card:eu:article:ai-act--art-4
- Gäller
- provider-or-deployer: Take measures to ensure a sufficient level of AI literacy among staff and others operating or using AI systems on their behalf, taking account of their knowledge, experience, education and context of use.
- Risk
- medium
- Gör så här
- Take measures to ensure a sufficient level of AI literacy among staff and others operating or using AI systems on their behalf, taking account of their knowledge, experience, education and context of use.
- Frist
- Applies since 2 February 2025; amended wording applies from 27 July 2026. No dedicated fine in Article 99; enforcement follows national law.
- Myndighet
- Market surveillance authority
- Hash
- 3ce8399171b5306f4f069cf92ea62f12b98a14423c02e883122debe4a506df76
card:eu:article:ai-act--art-5
- Gäller
- operator: Do not place on the market, put into service or use AI systems for the prohibited practices in Article 5, including manipulative techniques, exploitation of vulnerabilities, social scoring, untargeted scraping of facial images, emotion recognition at work or in education, and biometric categorisation by sensitive traits.
- Risk
- critical
- Gör så här
- Do not place on the market, put into service or use AI systems for the prohibited practices in Article 5, including manipulative techniques, exploitation of vulnerabilities, social scoring, untargeted scraping of facial images, emotion recognition at work or in education, and biometric categorisation by sensitive traits.
- Frist
- Applies since 2 February 2025.
- Myndighet
- Market surveillance authority
- Hash
- fb94fc200d0d90ffcd0a4414058f75c2d23303b133931ef97fd29493950a3a99
card:eu:article:ai-act--art-9
- Gäller
- provider: Establish and maintain a risk management system.
- Risk
- high
- Gör så här
- Establish and maintain a risk management system.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 13a9d4ec647434a58d0b451ba170cedeff57f15d4c9aca499fbfe00887edf713
card:eu:article:ai-act--art-10
- Gäller
- provider: Apply data and data governance requirements to training, validation and testing data.
- Risk
- high
- Gör så här
- Apply data and data governance requirements to training, validation and testing data.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 5b58abfbd75faf15d7268de436d9f730bc38c5aacc5b02b82b2c11719b165972
card:eu:article:ai-act--art-11
- Gäller
- provider: Draw up and keep technical documentation.
- Risk
- high
- Gör så här
- Draw up and keep technical documentation.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- e28273bacaead4a5baf8593dcbb034b74dad0d1e0c938e50a9f28f90420e1513
card:eu:article:ai-act--art-12
- Gäller
- provider: Enable automatic recording of events (logging).
- Risk
- high
- Gör så här
- Enable automatic recording of events (logging).
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 37e39e0126ebe24c6d4b6ab315549037b48a218e7f9ac16a49474de274b3952f
card:eu:article:ai-act--art-13
- Gäller
- provider: Design high-risk AI systems to be sufficiently transparent and accompany them with instructions for use stating the provider's identity, the system's characteristics, capabilities, limitations and human oversight measures.
- Risk
- high
- Gör så här
- Design high-risk AI systems to be sufficiently transparent and accompany them with instructions for use stating the provider's identity, the system's characteristics, capabilities, limitations and human oversight measures.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 3ef85dfb6d5e74a3a9468ed5db6eef244d8bf80a815f170c23bdb9074178ceea
card:eu:article:ai-act--art-14
- Gäller
- provider: Design high-risk AI systems so that natural persons can effectively oversee them during use, including the ability to disregard, override or stop the system.
- Risk
- high
- Gör så här
- Design high-risk AI systems so that natural persons can effectively oversee them during use, including the ability to disregard, override or stop the system.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 6505c2d00d381afb9faa7f5602b5e85c087063626c8a5f906c48ad762143445e
card:eu:article:ai-act--art-15
- Gäller
- provider: Design high-risk AI systems to achieve an appropriate level of accuracy, robustness and cybersecurity throughout their lifecycle, and declare accuracy metrics in the instructions for use.
- Risk
- high
- Gör så här
- Design high-risk AI systems to achieve an appropriate level of accuracy, robustness and cybersecurity throughout their lifecycle, and declare accuracy metrics in the instructions for use.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 4b8fda805765f08b009f2691e3803354f1e089f7744b4e5212fe9f311eb8402b
card:eu:article:ai-act--art-16
- Gäller
- provider: Meet the provider obligations for high-risk AI systems.
- Risk
- high
- Gör så här
- Meet the provider obligations for high-risk AI systems.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- bf5591a36a5af76de186e32e21224bbca0a63c66236b1b2f91d82302055d6634
card:eu:article:ai-act--art-17
- Gäller
- provider: Operate a quality management system.
- Risk
- high
- Gör så här
- Operate a quality management system.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 6fa4bc992bc325feb55b768a58616cd4a9722fb47dd3c0526f86242af103f374
card:eu:article:ai-act--art-18
- Gäller
- provider: Keep the technical documentation, quality management system documentation, notified body decisions and EU declaration of conformity at the disposal of national competent authorities.
- Risk
- high
- Gör så här
- Keep the technical documentation, quality management system documentation, notified body decisions and EU declaration of conformity at the disposal of national competent authorities.
- Frist
- Ten years after the system has been placed on the market or put into service. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 2237177af3f0127073a03be8b769f3ab66440e728f1d5ab8421b8990d710b947
card:eu:article:ai-act--art-19
- Gäller
- provider: Keep the logs automatically generated by the high-risk AI system, to the extent they are under the provider's control.
- Risk
- high
- Gör så här
- Keep the logs automatically generated by the high-risk AI system, to the extent they are under the provider's control.
- Frist
- For a period appropriate to the intended purpose, of at least six months. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 68364afe767070a2ef3fb683c1a895438b180d2d86dcef9d9cd2d20f3de31285
card:eu:article:ai-act--art-20
- Gäller
- provider: Immediately take corrective action to bring a non-conforming high-risk AI system into conformity, withdraw, disable or recall it, and inform distributors, deployers and the authorities of a risk.
- Risk
- high
- Gör så här
- Immediately take corrective action to bring a non-conforming high-risk AI system into conformity, withdraw, disable or recall it, and inform distributors, deployers and the authorities of a risk.
- Frist
- Immediately on considering or having reason to consider non-conformity. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- ca9d6bb0e781695b741c7c193ff10fdf67e7da4abb3cd319eb45c6c24ff50dd5
card:eu:article:ai-act--art-23
- Gäller
- importer: Verify conformity, documentation and marking before placing on the market.
- Risk
- high
- Gör så här
- Verify conformity, documentation and marking before placing on the market.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 365cfd5a0f44d32cf379d6dfffc037aac0d39213e4bb98db25332b8c9c3f2b77
card:eu:article:ai-act--art-24
- Gäller
- distributor: Verify marking and documentation before making available on the market.
- Risk
- high
- Gör så här
- Verify marking and documentation before making available on the market.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 4b152a99806af066e0f1476e8b0d425be14b474fd58014a4f067458ebb56d89e
card:eu:article:ai-act--art-26
- Gäller
- deployer: Use the system in line with the instructions and assign human oversight.
- Risk
- high
- Gör så här
- Use the system in line with the instructions and assign human oversight.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 82586994a2fb87bae7060cd50f576de7f745d6e6ea2872597364eabdbedc8b77
card:eu:article:ai-act--art-26-6
- Gäller
- deployer: Keep the logs automatically generated by the high-risk AI system, to the extent under the deployer's control, and inform workers' representatives and affected workers before putting the system into service at the workplace.
- Risk
- high
- Gör så här
- Keep the logs automatically generated by the high-risk AI system, to the extent under the deployer's control, and inform workers' representatives and affected workers before putting the system into service at the workplace.
- Frist
- Logs for a period appropriate to the intended purpose, of at least six months. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- b8926af1af0be71e31a6b05338d36d004c984d49cc11e652551f97ee67edcbe4
card:eu:article:ai-act--art-27
- Gäller
- deployer: Carry out a fundamental rights impact assessment where required.
- Risk
- medium
- Gör så här
- Carry out a fundamental rights impact assessment where required.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 95447afed08a0b1174dd17689d55d7c76de6f694bd11926e5819670f5ebf9f49
card:eu:article:ai-act--art-43
- Gäller
- provider: Carry out the applicable conformity assessment before placing on the market.
- Risk
- high
- Gör så här
- Carry out the applicable conformity assessment before placing on the market.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 81bd93d9530fd4e45bd55a5a84dbd3e8eb30ebb36c4e3b8b22d5365fcdfea0b3
card:eu:article:ai-act--art-47
- Gäller
- provider: Draw up a written, machine-readable EU declaration of conformity for each high-risk AI system and keep it up to date.
- Risk
- high
- Gör så här
- Draw up a written, machine-readable EU declaration of conformity for each high-risk AI system and keep it up to date.
- Frist
- Keep for ten years after placing on the market or putting into service. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- e9be754cc4f9a89dd699076870295ccb064b22a7fe715a4c3899576c150569d4
card:eu:article:ai-act--art-48
- Gäller
- provider: Affix the CE marking visibly, legibly and indelibly to the high-risk AI system, or digitally for systems provided digitally.
- Risk
- high
- Gör så här
- Affix the CE marking visibly, legibly and indelibly to the high-risk AI system, or digitally for systems provided digitally.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- b0bd9c65f71217e622da6663a52ee118aa9f72b8c67d8abfabc4290fd6b9a295
card:eu:article:ai-act--art-49
- Gäller
- provider: Register the provider and the high-risk AI system listed in Annex III in the EU database before placing it on the market or putting it into service.
- Risk
- high
- Gör så här
- Register the provider and the high-risk AI system listed in Annex III in the EU database before placing it on the market or putting it into service.
- Frist
- Before placing on the market or putting into service. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 13e616239185c41fceda261d35b02a4ceb8bd5cf5e0f04e16293bf2431b7968f
card:eu:article:ai-act--art-50
- Gäller
- provider: Design AI systems that interact with natural persons so they are informed they are interacting with an AI system, and mark synthetic audio, image, video and text output in a machine-readable and detectable format. · deployer: Inform natural persons exposed to an emotion recognition or biometric categorisation system, and disclose that deep fake content or AI-generated text published to inform the public on matters of public interest has been artificially generated or manipulated.
- Risk
- high
- Gör så här
- Design AI systems that interact with natural persons so they are informed they are interacting with an AI system, and mark synthetic audio, image, video and text output in a machine-readable and detectable format. · Inform natural persons exposed to an emotion recognition or biometric categorisation system, and disclose that deep fake content or AI-generated text published to inform the public on matters of public interest has been artificially generated or manipulated.
- Frist
- Applies since 2 August 2026; providers of generative systems placed on the market before that date have until 2 December 2026 for the marking in Article 50(2).
- Myndighet
- Market surveillance authority
- Hash
- 0e83a7bce0f02998a8344616c52a8b35e33d035587c7c3d6298de50f279c0e08
card:eu:article:ai-act--art-53
- Gäller
- gpai-provider: Keep model documentation and a copyright policy for general-purpose AI models.
- Risk
- high
- Gör så här
- Keep model documentation and a copyright policy for general-purpose AI models.
- Frist
- Applies since 2 August 2025; models placed on the market before that date must comply by 2 August 2027. Commission fines apply from 2 August 2026.
- Myndighet
- European Commission (AI Office)
- Hash
- a5f186c62e77751e98669904ab2321e933ec93f3b60f0a771bf8909754f786cc
card:eu:article:ai-act--art-54
- Gäller
- gpai-provider: Appoint, by written mandate, an authorised representative established in the Union before placing a general-purpose AI model on the Union market when established outside the Union.
- Risk
- high
- Gör så här
- Appoint, by written mandate, an authorised representative established in the Union before placing a general-purpose AI model on the Union market when established outside the Union.
- Frist
- Applies since 2 August 2025; models placed on the market before that date must comply by 2 August 2027. Commission fines apply from 2 August 2026.
- Myndighet
- European Commission (AI Office)
- Hash
- b0f02b5c5c4a2f32e0e1486f4392997af3ef74d5b004d3b06827dd83afe78904
card:eu:article:ai-act--art-55
- Gäller
- gpai-provider: Meet the additional obligations for models with systemic risk.
- Risk
- high
- Gör så här
- Meet the additional obligations for models with systemic risk.
- Frist
- Applies since 2 August 2025 for models with systemic risk; notify the Commission within two weeks of meeting the threshold (Art. 52(1)). Models placed on the market before that date must comply by 2 August 2027.
- Myndighet
- European Commission (AI Office)
- Hash
- ed7773bf8f0b6ac8d63c69d06dc9f266373f348373b5d9d5d28e0839149c8c22
card:eu:article:ai-act--art-72
- Gäller
- provider: Run post-market monitoring of the system in use.
- Risk
- high
- Gör så här
- Run post-market monitoring of the system in use.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 3b7c8dfb93a332746c2c5904faa39d5b0819451bdfba9e56c187337d0b7f236f
card:eu:article:ai-act--art-73
- Gäller
- provider: Report serious incidents to the market surveillance authority.
- Risk
- high
- Gör så här
- Report serious incidents to the market surveillance authority.
- Frist
- Serious incident: not later than 15 days after awareness (Art. 73(2)); not later than 2 days for a widespread infringement or a serious and irreversible disruption of critical infrastructure (Art. 73(3), Art. 3(49)(b)); not later than 10 days in the event of the death of a person (Art. 73(4)).
- Myndighet
- Market surveillance authority
- Hash
- 5016a5f946d4aa74fb24e3acc00c40b82e383cad4458877aacd20f648dd531ad
card:eu:article:ai-act--art-86
- Gäller
- deployer: Provide affected persons, on request, with a clear and meaningful explanation of the role of the high-risk AI system in a decision that produces legal or similarly significant effects.
- Risk
- medium
- Gör så här
- Provide affected persons, on request, with a clear and meaningful explanation of the role of the high-risk AI system in a decision that produces legal or similarly significant effects.
- Frist
- Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).
- Myndighet
- Market surveillance authority
- Hash
- 16ca2505f6db443b698200c5a0c6cc093265f5c83a4c78409bf6611a9b9d894b
Source: NovaCopilot. Inte juridisk rådgivning.
