" }, { "obligation_id": "art-79-8-deemed-justified-restrictive", "article": 79, "paragraph": 8, "point": null, "actor": [ "market-surveillance-authority", "commission" ], "obligation_type": "enforcement-power", "risk_tier": "all-ai-systems", "summary": "If no objection is raised within three months, or within 30 days for Article 5 non-compliance, another authority provisional measure is deemed justified; market surveillance authorities must then ensure appropriate restrictive measures without undue delay.", "quote": "\"that measure shall be deemed justified.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Uncontested restrictions can become justified and lead to wider restrictive measures affecting legal-AI systems.", "cross_references": [ "Art. 5", "Art. 79(9)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_79", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-79#art-79-8-deemed-justified-restrictive" }, { "obligation_id": "art-80-1-non-high-risk-evaluation", "article": 80, "paragraph": 1, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "Market surveillance authorities must evaluate AI systems classified by providers as non-high-risk when they have sufficient reason to consider the system is actually high-risk.", "quote": "\"a market surveillance authority has sufficient reason to consider that an AI system classified by the provider as non-high-risk pursuant to Article 6(3) is indeed high-risk\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI vendors relying on the Article 6(3) non-high-risk route may be challenged by authorities.", "cross_references": [ "Art. 6(3)", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_80", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-80#art-80-1-non-high-risk-evaluation" }, { "obligation_id": "art-80-2-provider-compliance", "article": 80, "paragraph": 2, "point": null, "actor": [ "provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "If the system is found high-risk, the provider must take necessary action to meet AI Act high-risk requirements and obligations and take corrective action within the prescribed period.", "quote": "\"it shall without undue delay require the relevant provider to take all necessary actions to bring the AI system into compliance with the requirements and obligations laid down in this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "A legal-AI provider may have to recode, document or assess a system after misclassification is found.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_80", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-80#art-80-2-provider-compliance" }, { "obligation_id": "art-80-4-fines-corrective", "article": 80, "paragraph": 4, "point": null, "actor": [ "provider" ], "obligation_type": "penalty", "risk_tier": "high-risk", "summary": "Providers that fail to bring a reclassified high-risk system into compliance within the prescribed period are subject to fines and must correct all affected Union-market systems.", "quote": "\"the provider shall be subject to fines in accordance with Article 99\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99", "legal_practice_relevance": "high", "legal_practice_note": "Misclassification of legal-sector high-risk AI may expose the provider to Article 99 fines.", "cross_references": [ "Art. 99", "Art. 80(5)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_80", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-80#art-80-4-fines-corrective" }, { "obligation_id": "art-80-7-circumvention-checks", "article": 80, "paragraph": 7, "point": null, "actor": [ "provider", "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "Intentional misclassification to circumvent Chapter III Section 2 triggers Article 99 fines, and authorities may use EU database information for checks.", "quote": "\"the AI system was misclassified by the provider as non-high-risk in order to circumvent the application of requirements in Chapter III, Section 2\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 99", "legal_practice_relevance": "high", "legal_practice_note": "This is directly relevant to legal-AI providers claiming an Annex III system is non-high-risk.", "cross_references": [ "Art. 11 Regulation (EU) 2019/1020", "Art. 71" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_80", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-80#art-80-7-circumvention-checks" }, { "obligation_id": "art-81-1-safeguard-decision", "article": 81, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "When objections are raised or the Commission considers a national measure contrary to Union law, the Commission must consult, evaluate and decide whether the measure is justified within the applicable deadline.", "quote": "\"the Commission shall without undue delay enter into consultation with the market surveillance authority of the relevant Member State and the operator or operators, and shall evaluate the national measure\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This can determine Union-wide treatment of measures against legal-AI systems.", "cross_references": [ "Art. 79(5)", "Art. 5" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_81", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-81#art-81-1-safeguard-decision" }, { "obligation_id": "art-81-2-member-state-action", "article": 81, "paragraph": 2, "point": null, "actor": [ "member-state" ], "obligation_type": "enforcement-power", "risk_tier": "not-tier-specific", "summary": "If the Commission finds a national measure justified, all Member States must take appropriate restrictive measures; if unjustified, the Member State must withdraw it.", "quote": "\"all Member States shall ensure that they take appropriate restrictive measures in respect of the AI system concerned\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "A justified safeguard decision could restrict a legal-AI system across Member States.", "cross_references": [ "Art. 79" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_81", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-81#art-81-2-member-state-action" }, { "obligation_id": "art-81-3-standards-shortcomings", "article": 81, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "If justified non-compliance is due to harmonised standard or common specification shortcomings, the Commission must use the Regulation (EU) No 1025/2012 procedure.", "quote": "\"the Commission shall apply the procedure provided for in Article 11 of Regulation (EU) No 1025/2012\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This concerns standards governance rather than a direct legal-practice obligation.", "cross_references": [ "Art. 40", "Art. 41", "Regulation (EU) No 1025/2012" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_81", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-81#art-81-3-standards-shortcomings" }, { "obligation_id": "art-82-1-compliant-risk", "article": 82, "paragraph": 1, "point": null, "actor": [ "market-surveillance-authority", "operator-any" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "Even if a high-risk AI system complies with the Regulation, authorities must require measures if it still risks health, safety, fundamental rights or public interests.", "quote": "\"although a high-risk AI system complies with this Regulation, it nevertheless presents a risk to the health or safety of persons, to fundamental rights\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "A formally compliant high-risk legal-AI system may still be subject to corrective measures if it presents fundamental-rights risk.", "cross_references": [ "Art. 79", "Art. 77(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_82", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-82#art-82-1-compliant-risk" }, { "obligation_id": "art-82-2-operator-correction", "article": 82, "paragraph": 2, "point": null, "actor": [ "provider", "operator-any" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "The provider or other relevant operator must ensure corrective action is taken for all affected Union-market systems within the authority-prescribed timeline.", "quote": "\"The provider or other relevant operator shall ensure that corrective action is taken in respect of all the AI systems concerned\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI providers or operators may need to correct all affected systems, not only one deployment.", "cross_references": [ "Art. 82(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_82", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-82#art-82-2-operator-correction" }, { "obligation_id": "art-82-4-commission-evaluation", "article": 82, "paragraph": 4, "point": null, "actor": [ "commission", "member-state" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "high-risk", "summary": "Member States must inform the Commission and other Member States of compliant-risk findings, and the Commission must consult, evaluate, decide and communicate whether measures are justified.", "quote": "\"The Commission shall without undue delay enter into consultation with the Member States concerned and the relevant operators, and shall evaluate the national measures taken.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This procedure can affect high-risk legal-AI systems presenting risks despite formal compliance.", "cross_references": [ "Art. 82(3)", "Art. 82(5)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_82", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-82#art-82-4-commission-evaluation" }, { "obligation_id": "art-83-1-formal-noncompliance", "article": 83, "paragraph": 1, "point": null, "actor": [ "market-surveillance-authority", "provider" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "When formal non-compliance is found, including CE marking, EU declaration, database registration, authorised-representative or technical-documentation failures, the authority must require the provider to end it.", "quote": "\"it shall require the relevant provider to put an end to the non-compliance concerned, within a period it may prescribe\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "High-risk legal-AI providers can be required to fix formal compliance failures.", "cross_references": [ "Art. 47", "Art. 48", "Art. 71" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_83", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-83#art-83-1-formal-noncompliance" }, { "obligation_id": "art-83-2-restrict-withdraw", "article": 83, "paragraph": 2, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "enforcement-power", "risk_tier": "high-risk", "summary": "If formal non-compliance persists, the authority must take proportionate measures to restrict, prohibit, recall or withdraw the high-risk AI system without delay.", "quote": "\"the market surveillance authority of the Member State concerned shall take appropriate and proportionate measures to restrict or prohibit the high-risk AI system being made available on the market\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Persistent formal failures can remove a high-risk legal-AI system from the market.", "cross_references": [ "Art. 83(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_83", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-83#art-83-2-restrict-withdraw" }, { "obligation_id": "art-84-1-testing-structures", "article": 84, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The Commission must designate one or more Union AI testing support structures to perform AI-related tasks under Regulation (EU) 2019/1020.", "quote": "\"The Commission shall designate one or more Union AI testing support structures to perform the tasks listed under Article 21(6) of Regulation (EU) 2019/1020\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This creates institutional testing support rather than a direct legal-sector duty.", "cross_references": [ "Art. 21(6) Regulation (EU) 2019/1020" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_84", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-84#art-84-1-testing-structures" }, { "obligation_id": "art-84-2-technical-advice", "article": 84, "paragraph": 2, "point": null, "actor": [ "other" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "Union AI testing support structures must provide independent technical or scientific advice when requested by the Board, Commission or market surveillance authorities.", "quote": "\"Union AI testing support structures shall also provide independent technical or scientific advice at the request of the Board, the Commission, or of market surveillance authorities.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This supports enforcement and governance bodies.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_84", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-84#art-84-2-technical-advice" }, { "obligation_id": "art-85-0-complaint", "article": 85, "paragraph": null, "point": null, "actor": [ "natural-person", "other" ], "obligation_type": "right-of-person", "risk_tier": "not-tier-specific", "summary": "Any natural or legal person with grounds to consider there has been an AI Act infringement may submit complaints to the relevant market surveillance authority.", "quote": "\"any natural or legal person having grounds to consider that there has been an infringement of the provisions of this Regulation may submit complaints to the relevant market surveillance authority\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Clients, employees, litigants or organisations may complain about AI Act infringements affecting legal contexts.", "cross_references": [ "Regulation (EU) 2019/1020" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_85", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-85#art-85-0-complaint" }, { "obligation_id": "art-85-0-handling", "article": 85, "paragraph": null, "point": null, "actor": [ "market-surveillance-authority" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Market surveillance authorities must take such complaints into account for market-surveillance activities and handle them through dedicated procedures.", "quote": "\"such complaints shall be taken into account for the purpose of conducting market surveillance activities, and shall be handled in line with the dedicated procedures\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Complaints about legal-AI systems can feed into market surveillance procedures.", "cross_references": [ "Regulation (EU) 2019/1020" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_85", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-85#art-85-0-handling" }, { "obligation_id": "art-86-1-explanation-right", "article": 86, "paragraph": 1, "point": null, "actor": [ "natural-person", "deployer" ], "obligation_type": "right-of-person", "risk_tier": "high-risk", "summary": "Affected persons subject to certain deployer decisions based on Annex III high-risk AI outputs with legal or similarly significant effects have a right to clear and meaningful explanations.", "quote": "\"shall have the right to obtain from the deployer clear and meaningful explanations of the role of the AI system in the decision-making procedure\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This is directly relevant where legal or public-authority decisions use high-risk AI outputs.", "cross_references": [ "Annex III", "Art. 86(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_86", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-86#art-86-1-explanation-right" }, { "obligation_id": "art-86-2-exceptions", "article": 86, "paragraph": 2, "point": null, "actor": [ "deployer", "natural-person" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "The explanation right does not apply where Union or national law, in compliance with Union law, provides exceptions or restrictions to that obligation.", "quote": "\"Paragraph 1 shall not apply to the use of AI systems for which exceptions from, or restrictions to, the obligation under that paragraph follow from Union or national law\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legal decision-making contexts may have Union or national-law limits on explanations.", "cross_references": [ "Art. 86(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_86", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-86#art-86-2-exceptions" }, { "obligation_id": "art-86-3-union-law-limit", "article": 86, "paragraph": 3, "point": null, "actor": [ "natural-person", "deployer" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "Article 86 applies only to the extent the same explanation right is not otherwise provided under Union law.", "quote": "\"This Article shall apply only to the extent that the right referred to in paragraph 1 is not otherwise provided for under Union law.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "The Article 86 right coexists with other Union-law explanation or information rights.", "cross_references": [ "Art. 86(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_86", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-86#art-86-3-union-law-limit" }, { "obligation_id": "art-87-0-whistleblowers", "article": 87, "paragraph": null, "point": null, "actor": [ "natural-person" ], "obligation_type": "right-of-person", "risk_tier": "not-tier-specific", "summary": "The EU whistleblower directive applies to reporting AI Act infringements and protecting persons who report them.", "quote": "\"Directive (EU) 2019/1937 shall apply to the reporting of infringements of this Regulation and the protection of persons reporting such infringements.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Personnel at legal organisations or vendors reporting AI Act infringements may receive whistleblower protections.", "cross_references": [ "Directive (EU) 2019/1937" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_87", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-87#art-87-0-whistleblowers" }, { "obligation_id": "art-88-1-commission-exclusive", "article": 88, "paragraph": 1, "point": null, "actor": [ "commission", "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "gpai", "summary": "The Commission has exclusive power to supervise and enforce Chapter V for GPAI models and entrusts implementation to the AI Office, subject to procedural guarantees.", "quote": "\"The Commission shall have exclusive powers to supervise and enforce Chapter V, taking into account the procedural guarantees under Article 94.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "GPAI model providers serving legal-AI vendors are supervised at Union level.", "cross_references": [ "Chapter V", "Art. 94" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_88", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-88#art-88-1-commission-exclusive" }, { "obligation_id": "art-88-2-authority-request", "article": 88, "paragraph": 2, "point": null, "actor": [ "market-surveillance-authority", "commission" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai", "summary": "Market surveillance authorities may request the Commission to use Section 5 powers where necessary and proportionate for their AI Act tasks.", "quote": "\"market surveillance authorities may request the Commission to exercise the powers laid down in this Section\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "A national investigation of legal AI using GPAI may lead to a Commission enforcement request.", "cross_references": [ "Art. 75(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_88", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-88#art-88-2-authority-request" }, { "obligation_id": "art-89-1-monitoring-actions", "article": 89, "paragraph": 1, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "gpai", "summary": "The AI Office may take necessary monitoring actions for effective implementation and compliance by GPAI model providers, including adherence to approved codes of practice.", "quote": "\"the AI Office may take the necessary actions to monitor the effective implementation and compliance with this Regulation by providers of general-purpose AI models\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Monitoring of GPAI model providers can affect models incorporated into legal AI products.", "cross_references": [ "Art. 56" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_89", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-89#art-89-1-monitoring-actions" }, { "obligation_id": "art-89-2-downstream-complaint", "article": 89, "paragraph": 2, "point": null, "actor": [ "downstream-provider" ], "obligation_type": "right-of-person", "risk_tier": "gpai", "summary": "Downstream providers have the right to lodge a reasoned complaint alleging GPAI-provider infringement, with contact, facts, provisions and relevant supporting information.", "quote": "\"Downstream providers shall have the right to lodge a complaint alleging an infringement of this Regulation.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "A legal-AI vendor integrating a GPAI model may complain about the model provider.", "cross_references": [ "Art. 89(2)(a)-(c)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_89", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-89#art-89-2-downstream-complaint" }, { "obligation_id": "art-90-1-qualified-alert", "article": 90, "paragraph": 1, "point": null, "actor": [ "scientific-panel" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai-systemic-risk", "summary": "The scientific panel may provide a qualified alert to the AI Office when it suspects a GPAI model poses Union-level concrete identifiable risk or meets systemic-risk conditions.", "quote": "\"The scientific panel may provide a qualified alert to the AI Office where it has reason to suspect\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "A widely used GPAI model in legal products could be subject to systemic-risk alert processes.", "cross_references": [ "Art. 51" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_90", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-90#art-90-1-qualified-alert" }, { "obligation_id": "art-90-2-ai-office-measures", "article": 90, "paragraph": 2, "point": null, "actor": [ "commission", "ai-office", "ai-board" ], "obligation_type": "enforcement-power", "risk_tier": "gpai-systemic-risk", "summary": "After a qualified alert, the Commission through the AI Office may exercise Section 5 powers and must inform the Board of Article 91 to 94 measures.", "quote": "\"the Commission, through the AI Office and after having informed the Board, may exercise the powers laid down in this Section\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This can trigger documentation, access or mitigation steps for GPAI models used in legal AI.", "cross_references": [ "Art. 91", "Art. 94" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_90", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-90#art-90-2-ai-office-measures" }, { "obligation_id": "art-90-3-alert-contents", "article": 90, "paragraph": 3, "point": null, "actor": [ "scientific-panel" ], "obligation_type": "documentation", "risk_tier": "gpai-systemic-risk", "summary": "A qualified alert must be reasoned and include the provider contact point, facts, reasons and any other relevant information gathered by the scientific panel.", "quote": "\"A qualified alert shall be duly reasoned and indicate at least\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is a scientific panel procedural content requirement.", "cross_references": [ "Art. 90(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_90", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-90#art-90-3-alert-contents" }, { "obligation_id": "art-91-1-document-request", "article": 91, "paragraph": 1, "point": null, "actor": [ "commission", "gpai-provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai", "summary": "The Commission may require a GPAI model provider to provide Article 53 and 55 documentation or other information needed to assess compliance.", "quote": "\"The Commission may request the provider of the general-purpose AI model concerned to provide the documentation drawn up by the provider in accordance with Articles 53 and 55\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "GPAI providers that supply models for legal AI may have to produce compliance documentation.", "cross_references": [ "Art. 53", "Art. 55" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_91", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-91#art-91-1-document-request" }, { "obligation_id": "art-91-4-request-contents", "article": 91, "paragraph": 4, "point": null, "actor": [ "commission" ], "obligation_type": "documentation", "risk_tier": "gpai", "summary": "Requests for GPAI information must state legal basis, purpose, required information, response period and Article 101 fines for incorrect, incomplete or misleading information.", "quote": "\"The request for information shall state the legal basis and the purpose of the request, specify what information is required, set a period within which the information is to be provided\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is a procedural safeguard around Commission requests to GPAI providers.", "cross_references": [ "Art. 101" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_91", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-91#art-91-4-request-contents" }, { "obligation_id": "art-91-5-provider-supply", "article": 91, "paragraph": 5, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai", "summary": "The GPAI model provider or representative must supply requested information, with authorised persons or lawyers able to respond while clients remain responsible for completeness and accuracy.", "quote": "\"The provider of the general-purpose AI model concerned, or its representative shall supply the information requested.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Lawyers can supply information for clients, but GPAI-provider clients remain responsible if it is incomplete, incorrect or misleading.", "cross_references": [ "Art. 91(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_91", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-91#art-91-5-provider-supply" }, { "obligation_id": "art-92-1-evaluations", "article": 92, "paragraph": 1, "point": null, "actor": [ "ai-office" ], "obligation_type": "enforcement-power", "risk_tier": "gpai-systemic-risk", "summary": "The AI Office may evaluate GPAI models to assess provider compliance where Article 91 information is insufficient or to investigate Union-level systemic risks.", "quote": "\"The AI Office, after consulting the Board, may conduct evaluations of the general-purpose AI model concerned\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Systemic GPAI models used in legal AI may be evaluated by the AI Office.", "cross_references": [ "Art. 91", "Art. 90(1)(a)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_92", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-92#art-92-1-evaluations" }, { "obligation_id": "art-92-2-experts-access", "article": 92, "paragraph": 2, "point": null, "actor": [ "commission", "gpai-provider" ], "obligation_type": "enforcement-power", "risk_tier": "gpai-systemic-risk", "summary": "The Commission may appoint independent experts and request model access through APIs or other technical means, including source code, for evaluations.", "quote": "\"the Commission may request access to the general-purpose AI model concerned through APIs or further appropriate technical means and tools, including source code\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "GPAI providers behind legal-AI tooling may face technical access requests for model evaluation.", "cross_references": [ "Art. 68(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_92", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-92#art-92-2-experts-access" }, { "obligation_id": "art-92-4-access-request", "article": 92, "paragraph": 4, "point": null, "actor": [ "commission" ], "obligation_type": "documentation", "risk_tier": "gpai-systemic-risk", "summary": "A model-access request must state legal basis, purpose, reasons, response period and Article 101 fines for failure to provide access.", "quote": "\"The request for access shall state the legal basis, the purpose and reasons of the request and set the period within which the access is to be provided\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is a procedural safeguard around model access requests.", "cross_references": [ "Art. 101" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_92", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-92#art-92-4-access-request" }, { "obligation_id": "art-92-5-provider-access", "article": 92, "paragraph": 5, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai-systemic-risk", "summary": "The GPAI model provider or its representative must provide the access requested for Commission or AI Office evaluations.", "quote": "\"The providers of the general-purpose AI model concerned or its representative shall supply the information requested.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "GPAI providers used by legal AI systems may need to provide technical access for evaluations.", "cross_references": [ "Art. 92(3)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_92", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-92#art-92-5-provider-access" }, { "obligation_id": "art-93-1-request-measures", "article": 93, "paragraph": 1, "point": null, "actor": [ "commission", "gpai-provider" ], "obligation_type": "enforcement-power", "risk_tier": "gpai-systemic-risk", "summary": "Where necessary and appropriate, the Commission may request GPAI providers to comply with Articles 53 and 54, mitigate systemic risk, or restrict, withdraw or recall the model.", "quote": "\"Where necessary and appropriate, the Commission may request providers to:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Models integrated into legal AI could be subject to compliance, mitigation or market-restriction measures.", "cross_references": [ "Art. 53", "Art. 54", "Art. 92" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_93", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-93#art-93-1-request-measures" }, { "obligation_id": "art-93-3-binding-commitments", "article": 93, "paragraph": 3, "point": null, "actor": [ "commission", "gpai-provider" ], "obligation_type": "enforcement-power", "risk_tier": "gpai-systemic-risk", "summary": "If a systemic-risk GPAI provider offers mitigation commitments during structured dialogue, the Commission may make them binding and close further action grounds.", "quote": "\"the Commission may, by decision, make those commitments binding and declare that there are no further grounds for action\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is a GPAI enforcement settlement-style mechanism.", "cross_references": [ "Art. 93(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_93", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-93#art-93-3-binding-commitments" }, { "obligation_id": "art-94-0-procedural-rights", "article": 94, "paragraph": null, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "right-of-person", "risk_tier": "gpai", "summary": "Article 18 of Regulation (EU) 2019/1020 applies to GPAI providers, subject to more specific procedural rights in the AI Act.", "quote": "\"Article 18 of Regulation (EU) 2019/1020 shall apply mutatis mutandis to the providers of the general-purpose AI model\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "GPAI providers serving legal AI retain procedural rights in Commission enforcement.", "cross_references": [ "Regulation (EU) 2019/1020" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_94", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-94#art-94-0-procedural-rights" }, { "obligation_id": "art-95-1-voluntary-high-risk-reqs", "article": 95, "paragraph": 1, "point": null, "actor": [ "ai-office", "member-state" ], "obligation_type": "support-measure", "risk_tier": "all-ai-systems", "summary": "The AI Office and Member States must encourage and facilitate codes of conduct for voluntary application of some or all Chapter III Section 2 requirements to non-high-risk AI systems.", "quote": "\"shall encourage and facilitate the drawing up of codes of conduct, including related governance mechanisms\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal organisations using non-high-risk AI may be covered by voluntary codes modeled on high-risk requirements.", "cross_references": [ "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_95", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-95#art-95-1-voluntary-high-risk-reqs" }, { "obligation_id": "art-95-2-specific-requirements", "article": 95, "paragraph": 2, "point": null, "actor": [ "ai-office", "member-state", "deployer" ], "obligation_type": "support-measure", "risk_tier": "all-ai-systems", "summary": "The AI Office and Member States must facilitate codes on voluntary specific requirements for all AI systems, including ethics, environmental sustainability, AI literacy, inclusive design and vulnerable groups.", "quote": "\"shall facilitate the drawing up of codes of conduct concerning the voluntary application, including by deployers, of specific requirements to all AI systems\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This can reach law firms, legal departments and courts as deployers through voluntary AI-use commitments.", "cross_references": [ "Art. 4" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_95", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-95#art-95-2-specific-requirements" }, { "obligation_id": "art-95-3-code-authors-smes", "article": 95, "paragraph": 3, "point": null, "actor": [ "provider", "deployer", "ai-office", "member-state" ], "obligation_type": "support-measure", "risk_tier": "all-ai-systems", "summary": "Codes of conduct may be drawn up by providers, deployers or their organisations with stakeholders, and the AI Office and Member States must consider SME and startup interests.", "quote": "\"Codes of conduct may be drawn up by individual providers or deployers of AI systems or by organisations representing them or by both\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI vendors and legal deployers may participate in sector codes of conduct.", "cross_references": [ "Art. 95(4)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_95", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-95#art-95-3-code-authors-smes" }, { "obligation_id": "art-96-1-guidelines", "article": 96, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The Commission must develop guidelines on practical implementation of the Regulation, including high-risk requirements and obligations, prohibited practices, substantial modification, transparency duties, legal relationships and the AI-system definition.", "quote": "\"The Commission shall develop guidelines on the practical implementation of this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Guidance on prohibited practices, high-risk duties, transparency and AI-system definition is directly relevant to legal-AI providers and deployers.", "cross_references": [ "Art. 5", "Art. 8", "Art. 15", "Art. 25", "Art. 26", "Art. 50" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_96", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-96#art-96-1-guidelines" }, { "obligation_id": "art-96-1-g-complementarity-guidelines", "article": 96, "paragraph": 1, "point": "g", "actor": [ "commission" ], "obligation_type": "support-measure", "risk_tier": "high-risk", "summary": "The Commission must publish by 1 August 2027 guidelines on implementing Articles 8(2), 9(10) and 17(3) consistently with Annex I Section A Union harmonisation legislation while avoiding duplication and additional burdens.", "quote": "\"such guidelines shall be published by 1 August 2027.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": "Publication deadline: 1 August 2027.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This guidance mainly affects high-risk product AI, with indirect relevance for legal-AI vendors in regulated products.", "cross_references": [ "Art. 8(2)", "Art. 9(10)", "Art. 17(3)", "Annex I Section A" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_96", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-96#art-96-1-g-complementarity-guidelines" }, { "obligation_id": "art-96-2-update-guidelines", "article": 96, "paragraph": 2, "point": null, "actor": [ "commission", "member-state", "ai-office" ], "obligation_type": "support-measure", "risk_tier": "not-tier-specific", "summary": "The Commission must update previously adopted guidelines when necessary, whether at Member State or AI Office request or on its own initiative.", "quote": "\"the Commission shall update guidelines previously adopted when deemed necessary.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Updated guidance can affect legal-sector interpretations of AI Act obligations.", "cross_references": [ "Art. 96(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_96", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-96#art-96-2-update-guidelines" }, { "obligation_id": "art-97-1-delegation-conditions", "article": 97, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The Commission power to adopt delegated acts is conferred subject to the conditions set out in Article 97.", "quote": "\"The power to adopt delegated acts is conferred on the Commission subject to the conditions laid down in this Article.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Delegated-act mechanics shape the Act but do not directly impose legal-practice obligations.", "cross_references": [ "Art. 97" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_97", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-97#art-97-1-delegation-conditions" }, { "obligation_id": "art-97-2-delegation-2024", "article": 97, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The delegated-act powers for listed AI Act provisions are conferred on the Commission for five years from 1 August 2024.", "quote": "\"shall be conferred on the Commission for a period of five years from 1 August 2024.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This includes delegated powers that can affect high-risk and GPAI obligations relevant to legal-AI vendors.", "cross_references": [ "Art. 6(6)", "Art. 6(7)", "Art. 7", "Art. 11(3)", "Art. 43", "Art. 47", "Art. 51", "Art. 52", "Art. 53" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_97", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-97#art-97-2-delegation-2024" }, { "obligation_id": "art-97-2-delegation-2026", "article": 97, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The delegated-act powers referred to in Articles 2(13) and 30(2) are conferred on the Commission for five years from 27 July 2026.", "quote": "\"The power to adopt delegated acts referred to in Article 2(13) and Article 30(2) shall be conferred on the Commission for a period of five years from 27 July 2026.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": "New delegation period runs from 27 July 2026.", "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This Omnibus-added delegation includes Annex XIV-related notification scope for notified-body designation.", "cross_references": [ "Art. 2(13)", "Art. 30(2)", "Annex XIV" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_97", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-97#art-97-2-delegation-2026" }, { "obligation_id": "art-97-2-report-extension", "article": 97, "paragraph": 2, "point": null, "actor": [ "commission", "other" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Commission must report on delegated powers before each five-year period ends, and the delegation is tacitly extended unless Parliament or Council opposes in time.", "quote": "\"The Commission shall draw up a report in respect of the delegation of power not later than nine months before the end of the five-year period.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is legislative oversight of delegated powers with indirect impact on AI Act rules.", "cross_references": [ "European Parliament", "Council" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_97", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-97#art-97-2-report-extension" }, { "obligation_id": "art-97-3-revocation", "article": 97, "paragraph": 3, "point": null, "actor": [ "other" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The European Parliament or Council may revoke listed delegations at any time; revocation ends the specified delegation prospectively without affecting delegated acts already in force.", "quote": "\"may be revoked at any time by the European Parliament or by the Council.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Revocation affects future delegated amendments, including rules relevant to legal-AI compliance.", "cross_references": [ "European Parliament", "Council" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_97", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-97#art-97-3-revocation" }, { "obligation_id": "art-97-4-consult-notify-objection", "article": 97, "paragraph": 4, "point": null, "actor": [ "commission", "member-state", "other" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "Before adopting a delegated act, the Commission must consult Member State experts, notify Parliament and Council after adoption, and the act enters into force only absent objection within the Article 97 period.", "quote": "\"Before adopting a delegated act, the Commission shall consult experts designated by each Member State\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "Procedural controls on delegated acts indirectly affect future legal-AI compliance rules.", "cross_references": [ "Art. 97(5)", "Art. 97(6)", "Interinstitutional Agreement of 13 April 2016" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_97", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-97#art-97-4-consult-notify-objection" }, { "obligation_id": "art-98-0-committee", "article": 98, "paragraph": null, "point": null, "actor": [ "commission" ], "obligation_type": "delegated-or-implementing-act", "risk_tier": "not-tier-specific", "summary": "The Commission is assisted by a Regulation (EU) No 182/2011 committee, and the examination procedure applies where Article 98(2) is referenced.", "quote": "\"The Commission shall be assisted by a committee. That committee shall be a committee within the meaning of Regulation (EU) No 182/2011.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This governs implementing acts relevant to AI Act administration.", "cross_references": [ "Regulation (EU) No 182/2011" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_98", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-98#art-98-0-committee" }, { "obligation_id": "art-99-1-member-state-penalties", "article": 99, "paragraph": 1, "point": null, "actor": [ "member-state" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "Member States must lay down rules on penalties and other enforcement measures for any AI Act infringement by operators and ensure effective implementation, with effective, proportionate and dissuasive penalties and attention to SMEs and SMCs.", "quote": "\"Member States shall lay down the rules on penalties and other enforcement measures, which may also include administrative fines, warnings and non-monetary measures, applicable to any infringement of this Regulation by operators\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99", "legal_practice_relevance": "high", "legal_practice_note": "National penalty rules determine exposure for legal-AI providers, deployers and other operators.", "cross_references": [ "Art. 96" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-1-member-state-penalties" }, { "obligation_id": "art-99-2-commission-notification", "article": 99, "paragraph": 2, "point": null, "actor": [ "member-state" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Member States must notify the Commission of penalty and enforcement-measure rules by the date of entry into application and notify subsequent amendments without delay.", "quote": "\"The Member States shall, without delay and at the latest by the date of entry into application, notify the Commission of the rules on penalties and of other enforcement measures\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This supports transparency around national penalty regimes affecting legal-sector AI operators.", "cross_references": [ "Art. 99(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-2-commission-notification" }, { "obligation_id": "art-99-3-prohibited-fine", "article": 99, "paragraph": 3, "point": null, "actor": [ "operator-any" ], "obligation_type": "penalty", "risk_tier": "prohibited-practice", "summary": "Non-compliance with Article 5 prohibited AI practices is subject to administrative fines up to EUR 35,000,000 or, for undertakings, 7% of total worldwide annual turnover, whichever is higher.", "quote": "\"administrative fines of up to EUR 35 000 000 or, if the offender is an undertaking, up to 7 % of its total worldwide annual turnover for the preceding financial year, whichever is higher.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(3)", "legal_practice_relevance": "high", "legal_practice_note": "Article 5 prohibited-practice penalties can apply to legal-AI providers or deployers engaging in prohibited practices.", "cross_references": [ "Art. 5" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-3-prohibited-fine" }, { "obligation_id": "art-99-4-operator-notified-body-fine", "article": 99, "paragraph": 4, "point": null, "actor": [ "provider", "authorised-representative", "importer", "distributor", "deployer", "notified-body", "operator-any" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "Non-compliance with specified operator, notified-body and transparency provisions is subject to fines up to EUR 15,000,000 or, for undertakings, 3% of total worldwide annual turnover, whichever is higher.", "quote": "\"administrative fines of up to EUR 15 000 000 or, if the offender is an undertaking, up to 3 % of its total worldwide annual turnover for the preceding financial year, whichever is higher:\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "This is the main fine tier for high-risk provider/deployer duties and transparency duties relevant to legal-AI vendors and users.", "cross_references": [ "Art. 16", "Art. 22", "Art. 23", "Art. 24", "Art. 25(2)", "Art. 25(4)", "Art. 26", "Art. 31", "Art. 33", "Art. 34", "Art. 50" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-4-operator-notified-body-fine" }, { "obligation_id": "art-99-5-incorrect-information-fine", "article": 99, "paragraph": 5, "point": null, "actor": [ "operator-any" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "Supplying incorrect, incomplete or misleading information to notified bodies or national competent authorities in response to a request is subject to fines up to EUR 7,500,000 or 1% of worldwide turnover, whichever is higher.", "quote": "\"administrative fines of up to EUR 7 500 000 or, if the offender is an undertaking, up to 1 % of its total worldwide annual turnover for the preceding financial year, whichever is higher.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(5)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI operators responding to regulators or notified bodies must avoid incorrect, incomplete or misleading information.", "cross_references": [ "notified bodies", "national competent authorities" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-5-incorrect-information-fine" }, { "obligation_id": "art-99-6-sme-cap", "article": 99, "paragraph": 6, "point": null, "actor": [ "operator-any" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "For SMEs, including start-ups, each Article 99 fine is capped at the lower of the percentage or amount referred to in paragraphs 3, 4 and 5.", "quote": "\"In the case of SMEs, including start-ups, each fine referred to in this Article shall be up to the percentages or amount referred to in paragraphs 3, 4 and 5, whichever thereof is lower.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(6)", "legal_practice_relevance": "high", "legal_practice_note": "Small legal-tech vendors may benefit from the SME lower-of cap across Article 99 fine tiers.", "cross_references": [ "Art. 99(3)", "Art. 99(4)", "Art. 99(5)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-6-sme-cap" }, { "obligation_id": "art-99-7-fine-factors", "article": 99, "paragraph": 7, "point": null, "actor": [ "market-surveillance-authority", "national-competent-authority" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "Authorities deciding whether to impose an administrative fine and its amount must consider all relevant circumstances, including gravity, duplicate penalties, size, aggravating or mitigating factors, cooperation, responsibility, notification, intent and mitigation.", "quote": "\"all relevant circumstances of the specific situation shall be taken into account\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(7)", "legal_practice_relevance": "high", "legal_practice_note": "These factors shape penalty exposure for legal-AI providers, deployers and other operators.", "cross_references": [ "Art. 99(7)(a)-(j)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-7-fine-factors" }, { "obligation_id": "art-99-8-public-authorities", "article": 99, "paragraph": 8, "point": null, "actor": [ "member-state", "public-authority-deployer" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "Each Member State must set rules on the extent to which administrative fines may be imposed on public authorities and bodies established in that Member State.", "quote": "\"Each Member State shall lay down rules on to what extent administrative fines may be imposed on public authorities and bodies established in that Member State.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(8)", "legal_practice_relevance": "high", "legal_practice_note": "Courts and public legal bodies deploying AI may face national rules on public-authority fines.", "cross_references": [ "public authorities and bodies" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-8-public-authorities" }, { "obligation_id": "art-99-9-courts-or-bodies", "article": 99, "paragraph": 9, "point": null, "actor": [ "member-state", "other" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "Depending on national legal systems, administrative-fine rules may be applied by competent national courts or other bodies, with equivalent effect.", "quote": "\"the rules on administrative fines may be applied in such a manner that the fines are imposed by competent national courts or by other bodies\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(9)", "legal_practice_relevance": "high", "legal_practice_note": "National courts may be involved in imposing AI Act administrative fines, depending on Member State systems.", "cross_references": [ "national courts" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-9-courts-or-bodies" }, { "obligation_id": "art-99-10-procedural-safeguards", "article": 99, "paragraph": 10, "point": null, "actor": [ "member-state", "national-competent-authority" ], "obligation_type": "right-of-person", "risk_tier": "not-tier-specific", "summary": "Exercise of Article 99 powers must be subject to appropriate procedural safeguards under Union and national law, including effective judicial remedies and due process.", "quote": "\"The exercise of powers under this Article shall be subject to appropriate procedural safeguards in accordance with Union and national law, including effective judicial remedies and due process.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(10)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI operators subject to penalties have procedural-safeguard and remedy protections.", "cross_references": [ "Union law", "national law" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-10-procedural-safeguards" }, { "obligation_id": "art-99-11-annual-reporting", "article": 99, "paragraph": 11, "point": null, "actor": [ "member-state" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "Member States must annually report to the Commission on Article 99 administrative fines issued during the year and related litigation or judicial proceedings.", "quote": "\"Member States shall, on an annual basis, report to the Commission about the administrative fines they have issued during that year\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(11)", "legal_practice_relevance": "medium", "legal_practice_note": "This can reveal enforcement involving legal-AI operators and related proceedings.", "cross_references": [ "Art. 99" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-11-annual-reporting" }, { "obligation_id": "art-99-6a-smc-cap", "article": 99, "paragraph": "6a", "point": null, "actor": [ "operator-any" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "For SMCs, each fine under Article 99(4) and (5) is capped at the lower of the percentage or amount stated in those paragraphs.", "quote": "\"In the case of SMCs, each fine referred to in paragraphs 4 and 5 shall be up to the percentages or amount referred therein, whichever is lower.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 99(6a)", "legal_practice_relevance": "high", "legal_practice_note": "Small mid-cap legal-tech or legal-service operators receive lower-of treatment for the 3%/EUR 15 million and 1%/EUR 7.5 million tiers.", "cross_references": [ "Art. 99(4)", "Art. 99(5)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_99", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-99#art-99-6a-smc-cap" }, { "obligation_id": "art-100-1-edps-fines", "article": 100, "paragraph": 1, "point": null, "actor": [ "union-institution", "other" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "The European Data Protection Supervisor may impose administrative fines on Union institutions, bodies, offices and agencies within scope, taking all listed circumstances into account.", "quote": "\"The European Data Protection Supervisor may impose administrative fines on Union institutions, bodies, offices and agencies falling within the scope of this Regulation.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 100(1)", "legal_practice_relevance": "medium", "legal_practice_note": "This covers EU bodies that act as AI providers or deployers, including legal institutions outside judicial exceptions.", "cross_references": [ "Art. 74(9)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_100", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-100#art-100-1-edps-fines" }, { "obligation_id": "art-100-2-prohibited-fine", "article": 100, "paragraph": 2, "point": null, "actor": [ "union-institution" ], "obligation_type": "penalty", "risk_tier": "prohibited-practice", "summary": "Union institutions, bodies, offices and agencies that breach Article 5 prohibited practices face administrative fines of up to EUR 1 500 000.", "quote": "\"Non-compliance with the prohibition of the AI practices referred to in Article 5 shall be subject to administrative fines of up to EUR 1 500 000.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 100(2)", "legal_practice_relevance": "high", "legal_practice_note": "This may affect EU legal bodies or institutions using prohibited AI practices.", "cross_references": [ "Art. 5" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_100", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-100#art-100-2-prohibited-fine" }, { "obligation_id": "art-100-3-other-fine", "article": 100, "paragraph": 3, "point": null, "actor": [ "union-institution" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "Union institutions, bodies, offices and agencies face administrative fines of up to EUR 750 000 for other AI-system requirements or obligations under the Regulation.", "quote": "\"The non-compliance of the AI system with any requirements or obligations under this Regulation, other than those laid down in Article 5, shall be subject to administrative fines of up to EUR 750 000.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 100(3)", "legal_practice_relevance": "medium", "legal_practice_note": "This can reach EU bodies deploying or providing regulated AI outside Article 5.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_100", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-100#art-100-3-other-fine" }, { "obligation_id": "art-100-4-hearing-defence", "article": 100, "paragraph": 4, "point": null, "actor": [ "other", "union-institution" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "Before EDPS fine decisions, the affected Union institution or body must have an opportunity to be heard, complainants must be closely associated, and defence rights and file access must be respected.", "quote": "\"Before taking decisions pursuant to this Article, the European Data Protection Supervisor shall give the Union institution, body, office or agency which is the subject of the proceedings\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 100(4)", "legal_practice_relevance": "medium", "legal_practice_note": "This sets procedural rights for Union bodies in AI Act fine proceedings.", "cross_references": [ "Art. 100(5)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_100", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-100#art-100-4-hearing-defence" }, { "obligation_id": "art-100-6-funds-reporting", "article": 100, "paragraph": 6, "point": null, "actor": [ "other" ], "obligation_type": "penalty", "risk_tier": "not-tier-specific", "summary": "Funds from Article 100 fines contribute to the Union budget, fines must not affect effective operation of the fined body, and EDPS must notify the Commission annually.", "quote": "\"Funds collected by imposition of fines in this Article shall contribute to the general budget of the Union.\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": "Art. 100(6)", "legal_practice_relevance": "low", "legal_practice_note": "This governs disposition and reporting of EDPS fines.", "cross_references": [ "Art. 100(7)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_100", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-100#art-100-6-funds-reporting" }, { "obligation_id": "art-101-1-gpai-fines", "article": 101, "paragraph": 1, "point": null, "actor": [ "commission", "gpai-provider", "gpai-provider-systemic-risk" ], "obligation_type": "penalty", "risk_tier": "gpai", "summary": "The Commission may fine GPAI model providers up to 3% of annual total worldwide turnover or EUR 15,000,000, whichever is higher, for intentional or negligent listed infringements.", "quote": "\"fines not exceeding 3 % of their annual total worldwide turnover in the preceding financial year or EUR 15 000 000 , whichever is higher.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "transitional_note": null, "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "Legal-AI vendors that also provide GPAI models may be exposed to this Commission fine tier.", "cross_references": [ "Art. 91", "Art. 92", "Art. 93" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_101", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-101#art-101-1-gpai-fines" }, { "obligation_id": "art-101-1-infringement-triggers", "article": 101, "paragraph": 1, "point": null, "actor": [ "gpai-provider", "gpai-provider-systemic-risk" ], "obligation_type": "penalty", "risk_tier": "gpai", "summary": "Fine triggers include infringing relevant AI Act provisions, failing to comply with Article 91 document or information requests, failing Article 93 measures, or failing to provide model access for Article 92 evaluation.", "quote": "\"when the Commission finds that the provider intentionally or negligently:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "transitional_note": null, "penalty_basis": "Art. 101(1)", "legal_practice_relevance": "medium", "legal_practice_note": "This identifies the conduct by GPAI providers that can trigger fines, including model-access and information failures.", "cross_references": [ "Art. 91", "Art. 92", "Art. 93" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_101", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-101#art-101-1-infringement-triggers" }, { "obligation_id": "art-101-2-heard", "article": 101, "paragraph": 2, "point": null, "actor": [ "commission", "gpai-provider" ], "obligation_type": "right-of-person", "risk_tier": "gpai", "summary": "Before adopting an Article 101 fine decision, the Commission must communicate preliminary findings to the GPAI model provider and give it an opportunity to be heard.", "quote": "\"the Commission shall communicate its preliminary findings to the provider of the general-purpose AI model and give it an opportunity to be heard.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "GPAI providers connected to legal-AI services receive hearing rights before Commission fines.", "cross_references": [ "Art. 101(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_101", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-101#art-101-2-heard" }, { "obligation_id": "art-101-3-effective-fines", "article": 101, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "penalty", "risk_tier": "gpai", "summary": "Fines imposed under Article 101 must be effective, proportionate and dissuasive.", "quote": "\"Fines imposed in accordance with this Article shall be effective, proportionate and dissuasive.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "transitional_note": null, "penalty_basis": "Art. 101(3)", "legal_practice_relevance": "medium", "legal_practice_note": "This governs Commission fine calibration for GPAI providers, including legal-AI model providers.", "cross_references": [ "Art. 101" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_101", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-101#art-101-3-effective-fines" }, { "obligation_id": "art-101-4-board-notice", "article": 101, "paragraph": 4, "point": null, "actor": [ "commission", "ai-board" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "gpai", "summary": "Information on Article 101 fines must also be communicated to the AI Board as appropriate.", "quote": "\"Information on fines imposed under this Article shall also be communicated to the Board as appropriate.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is governance reporting about GPAI fines and has indirect legal-practice relevance.", "cross_references": [ "ai-board" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_101", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-101#art-101-4-board-notice" }, { "obligation_id": "art-101-5-6-review-procedure", "article": 101, "paragraph": 5, "point": null, "actor": [ "commission", "other" ], "obligation_type": "right-of-person", "risk_tier": "gpai", "summary": "The Court of Justice may review Commission fine decisions with unlimited jurisdiction, and the Commission must adopt implementing acts on detailed arrangements and procedural safeguards.", "quote": "\"It may cancel, reduce or increase the fine imposed.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "GPAI providers serving legal markets can seek judicial review and benefit from procedural safeguards.", "cross_references": [ "Court of Justice of the European Union", "Art. 98(2)", "Art. 101(6)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_101", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph (Art. 101 excepted from Art. 113(b))", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-101#art-101-5-6-review-procedure" }, { "obligation_id": "art-102-0-amendment", "article": 102, "paragraph": null, "point": null, "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "not-tier-specific", "summary": "Article 102 amends Regulation (EC) No 300/2008 so that AI Act Chapter III Section 2 requirements are taken into account for security equipment concerning Artificial Intelligence systems.", "quote": "\"the requirements set out in Chapter III, Section 2, of that Regulation shall be taken into account\"", "applies_from": "2026-07-27", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(d): Arts 102–110", "transitional_note": "Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "This sectoral product-law amendment has no direct legal-practice obligation.", "cross_references": [ "Chapter III Section 2", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_102", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-102#art-102-0-amendment" }, { "obligation_id": "art-103-0-amendment", "article": 103, "paragraph": null, "point": null, "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "not-tier-specific", "summary": "Article 103 amends Regulation (EU) No 167/2013 so that AI Act Chapter III Section 2 requirements are taken into account for artificial intelligence systems which are safety components.", "quote": "\"the requirements set out in Chapter III, Section 2, of that Regulation shall be taken into account\"", "applies_from": "2026-07-27", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(d): Arts 102–110", "transitional_note": "Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "This sectoral product-law amendment has no direct legal-practice obligation.", "cross_references": [ "Chapter III Section 2", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_103", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-103#art-103-0-amendment" }, { "obligation_id": "art-104-0-amendment", "article": 104, "paragraph": null, "point": null, "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "not-tier-specific", "summary": "Article 104 amends Regulation (EU) No 168/2013 so that AI Act Chapter III Section 2 requirements are taken into account for Artificial Intelligence systems which are safety components.", "quote": "\"the requirements set out in Chapter III, Section 2, of that Regulation shall be taken into account\"", "applies_from": "2026-07-27", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(d): Arts 102–110", "transitional_note": "Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "This sectoral product-law amendment has no direct legal-practice obligation.", "cross_references": [ "Chapter III Section 2", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_104", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-104#art-104-0-amendment" }, { "obligation_id": "art-105-0-amendment", "article": 105, "paragraph": null, "point": null, "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "not-tier-specific", "summary": "Article 105 amends Directive 2014/90/EU so that AI Act Chapter III Section 2 requirements are taken into account for Artificial Intelligence systems which are safety components.", "quote": "\"the Commission shall take into account the requirements set out in Chapter III, Section 2, of that Regulation\"", "applies_from": "2026-07-27", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(d): Arts 102–110", "transitional_note": "Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "This sectoral product-law amendment has no direct legal-practice obligation.", "cross_references": [ "Chapter III Section 2", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_105", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-105#art-105-0-amendment" }, { "obligation_id": "art-106-0-amendment", "article": 106, "paragraph": null, "point": null, "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "not-tier-specific", "summary": "Article 106 amends Directive (EU) 2016/797 so that AI Act Chapter III Section 2 requirements are taken into account for Artificial Intelligence systems which are safety components.", "quote": "\"the requirements set out in Chapter III, Section 2, of that Regulation shall be taken into account\"", "applies_from": "2026-07-27", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(d): Arts 102–110", "transitional_note": "Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "This sectoral product-law amendment has no direct legal-practice obligation.", "cross_references": [ "Chapter III Section 2", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_106", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-106#art-106-0-amendment" }, { "obligation_id": "art-107-0-amendment", "article": 107, "paragraph": null, "point": null, "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "not-tier-specific", "summary": "Article 107 amends Regulation (EU) 2018/858 so that AI Act Chapter III Section 2 requirements are taken into account for Artificial Intelligence systems which are safety components.", "quote": "\"the requirements set out in Chapter III, Section 2, of that Regulation shall be taken into account\"", "applies_from": "2026-07-27", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(d): Arts 102–110", "transitional_note": "Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "This sectoral product-law amendment has no direct legal-practice obligation.", "cross_references": [ "Chapter III Section 2", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_107", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-107#art-107-0-amendment" }, { "obligation_id": "art-108-0-1", "article": 108, "paragraph": null, "point": "1", "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "high-risk", "summary": "Article 108 amends Regulation (EU) 2018/1139 Article 17 so that, when adopting implementing acts concerning AI safety components, the Chapter III Section 2 AI Act requirements are taken into account.", "quote": "\"when adopting implementing acts pursuant to paragraph 1 concerning Artificial Intelligence systems which are safety components\"", "applies_from": "2026-07-27", "applies_from_basis": "Art. 113(d) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "Aviation safety-component amendments have no direct legal-practice relevance.", "cross_references": [ "Regulation (EU) 2018/1139 Article 17", "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_108", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-108#art-108-0-1" }, { "obligation_id": "art-108-0-2", "article": 108, "paragraph": null, "point": "2", "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "high-risk", "summary": "Article 108 amends Regulation (EU) 2018/1139 Article 19 so that, when adopting delegated acts concerning AI safety components, the Chapter III Section 2 AI Act requirements are taken into account.", "quote": "\"When adopting delegated acts pursuant to paragraphs 1 and 2 concerning Artificial Intelligence systems which are safety components\"", "applies_from": "2026-07-27", "applies_from_basis": "Art. 113(d) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "Aviation safety-component amendments have no direct legal-practice relevance.", "cross_references": [ "Regulation (EU) 2018/1139 Article 19", "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_108", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-108#art-108-0-2" }, { "obligation_id": "art-108-0-3", "article": 108, "paragraph": null, "point": "3", "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "high-risk", "summary": "Article 108 amends Regulation (EU) 2018/1139 Article 43 so that, when adopting implementing acts concerning AI safety components, the Chapter III Section 2 AI Act requirements are taken into account.", "quote": "\"When adopting implementing acts pursuant to paragraph 1 concerning Artificial Intelligence systems which are safety components\"", "applies_from": "2026-07-27", "applies_from_basis": "Art. 113(d) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "Aviation safety-component amendments have no direct legal-practice relevance.", "cross_references": [ "Regulation (EU) 2018/1139 Article 43", "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_108", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-108#art-108-0-3" }, { "obligation_id": "art-108-0-4", "article": 108, "paragraph": null, "point": "4", "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "high-risk", "summary": "Article 108 amends Regulation (EU) 2018/1139 Article 47 so that, when adopting delegated acts concerning AI safety components, the Chapter III Section 2 AI Act requirements are taken into account.", "quote": "\"When adopting delegated acts pursuant to paragraphs 1 and 2 concerning Artificial Intelligence systems which are safety components\"", "applies_from": "2026-07-27", "applies_from_basis": "Art. 113(d) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "Aviation safety-component amendments have no direct legal-practice relevance.", "cross_references": [ "Regulation (EU) 2018/1139 Article 47", "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_108", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-108#art-108-0-4" }, { "obligation_id": "art-108-0-5", "article": 108, "paragraph": null, "point": "5", "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "high-risk", "summary": "Article 108 amends Regulation (EU) 2018/1139 Article 57 so that, when adopting implementing acts concerning AI safety components, the Chapter III Section 2 AI Act requirements are taken into account.", "quote": "\"When adopting those implementing acts concerning Artificial Intelligence systems which are safety components\"", "applies_from": "2026-07-27", "applies_from_basis": "Art. 113(d) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "Aviation safety-component amendments have no direct legal-practice relevance.", "cross_references": [ "Regulation (EU) 2018/1139 Article 57", "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_108", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-108#art-108-0-5" }, { "obligation_id": "art-108-0-6", "article": 108, "paragraph": null, "point": "6", "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "high-risk", "summary": "Article 108 amends Regulation (EU) 2018/1139 Article 58 so that, when adopting delegated acts concerning AI safety components, the Chapter III Section 2 AI Act requirements are taken into account.", "quote": "\"When adopting delegated acts pursuant to paragraphs 1 and 2 concerning Artificial Intelligence systems which are safety components\"", "applies_from": "2026-07-27", "applies_from_basis": "Art. 113(d) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "Aviation safety-component amendments have no direct legal-practice relevance.", "cross_references": [ "Regulation (EU) 2018/1139 Article 58", "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_108", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-108#art-108-0-6" }, { "obligation_id": "art-109-0-amendment", "article": 109, "paragraph": null, "point": null, "actor": [ "commission" ], "obligation_type": "amendment-of-other-act", "risk_tier": "not-tier-specific", "summary": "Article 109 amends Regulation (EU) 2019/2144 so that AI Act Chapter III Section 2 requirements are taken into account for artificial intelligence systems which are safety components.", "quote": "\"the requirements set out in Chapter III, Section 2, of that Regulation shall be taken into account\"", "applies_from": "2026-07-27", "applies_from_basis": "Regulation (EU) 2026/1744 (Digital Omnibus on AI), Art. 1(40), amending Art. 113(d): Arts 102–110", "transitional_note": "Date deferred by Regulation (EU) 2026/1744 (in force 27 July 2026); as enacted: 2026-08-02 (Art. 113 second subparagraph).", "penalty_basis": null, "legal_practice_relevance": "none", "legal_practice_note": "This sectoral product-law amendment has no direct legal-practice obligation.", "cross_references": [ "Chapter III Section 2", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_109", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-109#art-109-0-amendment" }, { "obligation_id": "art-110-0-representative-actions", "article": 110, "paragraph": null, "point": null, "actor": [ "member-state", "other" ], "obligation_type": "amendment-of-other-act", "risk_tier": "not-tier-specific", "summary": "Article 110 adds the AI Act to Annex I of Directive 2020/1828, bringing it within the representative-actions framework listed in that Directive.", "quote": "\"In Annex I to Directive (EU) 2020/1828 of the European Parliament and of the Council ( 3 ), the following point is added:\"", "applies_from": "2026-07-27", "applies_from_basis": "Art. 113(d) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Representative actions can matter to legal practice through collective redress linked to AI Act infringements.", "cross_references": [ "Directive (EU) 2020/1828 Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_110", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-110#art-110-0-representative-actions" }, { "obligation_id": "art-111-1-large-scale-it", "article": 111, "paragraph": 1, "point": null, "actor": [ "provider", "deployer", "operator-any" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "AI components of Annex X large-scale IT systems placed on the market or put into service before 2 August 2027 must be brought into AI Act compliance by 31 December 2030.", "quote": "\"AI systems which are components of the large-scale IT systems established by the legal acts listed in Annex X that have been placed on the market or put into service before 2 August 2027 shall be brought into compliance\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": "Compliance deadline for covered large-scale IT AI components: 31 December 2030.", "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Large-scale justice and security IT systems may involve public-sector legal contexts.", "cross_references": [ "Annex X", "Art. 5", "Art. 113(a)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_111", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-111#art-111-1-large-scale-it" }, { "obligation_id": "art-111-2-public-authority-deadline", "article": 111, "paragraph": 2, "point": null, "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "requirement", "risk_tier": "high-risk", "summary": "Providers and deployers of high-risk AI systems intended for use by public authorities must take necessary steps to comply with AI Act requirements and obligations by 2 August 2030.", "quote": "\"the providers and deployers of high-risk AI systems intended to be used by public authorities shall take the necessary steps to comply with the requirements and obligations laid down in this Regulation by 2 August 2030.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": "Public-authority high-risk systems compliance deadline: 2 August 2030.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Courts and other public legal bodies using high-risk AI receive the 2 August 2030 legacy-system compliance deadline.", "cross_references": [ "Art. 111(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_111", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-111#art-111-2-public-authority-deadline" }, { "obligation_id": "art-111-2-significant-changes", "article": 111, "paragraph": 2, "point": null, "actor": [ "operator-any" ], "obligation_type": "derogation-or-exemption", "risk_tier": "high-risk", "summary": "For other high-risk AI systems placed on the market or put into service before the Chapter III application date, the Regulation applies only if those systems are subject to significant design changes from that date.", "quote": "\"this Regulation shall apply to operators of high-risk AI systems, other than the systems referred to in paragraph 1 of this Article, that have been placed on the market or put into service before the date of application of Chapter III\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": "Legacy high-risk systems are covered only upon significant design changes from the Chapter III application date, except for the public-authority compliance deadline.", "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Legacy high-risk legal-AI systems may be covered only upon significant design changes, subject to the public-authority rule.", "cross_references": [ "Chapter III", "Art. 113", "Art. 111(1)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_111", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-111#art-111-2-significant-changes" }, { "obligation_id": "art-111-3-gpai-legacy", "article": 111, "paragraph": 3, "point": null, "actor": [ "gpai-provider" ], "obligation_type": "derogation-or-exemption", "risk_tier": "gpai", "summary": "Providers of GPAI models placed on the market before 2 August 2025 must take necessary steps to comply with AI Act obligations by 2 August 2027.", "quote": "\"Providers of general-purpose AI models that have been placed on the market before 2 August 2025 shall take the necessary steps in order to comply with the obligations laid down in this Regulation by 2 August 2027.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": "Legacy GPAI model compliance deadline: 2 August 2027.", "penalty_basis": "Art. 101", "legal_practice_relevance": "medium", "legal_practice_note": "GPAI model providers serving legal-AI markets may rely on this legacy compliance timetable.", "cross_references": [ "Chapter V" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_111", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-111#art-111-3-gpai-legacy" }, { "obligation_id": "art-111-4-synthetic-content-legacy", "article": 111, "paragraph": 4, "point": null, "actor": [ "provider", "gpai-provider" ], "obligation_type": "transparency", "risk_tier": "transparency-risk", "summary": "Providers of AI systems, including GPAI systems, generating synthetic audio, image, video or text content placed on the market before 2 August 2026 must comply with Article 50(2) by 2 December 2026.", "quote": "\"Providers of AI systems, including general-purpose AI systems, generating synthetic audio, image, video or text content, that have been placed on the market before 2 August 2026 shall take the necessary steps in order to comply with Article 50(2) by 2 December 2026.\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": "Synthetic-content legacy systems compliance deadline: 2 December 2026.", "penalty_basis": "Art. 99(4)", "legal_practice_relevance": "high", "legal_practice_note": "Legal-AI systems generating synthetic legal or client-facing text, audio, images or video may need Article 50(2) compliance by the transitional deadline.", "cross_references": [ "Art. 50(2)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_111", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-111#art-111-4-synthetic-content-legacy" }, { "obligation_id": "art-112-1-annual-annex-review", "article": 112, "paragraph": 1, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "The Commission must annually assess the need to amend Annex III and Article 5 prohibited-practice lists until the Article 97 delegation period ends, and submit findings to Parliament and Council.", "quote": "\"The Commission shall assess the need for amendment of the list set out in Annex III and of the list of prohibited AI practices laid down in Article 5, once a year\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Annex III point 8 and Article 5 changes could materially affect legal-AI providers, courts and deployers.", "cross_references": [ "Annex III", "Art. 5", "Art. 97" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_112", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-112#art-112-1-annual-annex-review" }, { "obligation_id": "art-112-2-four-year-review", "article": 112, "paragraph": 2, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "By 2 August 2028 and every four years thereafter, the Commission must evaluate and report on Annex III headings, Article 50 transparency systems and supervision/governance effectiveness.", "quote": "\"By 2 August 2028 and every four years thereafter, the Commission shall evaluate and report to the European Parliament and to the Council\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Reviews may change high-risk and transparency categories relevant to legal-sector AI.", "cross_references": [ "Annex III", "Art. 50" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_112", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-112#art-112-2-four-year-review" }, { "obligation_id": "art-112-3-regulation-review", "article": 112, "paragraph": 3, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "By 2 August 2029 and every four years thereafter, the Commission must report on evaluation and review of the Regulation, including enforcement structure and possible need for a Union agency.", "quote": "\"By 2 August 2029 and every four years thereafter, the Commission shall submit a report on the evaluation and review of this Regulation\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is a general review duty that may affect future AI Act governance.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_112", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-112#art-112-3-regulation-review" }, { "obligation_id": "art-112-4-report-focus", "article": 112, "paragraph": 4, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "Article 112 reports must pay specific attention to authority resources, penalties, harmonised standards/common specifications and numbers of new market entrants and SMEs.", "quote": "\"The reports referred to in paragraph 2 shall pay specific attention to the following\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Penalty and standards data may affect legal-AI compliance expectations.", "cross_references": [ "Art. 99", "Art. 40", "Art. 41" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_112", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-112#art-112-4-report-focus" }, { "obligation_id": "art-112-5-ai-office-review", "article": 112, "paragraph": 5, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "not-tier-specific", "summary": "By 2 August 2028, the Commission must evaluate the AI Office’s functioning, powers, competences and resources and report to Parliament and Council.", "quote": "\"By 2 August 2028, the Commission shall evaluate the functioning of the AI Office\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This affects institutional enforcement capacity rather than direct legal-sector duties.", "cross_references": [ "AI Office" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_112", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-112#art-112-5-ai-office-review" }, { "obligation_id": "art-112-6-energy-report", "article": 112, "paragraph": 6, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "gpai", "summary": "By 2 August 2028 and every four years thereafter, the Commission must report publicly on standardisation deliverables for energy-efficient GPAI model development and assess whether further measures are needed.", "quote": "\"the Commission shall submit a report on the review of the progress on the development of standardisation deliverables on the energy-efficient development of general-purpose AI models\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This is most relevant to GPAI model providers, including models used in legal AI.", "cross_references": [ "general-purpose AI models" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_112", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-112#art-112-6-energy-report" }, { "obligation_id": "art-112-7-codes-evaluation", "article": 112, "paragraph": 7, "point": null, "actor": [ "commission" ], "obligation_type": "governance-institutional", "risk_tier": "all-ai-systems", "summary": "By 2 August 2028 and every three years thereafter, the Commission must evaluate the impact and effectiveness of voluntary codes of conduct for non-high-risk AI requirements and sustainability.", "quote": "\"the Commission shall evaluate the impact and effectiveness of voluntary codes of conduct\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Voluntary codes may influence legal-sector AI governance for non-high-risk systems.", "cross_references": [ "Art. 95", "Chapter III Section 2" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_112", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-112#art-112-7-codes-evaluation" }, { "obligation_id": "art-112-8-information-methodology", "article": 112, "paragraph": 8, "point": null, "actor": [ "ai-board", "member-state", "national-competent-authority", "ai-office", "commission" ], "obligation_type": "cooperation-with-authorities", "risk_tier": "not-tier-specific", "summary": "The Board, Member States and national authorities must provide requested information without undue delay, and the AI Office must develop a participative methodology for evaluating risk levels and list additions.", "quote": "\"the Board, the Member States and national competent authorities shall provide the Commission with information upon its request and without undue delay\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "Risk-level methodology can affect whether legal AI becomes listed as high-risk or transparency-risk.", "cross_references": [ "Art. 112(11)", "Annex III", "Art. 5", "Art. 50" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_112", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "enacted-2024", "page": "https://safelegalai.com/regulation/eu-ai-act/article-112#art-112-8-information-methodology" }, { "obligation_id": "art-113-0-entry", "article": 113, "paragraph": null, "point": null, "actor": [ "other" ], "obligation_type": "entry-into-force", "risk_tier": "not-tier-specific", "summary": "The AI Act enters into force on the twentieth day after its publication in the Official Journal of the European Union.", "quote": "\"This Regulation shall enter into force on the twentieth day following that of its publication in the Official Journal of the European Union.\"", "applies_from": "2024-08-01", "applies_from_basis": "Art. 113 first paragraph", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "low", "legal_practice_note": "This sets the legal entry-into-force date.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_113", "applies_from_as_enacted": "2024-08-01", "applies_from_basis_as_enacted": "Art. 113 first paragraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-113#art-113-0-entry" }, { "obligation_id": "art-113-0-general", "article": 113, "paragraph": null, "point": null, "actor": [ "operator-any" ], "obligation_type": "entry-into-force", "risk_tier": "not-tier-specific", "summary": "Unless a specific amended Article 113 exception applies, the AI Act applies from 2 August 2026.", "quote": "\"It shall apply from 2 August 2026. However:\"", "applies_from": "2026-08-02", "applies_from_basis": "Art. 113 second subparagraph (general application)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This is the default application date for most legal-sector AI obligations.", "cross_references": [], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_113", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-113#art-113-0-general" }, { "obligation_id": "art-113-a-chapters-i-ii", "article": 113, "paragraph": null, "point": "Art. 113(a)", "actor": [ "operator-any" ], "obligation_type": "entry-into-force", "risk_tier": "prohibited-practice", "summary": "Chapters I and II apply from 2 February 2025, except the newly specified Article 5(1) points and Article 5(1a) and (1b) later date.", "quote": "\"Chapters I and II shall apply from 2 February 2025\"", "applies_from": "2025-02-02", "applies_from_basis": "Art. 113(a) as amended", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This brings Article 5 prohibited-practice rules into early application for legal-sector AI, except the new Omnibus items.", "cross_references": [ "Chapter I", "Chapter II", "Art. 5" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_113", "applies_from_as_enacted": "2025-02-02", "applies_from_basis_as_enacted": "Art. 113(a)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-113#art-113-a-chapters-i-ii" }, { "obligation_id": "art-113-a-art5-new-points", "article": 113, "paragraph": null, "point": "Art. 113(a) exception", "actor": [ "operator-any" ], "obligation_type": "entry-into-force", "risk_tier": "prohibited-practice", "summary": "Article 5(1) first-subparagraph points (ba) and (bb), and Article 5(1a) and (1b), apply from 2 December 2026 under amended Article 113(a).", "quote": "\"Article 5(1), first subparagraph, points (ba) and (bb), and Article 5(1a) and (1b) which shall apply from 2 December 2026;\"", "applies_from": "2026-12-02", "applies_from_basis": "Art. 113(a) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "These newly staged prohibited-practice provisions may affect legal-sector AI from 2 December 2026.", "cross_references": [ "Art. 5(1)(ba)", "Art. 5(1)(bb)", "Art. 5(1a)", "Art. 5(1b)" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_113", "applies_from_as_enacted": null, "applies_from_basis_as_enacted": null, "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-113#art-113-a-art5-new-points" }, { "obligation_id": "art-113-b-selected-chapters", "article": 113, "paragraph": null, "point": "Art. 113(b)", "actor": [ "operator-any" ], "obligation_type": "entry-into-force", "risk_tier": "not-tier-specific", "summary": "Chapter III Section 4, Chapter V, Chapter VII, Chapter XII and Article 78 apply from 2 August 2025, except Article 101.", "quote": "\"Chapter III Section 4, Chapter V, Chapter VII and Chapter XII and Article 78 shall apply from 2 August 2025, with the exception of Article 101;\"", "applies_from": "2025-08-02", "applies_from_basis": "Art. 113(b)", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "Penalties, confidentiality and GPAI governance timelines begin early, while Article 101 remains on the default date.", "cross_references": [ "Chapter III Section 4", "Chapter V", "Chapter VII", "Chapter XII", "Art. 78", "Art. 101" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_113", "applies_from_as_enacted": "2025-08-02", "applies_from_basis_as_enacted": "Art. 113(b)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-113#art-113-b-selected-chapters" }, { "obligation_id": "art-113-c-i-annex-iii", "article": 113, "paragraph": null, "point": "Art. 113(c)(i)", "actor": [ "provider", "deployer", "public-authority-deployer" ], "obligation_type": "entry-into-force", "risk_tier": "high-risk", "summary": "Chapter III Sections 1 to 3, except Article 6(5), apply from 2 December 2027 for AI systems classified as high-risk under Article 6(2) and Annex III.", "quote": "\"2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2) and Annex III;\"", "applies_from": "2027-12-02", "applies_from_basis": "Art. 113(c)(i) as amended", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "high", "legal_practice_note": "This sets the deferred date for Annex III legal and justice high-risk AI.", "cross_references": [ "Chapter III Sections 1-3", "Art. 6(2)", "Annex III" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_113", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-113#art-113-c-i-annex-iii" }, { "obligation_id": "art-113-c-ii-annex-i", "article": 113, "paragraph": null, "point": "Art. 113(c)(ii)", "actor": [ "provider", "operator-any" ], "obligation_type": "entry-into-force", "risk_tier": "high-risk", "summary": "Chapter III Sections 1 to 3, except Article 6(5), apply from 2 August 2028 for AI systems classified as high-risk under Article 6(1) and Annex I.", "quote": "\"2 August 2028 as regards AI systems classified as high-risk pursuant to Article 6(1) and Annex I;\"", "applies_from": "2028-08-02", "applies_from_basis": "Art. 113(c)(ii) as amended", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This later date mainly concerns product-safety high-risk systems rather than Annex III legal AI.", "cross_references": [ "Chapter III Sections 1-3", "Art. 6(1)", "Annex I" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_113", "applies_from_as_enacted": "2027-08-02", "applies_from_basis_as_enacted": "Art. 113(c)", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-113#art-113-c-ii-annex-i" }, { "obligation_id": "art-113-d-articles-102-110", "article": 113, "paragraph": null, "point": "Art. 113(d)", "actor": [ "operator-any" ], "obligation_type": "entry-into-force", "risk_tier": "not-tier-specific", "summary": "Articles 102 to 110 apply from 27 July 2026 under amended Article 113(d).", "quote": "\"Articles 102 to 110 shall apply from 27 July 2026.\"", "applies_from": "2026-07-27", "applies_from_basis": "Art. 113(d) as amended by Reg. (EU) 2026/1744", "transitional_note": null, "penalty_basis": null, "legal_practice_relevance": "medium", "legal_practice_note": "This accelerates amendments to other acts and related provisions, including representative actions relevance.", "cross_references": [ "Art. 102", "Art. 110" ], "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng#art_113", "applies_from_as_enacted": "2026-08-02", "applies_from_basis_as_enacted": "Art. 113 second subparagraph", "text_amended_since_coding": false, "coded_from": "consolidated-2026-07-27", "page": "https://safelegalai.com/regulation/eu-ai-act/article-113#art-113-d-articles-102-110" } ] }