{ "attribution": { "source": "legal.exploreworldai.com", "canonical": "https://legal.exploreworldai.com/api/public/v1/duty-objects", "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/duty-objects)", "license": "https://legal.exploreworldai.com/revision", "version": "legal-2026-10-20", "fingerprint": "ewai:eu:226cfd", "proof": "sha256:d150233557ae085691f33e8860b835b236ebcaa051df72352cc312a8f4ef180f", "jurisdiction": "eu", "lang": "en", "publisher": "NovaCopilot by ExploreWorld Legal", "terms": "https://legal.exploreworldai.com/om" }, "brand_source": "Source: NovaCopilot", "status": "ok", "enterprise_question": "What applies to us and what must we do?", "domain": "ai-act", "label": "AI Act", "question": "What must we do as provider or deployer of AI?", "acts": [ "eu:ai-act" ], "count": 31, "with_deadline": 31, "with_risk": 29, "reviewed_actions": 15, "objects": [ { "id": "duty:eu:ai-act-art-16-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "16", "obligation": "Meet the provider obligations for high-risk AI systems.", "responsible_role": { "legal_role": "provider", "owner_function": "IT and security" }, "deadline": { "value": "Before placing on the market or putting into service.", "note": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 6.3", "condition": "An Annex III system that does not pose a significant risk of harm, e.g. performs a narrow procedural task, and does not profile natural persons. The provider must document the assessment (art. 6.4).", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 16" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-16-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated record or log entry" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Ensure the system meets the requirements in Articles 8 to 15 (risk management, data, documentation, logging, transparency, human oversight, accuracy and cybersecurity).", "Indicate name, registered trade name or trade mark and contact address on the system, its packaging or documentation.", "Operate a quality management system (Art. 17) and keep documentation for 10 years (Art. 18) and logs under your control for at least six months (Art. 19).", "Complete the conformity assessment (Art. 43), draw up the EU declaration of conformity (Art. 47), affix the CE marking (Art. 48) and register the system (Art. 49) before placing it on the market.", "Take corrective action and inform authorities when the system is not in conformity (Art. 20)." ], "status": "reviewed_action_kit" }, "hash": "sha256:fffbfa77b40ee69a6a9a0e5ec40d524eed51c2e25795cb583eabd8ba9ae47117", "what_to_do": { "timing": { "kind": "deadline", "text": "Before placing on the market or putting into service." }, "steps": [ "Ensure the system meets the requirements in Articles 8 to 15 (risk management, data, documentation, logging, transparency, human oversight, accuracy and cybersecurity).", "Indicate name, registered trade name or trade mark and contact address on the system, its packaging or documentation.", "Operate a quality management system (Art. 17) and keep documentation for 10 years (Art. 18) and logs under your control for at least six months (Art. 19).", "Complete the conformity assessment (Art. 43), draw up the EU declaration of conformity (Art. 47), affix the CE marking (Art. 48) and register the system (Art. 49) before placing it on the market.", "Take corrective action and inform authorities when the system is not in conformity (Art. 20)." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-16-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-9-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "9", "obligation": "Establish and maintain a risk management system.", "responsible_role": { "legal_role": "provider", "owner_function": "Legal and compliance" }, "deadline": { "value": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 6.3", "condition": "An Annex III system that does not pose a significant risk of harm, e.g. performs a narrow procedural task, and does not profile natural persons. The provider must document the assessment (art. 6.4).", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4-a", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 9" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-9-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated internal record of the action" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Identify and analyse known and reasonably foreseeable risks to health, safety and fundamental rights, including under reasonably foreseeable misuse.", "Adopt targeted risk management measures so that residual risk is acceptable.", "Test the system against predefined metrics before placing on the market.", "Run the process continuously over the whole lifecycle and consider impacts on persons under 18 and other vulnerable groups." ], "status": "reviewed_action_kit" }, "hash": "sha256:6b0d49827d05ce5f102d74ce8bb8bb65e7bae17db546fda56d5a208ecb3ceab6", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Identify and analyse known and reasonably foreseeable risks to health, safety and fundamental rights, including under reasonably foreseeable misuse.", "Adopt targeted risk management measures so that residual risk is acceptable.", "Test the system against predefined metrics before placing on the market.", "Run the process continuously over the whole lifecycle and consider impacts on persons under 18 and other vulnerable groups." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-9-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-10-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "10", "obligation": "Apply data and data governance requirements to training, validation and testing data.", "responsible_role": { "legal_role": "provider", "owner_function": "Board and management" }, "deadline": { "value": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 6.3", "condition": "An Annex III system that does not pose a significant risk of harm, e.g. performs a narrow procedural task, and does not profile natural persons. The provider must document the assessment (art. 6.4).", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4-a", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 10" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-10-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated internal record of the action" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Document data governance: design choices, data collection and origin, preparation and assumptions.", "Check that training, validation and testing data are relevant, sufficiently representative and, to the best extent possible, free of errors and complete.", "Examine and mitigate possible biases.", "Process special categories of personal data for bias correction only under the conditions in Art. 10(5)." ], "status": "reviewed_action_kit" }, "hash": "sha256:df3d4ef26fdf6ca97f54ce6d75f7c0521ff9a9ef47c79a8223ce37070461c86e", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Document data governance: design choices, data collection and origin, preparation and assumptions.", "Check that training, validation and testing data are relevant, sufficiently representative and, to the best extent possible, free of errors and complete.", "Examine and mitigate possible biases.", "Process special categories of personal data for bias correction only under the conditions in Art. 10(5)." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-10-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-11-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "11", "obligation": "Draw up and keep technical documentation.", "responsible_role": { "legal_role": "provider", "owner_function": "Legal and compliance" }, "deadline": { "value": "Before placing on the market; kept for 10 years after placing on the market (Art. 18).", "note": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 6.3", "condition": "An Annex III system that does not pose a significant risk of harm, e.g. performs a narrow procedural task, and does not profile natural persons. The provider must document the assessment (art. 6.4).", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4-a", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 11" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-11-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Technical documentation file" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Draw up technical documentation with the content in Annex IV before placing on the market.", "Keep it up to date for the whole lifecycle.", "SMEs, including start-ups, may use the simplified form published by the Commission." ], "status": "reviewed_action_kit" }, "hash": "sha256:0cf00f30af5ecaa72fcc7584aca71f7b7fd99c63f87b5ab429b0c2e30b69d7bb", "what_to_do": { "timing": { "kind": "deadline", "text": "Before placing on the market; kept for 10 years after placing on the market (Art. 18)." }, "steps": [ "Draw up technical documentation with the content in Annex IV before placing on the market.", "Keep it up to date for the whole lifecycle.", "SMEs, including start-ups, may use the simplified form published by the Commission." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-11-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-12-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "12", "obligation": "Enable automatic recording of events (logging).", "responsible_role": { "legal_role": "provider", "owner_function": "IT and security" }, "deadline": { "value": "Logs under the provider's control kept for at least six months (Art. 19).", "note": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 6.3", "condition": "An Annex III system that does not pose a significant risk of harm, e.g. performs a narrow procedural task, and does not profile natural persons. The provider must document the assessment (art. 6.4).", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4-a", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 12" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-12-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated record or log entry" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Design the system so that events are recorded automatically over its lifetime.", "Log what is needed to identify risk situations, support post-market monitoring and monitor operation by deployers.", "For remote biometric identification systems, log at least the items in Art. 12(3)." ], "status": "reviewed_action_kit" }, "hash": "sha256:843660abb0fe1f556650c3537243a0fc74228b2a4afd065221622b2e8e6c6468", "what_to_do": { "timing": { "kind": "deadline", "text": "Logs under the provider's control kept for at least six months (Art. 19)." }, "steps": [ "Design the system so that events are recorded automatically over its lifetime.", "Log what is needed to identify risk situations, support post-market monitoring and monitor operation by deployers.", "For remote biometric identification systems, log at least the items in Art. 12(3)." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-12-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-17-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "17", "obligation": "Operate a quality management system.", "responsible_role": { "legal_role": "provider", "owner_function": "IT and security" }, "deadline": { "value": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 6.3", "condition": "An Annex III system that does not pose a significant risk of harm, e.g. performs a narrow procedural task, and does not profile natural persons. The provider must document the assessment (art. 6.4).", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4-a", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 17" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-17-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Copy of notification with timestamp" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Document the quality management system in written policies, procedures and instructions.", "Cover at least the aspects in Art. 17(1), including compliance strategy, design control, testing, data management, risk management, post-market monitoring, incident reporting and accountability.", "Scale the system to the size of the organisation." ], "status": "reviewed_action_kit" }, "hash": "sha256:46a7c5b8b71da5f036713a66906d61fa545ef287013909ef105e988505f14cd4", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Document the quality management system in written policies, procedures and instructions.", "Cover at least the aspects in Art. 17(1), including compliance strategy, design control, testing, data management, risk management, post-market monitoring, incident reporting and accountability.", "Scale the system to the size of the organisation." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-17-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-43-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "43", "obligation": "Carry out the applicable conformity assessment before placing on the market.", "responsible_role": { "legal_role": "provider", "owner_function": "Legal and compliance" }, "deadline": { "value": "Before placing on the market or putting into service.", "note": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 6.3", "condition": "An Annex III system that does not pose a significant risk of harm, e.g. performs a narrow procedural task, and does not profile natural persons. The provider must document the assessment (art. 6.4).", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4-a", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 43" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-43-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Copy of notification with timestamp" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "For Annex III point 1 (biometrics): use internal control (Annex VI) only where harmonised standards or common specifications are applied in full; otherwise involve a notified body (Annex VII).", "For Annex III points 2 to 8: apply internal control under Annex VI.", "For Annex I products: follow the conformity assessment in the relevant sector legislation.", "Carry out a new assessment after any substantial modification." ], "status": "reviewed_action_kit" }, "hash": "sha256:87b19577d2244b9467a1c10e2f89fdf557137af3b1658feed95668e6582c5257", "what_to_do": { "timing": { "kind": "deadline", "text": "Before placing on the market or putting into service." }, "steps": [ "For Annex III point 1 (biometrics): use internal control (Annex VI) only where harmonised standards or common specifications are applied in full; otherwise involve a notified body (Annex VII).", "For Annex III points 2 to 8: apply internal control under Annex VI.", "For Annex I products: follow the conformity assessment in the relevant sector legislation.", "Carry out a new assessment after any substantial modification." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-43-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-72-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "72", "obligation": "Run post-market monitoring of the system in use.", "responsible_role": { "legal_role": "provider", "owner_function": "Legal and compliance" }, "deadline": { "value": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 6.3", "condition": "An Annex III system that does not pose a significant risk of harm, e.g. performs a narrow procedural task, and does not profile natural persons. The provider must document the assessment (art. 6.4).", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4-a", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 72" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-72-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Technical documentation file" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Establish a post-market monitoring plan as part of the technical documentation.", "Actively collect and analyse data on performance throughout the lifetime of the system.", "Evaluate continuous compliance with the requirements in Chapter III, Section 2." ], "status": "reviewed_action_kit" }, "hash": "sha256:0afeb6ca626e2677bd8d800852b5dd55e5a04b71762de10029833c151fa4a0c2", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Establish a post-market monitoring plan as part of the technical documentation.", "Actively collect and analyse data on performance throughout the lifetime of the system.", "Evaluate continuous compliance with the requirements in Chapter III, Section 2." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-72-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-73-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "73", "obligation": "Report serious incidents to the market surveillance authority.", "responsible_role": { "legal_role": "provider", "owner_function": "IT and security" }, "deadline": { "value": "15 days", "note": "Serious incident: not later than 15 days after awareness (Art. 73(2)); not later than 2 days for a widespread infringement or a serious and irreversible disruption of critical infrastructure (Art. 73(3), Art. 3(49)(b)); not later than 10 days in the event of the death of a person (Art. 73(4)).", "recipient": "Market surveillance authority of the member state", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 6.3", "condition": "An Annex III system that does not pose a significant risk of harm, e.g. performs a narrow procedural task, and does not profile natural persons. The provider must document the assessment (art. 6.4).", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4-a", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 73" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-73-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Copy of notification with timestamp" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Report the serious incident to the market surveillance authority of the Member State where it occurred.", "Investigate without delay, including a risk assessment and corrective action.", "Do not alter the system in a way that may affect the evaluation of the causes before informing the authorities.", "Submit an initial incomplete report where needed and complete it later." ], "status": "reviewed_action_kit" }, "hash": "sha256:8acb3f74cacef2e87610578f1871157607981f30b8cfeedbc398cbab331c9cac", "what_to_do": { "timing": { "kind": "deadline", "text": "15 days" }, "steps": [ "Report the serious incident to the market surveillance authority of the Member State where it occurred.", "Investigate without delay, including a risk assessment and corrective action.", "Do not alter the system in a way that may affect the evaluation of the causes before informing the authorities.", "Submit an initial incomplete report where needed and complete it later." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-73-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-26-deployer", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "26", "obligation": "Use the system in line with the instructions and assign human oversight.", "responsible_role": { "legal_role": "deployer", "owner_function": "IT and security" }, "deadline": { "value": "Logs kept for at least six months.", "note": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 26" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-26-deployer", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated record or log entry" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Use the system in accordance with the provider's instructions for use.", "Assign human oversight to persons with the necessary competence, training and authority.", "Ensure input data under your control are relevant and sufficiently representative.", "Monitor operation, inform the provider and authorities of risks or serious incidents, and suspend use where needed.", "Keep automatically generated logs for at least six months and inform workers' representatives and affected workers before use at the workplace." ], "status": "reviewed_action_kit" }, "hash": "sha256:2d3ded0c5a165dd8c3e91dde9308558acae88802c72c18ae71e5c4c42185ea5c", "what_to_do": { "timing": { "kind": "deadline", "text": "Logs kept for at least six months." }, "steps": [ "Use the system in accordance with the provider's instructions for use.", "Assign human oversight to persons with the necessary competence, training and authority.", "Ensure input data under your control are relevant and sufficiently representative.", "Monitor operation, inform the provider and authorities of risks or serious incidents, and suspend use where needed.", "Keep automatically generated logs for at least six months and inform workers' representatives and affected workers before use at the workplace." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-26-deployer" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-27-deployer", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "27", "obligation": "Carry out a fundamental rights impact assessment where required.", "responsible_role": { "legal_role": "deployer", "owner_function": "Legal and compliance" }, "deadline": { "value": "Before the system is first put into use.", "note": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "low", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": null, "max_turnover_pct": null, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-1", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 27" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-27-deployer", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Signed impact assessment" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Check whether you are covered: bodies governed by public law, private entities providing public services, and deployers of systems for creditworthiness or life and health insurance pricing (Annex III 5(b) and (c)).", "Assess the impact on fundamental rights before first use, covering the items in Art. 27(1).", "Notify the market surveillance authority of the results using the template.", "Update the assessment when relevant factors change." ], "status": "reviewed_action_kit" }, "hash": "sha256:c2664f4078a159dea726c174102cc9e2284106a92692842f2b56cacabdc0184f", "what_to_do": { "timing": { "kind": "deadline", "text": "Before the system is first put into use." }, "steps": [ "Check whether you are covered: bodies governed by public law, private entities providing public services, and deployers of systems for creditworthiness or life and health insurance pricing (Annex III 5(b) and (c)).", "Assess the impact on fundamental rights before first use, covering the items in Art. 27(1).", "Notify the market surveillance authority of the results using the template.", "Update the assessment when relevant factors change." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-27-deployer" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-23-importer", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "23", "obligation": "Verify conformity, documentation and marking before placing on the market.", "responsible_role": { "legal_role": "importer", "owner_function": "Legal and compliance" }, "deadline": { "value": "Before placing on the market; records kept for 10 years.", "note": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 23" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-23-importer", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Technical documentation file" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Verify that the conformity assessment has been carried out, technical documentation exists, CE marking and EU declaration of conformity are present and an authorised representative is appointed.", "Do not place the system on the market if you have reason to believe it is not in conformity.", "Indicate your name and contact address on the system, packaging or documentation.", "Keep a copy of the certificate, instructions for use and EU declaration of conformity for 10 years." ], "status": "reviewed_action_kit" }, "hash": "sha256:00aa19d2a7a3170e9caae059f0c62e1071402cf0de958e331d9add0841c4e954", "what_to_do": { "timing": { "kind": "deadline", "text": "Before placing on the market; records kept for 10 years." }, "steps": [ "Verify that the conformity assessment has been carried out, technical documentation exists, CE marking and EU declaration of conformity are present and an authorised representative is appointed.", "Do not place the system on the market if you have reason to believe it is not in conformity.", "Indicate your name and contact address on the system, packaging or documentation.", "Keep a copy of the certificate, instructions for use and EU declaration of conformity for 10 years." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-23-importer" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-24-distributor", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "24", "obligation": "Verify marking and documentation before making available on the market.", "responsible_role": { "legal_role": "distributor", "owner_function": "Legal and compliance" }, "deadline": { "value": "Before making available on the market.", "note": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "recipient": "internal", "applies_from": "2027-12-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 24" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-24-distributor", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Published notice or disclosure" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Verify CE marking, EU declaration of conformity and instructions for use.", "Verify that provider and importer have met their obligations.", "Do not make the system available if you consider it not in conformity, and inform provider or importer.", "Ensure storage and transport do not jeopardise compliance." ], "status": "reviewed_action_kit" }, "hash": "sha256:4ed42b5e1d44d7409670216891255e7e64a33a041feeea3c00e614751e2490d4", "what_to_do": { "timing": { "kind": "deadline", "text": "Before making available on the market." }, "steps": [ "Verify CE marking, EU declaration of conformity and instructions for use.", "Verify that provider and importer have met their obligations.", "Do not make the system available if you consider it not in conformity, and inform provider or importer.", "Ensure storage and transport do not jeopardise compliance." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-24-distributor" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-53-gpai-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "53", "obligation": "Keep model documentation and a copyright policy for general-purpose AI models.", "responsible_role": { "legal_role": "gpai-provider", "owner_function": "Product" }, "deadline": { "value": "Models placed on the market before 2 August 2025 must comply by 2 August 2027 (Art. 111(3)).", "note": "Applies since 2 August 2025; models placed on the market before that date must comply by 2 August 2027. Commission fines apply from 2 August 2026.", "recipient": "internal", "applies_from": "2025-08-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-101", "authority": "European Commission (AI Office)" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 53" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-53-gpai-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Technical documentation file" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Draw up and keep up to date technical documentation of the model (Annex XI) for the AI Office and authorities.", "Provide information and documentation to downstream providers (Annex XII).", "Put in place a policy to comply with EU copyright law, including text and data mining opt-outs.", "Publish a sufficiently detailed summary of the training content using the AI Office template." ], "status": "reviewed_action_kit" }, "hash": "sha256:ff529d431308b133f3f81a16afe9d49f630ae7b7cd3f189a21e6016620e8cd94", "what_to_do": { "timing": { "kind": "deadline", "text": "Models placed on the market before 2 August 2025 must comply by 2 August 2027 (Art. 111(3))." }, "steps": [ "Draw up and keep up to date technical documentation of the model (Annex XI) for the AI Office and authorities.", "Provide information and documentation to downstream providers (Annex XII).", "Put in place a policy to comply with EU copyright law, including text and data mining opt-outs.", "Publish a sufficiently detailed summary of the training content using the AI Office template." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-53-gpai-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-55-gpai-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "55", "obligation": "Meet the additional obligations for models with systemic risk.", "responsible_role": { "legal_role": "gpai-provider", "owner_function": "IT and security" }, "deadline": { "value": "Serious incidents reported without undue delay.", "note": "Applies since 2 August 2025 for models with systemic risk; notify the Commission within two weeks of meeting the threshold (Art. 52(1)). Models placed on the market before that date must comply by 2 August 2027.", "recipient": "European Commission (AI Office)", "applies_from": "2025-08-02" }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-101", "authority": "European Commission (AI Office)" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 55" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-55-gpai-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Copy of notification with timestamp" } ], "source": { "title": "AI Act: Regulation (EU) 2024/1689", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Perform model evaluation with state-of-the-art protocols, including adversarial testing.", "Assess and mitigate possible systemic risks at Union level.", "Track, document and report serious incidents and corrective measures to the AI Office without undue delay.", "Ensure adequate cybersecurity protection for the model and its physical infrastructure." ], "status": "reviewed_action_kit" }, "hash": "sha256:63f44ca9d232cbbc38cd1f3d01df992eafaae6b069ce3df6c9d3c35eb9517268", "what_to_do": { "timing": { "kind": "deadline", "text": "Serious incidents reported without undue delay." }, "steps": [ "Perform model evaluation with state-of-the-art protocols, including adversarial testing.", "Assess and mitigate possible systemic risks at Union level.", "Track, document and report serious incidents and corrective measures to the AI Office without undue delay.", "Ensure adequate cybersecurity protection for the model and its physical infrastructure." ], "steps_status": "reviewed_action_kit", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-55-gpai-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-5-operator", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "5", "obligation": "Do not place on the market, put into service or use AI systems for the prohibited practices in Article 5, including manipulative techniques, exploitation of vulnerabilities, social scoring, untargeted scraping of facial images, emotion recognition at work or in education, and biometric categorisation by sensitive traits.", "responsible_role": { "legal_role": "operator", "owner_function": "Product" }, "deadline": { "value": "Applies since 2 February 2025.", "note": null, "recipient": "internal", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 35 000 000", "max_turnover_pct": 7, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-3", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 5" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-5-operator", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated internal record of the action" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Do not place on the market, put into service or use AI systems for the prohibited practices in Article 5, including manipulative techniques, exploitation of vulnerabilities, social scoring, untargeted scraping of facial images, emotion recognition at work or in education, and biometric categorisation by sensitive traits." ], "status": "derived_from_duty" }, "hash": "sha256:bcc16ff7ec77497b432ac8c63c5572b499d244e581d7e9cee5447790e50dc21a", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies since 2 February 2025." }, "steps": [ "Assign responsibility: operator (Product).", "Carry out the duty: Do not place on the market, put into service or use AI systems for the prohibited practices in Article 5, including manipulative techniques, exploitation of vulnerabilities, social scoring, untargeted scraping of facial images, emotion recognition at work or in education, and biometric categorisation by sensitive traits.", "Document: Dated internal record of the action.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 5 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-5-operator" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-4-provider-or-deployer", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "4", "obligation": "Take measures to ensure a sufficient level of AI literacy among staff and others operating or using AI systems on their behalf, taking account of their knowledge, experience, education and context of use.", "responsible_role": { "legal_role": "provider-or-deployer", "owner_function": "HR" }, "deadline": { "value": "Applies since 2 February 2025; amended wording applies from 27 July 2026. No dedicated fine in Article 99; enforcement follows national law.", "note": null, "recipient": "internal", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "not_in_register", "basis": "No sanction linked in the register", "max_amount": null, "max_turnover_pct": null, "sanctions": [] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 4" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-4-provider-or-deployer", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated internal record of the action" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Take measures to ensure a sufficient level of AI literacy among staff and others operating or using AI systems on their behalf, taking account of their knowledge, experience, education and context of use." ], "status": "derived_from_duty" }, "hash": "sha256:9dbf286c46c344ee1c63f4ebad5afe5afd34d394ea14dccd5c24a9ae67c38f61", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies since 2 February 2025; amended wording applies from 27 July 2026. No dedicated fine in Article 99; enforcement follows national law." }, "steps": [ "Assign responsibility: provider-or-deployer (HR).", "Carry out the duty: Take measures to ensure a sufficient level of AI literacy among staff and others operating or using AI systems on their behalf, taking account of their knowledge, experience, education and context of use.", "Document: Dated internal record of the action.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 4 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "sanction", "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-4-provider-or-deployer" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-50-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "50", "obligation": "Design AI systems that interact with natural persons so they are informed they are interacting with an AI system, and mark synthetic audio, image, video and text output in a machine-readable and detectable format.", "responsible_role": { "legal_role": "provider", "owner_function": "Product" }, "deadline": { "value": "Applies since 2 August 2026; providers of generative systems placed on the market before that date have until 2 December 2026 for the marking in Article 50(2).", "note": null, "recipient": "Natural persons exposed to the system", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 50" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-50-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Published notice or disclosure" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Design AI systems that interact with natural persons so they are informed they are interacting with an AI system, and mark synthetic audio, image, video and text output in a machine-readable and detectable format." ], "status": "derived_from_duty" }, "hash": "sha256:628fd8135f9fd855f1625535689a236c674b5d4df52f037d3f6d210013f070fb", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies since 2 August 2026; providers of generative systems placed on the market before that date have until 2 December 2026 for the marking in Article 50(2)." }, "steps": [ "Assign responsibility: provider (Product).", "Carry out the duty: Design AI systems that interact with natural persons so they are informed they are interacting with an AI system, and mark synthetic audio, image, video and text output in a machine-readable and detectable format.", "Document: Published notice or disclosure.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 50 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-50-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-50-deployer", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "50", "obligation": "Inform natural persons exposed to an emotion recognition or biometric categorisation system, and disclose that deep fake content or AI-generated text published to inform the public on matters of public interest has been artificially generated or manipulated.", "responsible_role": { "legal_role": "deployer", "owner_function": "Legal and compliance" }, "deadline": { "value": "Applies since 2 August 2026, at the latest at the time of the first interaction or exposure.", "note": null, "recipient": "Natural persons exposed to the content or system", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 50" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-50-deployer", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Published notice or disclosure" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Inform natural persons exposed to an emotion recognition or biometric categorisation system, and disclose that deep fake content or AI-generated text published to inform the public on matters of public interest has been artificially generated or manipulated." ], "status": "derived_from_duty" }, "hash": "sha256:bf16070cd731cb84e332cbfb9d4f86178618aa766a755d440e71393564c2c09f", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies since 2 August 2026, at the latest at the time of the first interaction or exposure." }, "steps": [ "Assign responsibility: deployer (Legal and compliance).", "Carry out the duty: Inform natural persons exposed to an emotion recognition or biometric categorisation system, and disclose that deep fake content or AI-generated text published to inform the public on matters of public interest has been artificially generated or manipulated.", "Document: Published notice or disclosure.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 50 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-50-deployer" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-54-gpai-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "54", "obligation": "Appoint, by written mandate, an authorised representative established in the Union before placing a general-purpose AI model on the Union market when established outside the Union.", "responsible_role": { "legal_role": "gpai-provider", "owner_function": "Product" }, "deadline": { "value": "Applies since 2 August 2025; models placed on the market before that date must comply by 2 August 2027. Commission fines apply from 2 August 2026.", "note": null, "recipient": "internal", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-101", "authority": "European Commission (AI Office)" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 54" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-54-gpai-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated internal record of the action" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Appoint, by written mandate, an authorised representative established in the Union before placing a general-purpose AI model on the Union market when established outside the Union." ], "status": "derived_from_duty" }, "hash": "sha256:5168f03e66df7fc5e8f0b2eac30a0f2a085e1c2efedab0e38c2b38299f7c858e", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies since 2 August 2025; models placed on the market before that date must comply by 2 August 2027. Commission fines apply from 2 August 2026." }, "steps": [ "Assign responsibility: gpai-provider (Product).", "Carry out the duty: Appoint, by written mandate, an authorised representative established in the Union before placing a general-purpose AI model on the Union market when established outside the Union.", "Document: Dated internal record of the action.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 54 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-54-gpai-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-13-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "13", "obligation": "Design high-risk AI systems to be sufficiently transparent and accompany them with instructions for use stating the provider's identity, the system's characteristics, capabilities, limitations and human oversight measures.", "responsible_role": { "legal_role": "provider", "owner_function": "Product" }, "deadline": { "value": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "Deployers", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 13" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-13-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Published notice or disclosure" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Design high-risk AI systems to be sufficiently transparent and accompany them with instructions for use stating the provider's identity, the system's characteristics, capabilities, limitations and human oversight measures." ], "status": "derived_from_duty" }, "hash": "sha256:f22aae5996d7aadaa03054b2d8c0448e5f1f633a7b83839c78864a78a7081a69", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: provider (Product).", "Carry out the duty: Design high-risk AI systems to be sufficiently transparent and accompany them with instructions for use stating the provider's identity, the system's characteristics, capabilities, limitations and human oversight measures.", "Document: Published notice or disclosure.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 13 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-13-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-14-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "14", "obligation": "Design high-risk AI systems so that natural persons can effectively oversee them during use, including the ability to disregard, override or stop the system.", "responsible_role": { "legal_role": "provider", "owner_function": "Product" }, "deadline": { "value": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 14" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-14-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated internal record of the action" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Design high-risk AI systems so that natural persons can effectively oversee them during use, including the ability to disregard, override or stop the system." ], "status": "derived_from_duty" }, "hash": "sha256:8e943daeba01e16afdfb21d5c36de229bd87232edd06f15becc681221f4b7e77", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: provider (Product).", "Carry out the duty: Design high-risk AI systems so that natural persons can effectively oversee them during use, including the ability to disregard, override or stop the system.", "Document: Dated internal record of the action.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 14 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-14-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-15-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "15", "obligation": "Design high-risk AI systems to achieve an appropriate level of accuracy, robustness and cybersecurity throughout their lifecycle, and declare accuracy metrics in the instructions for use.", "responsible_role": { "legal_role": "provider", "owner_function": "IT and security" }, "deadline": { "value": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 15" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-15-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated internal record of the action" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Design high-risk AI systems to achieve an appropriate level of accuracy, robustness and cybersecurity throughout their lifecycle, and declare accuracy metrics in the instructions for use." ], "status": "derived_from_duty" }, "hash": "sha256:d64c886bd30d191693b99764017e641120b7d0616e7523d590bda9a4e211b5ab", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: provider (IT and security).", "Carry out the duty: Design high-risk AI systems to achieve an appropriate level of accuracy, robustness and cybersecurity throughout their lifecycle, and declare accuracy metrics in the instructions for use.", "Document: Dated internal record of the action.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 15 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-15-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-18-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "18", "obligation": "Keep the technical documentation, quality management system documentation, notified body decisions and EU declaration of conformity at the disposal of national competent authorities.", "responsible_role": { "legal_role": "provider", "owner_function": "Legal and compliance" }, "deadline": { "value": "Ten years after the system has been placed on the market or put into service. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "National competent authorities", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 18" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-18-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Technical documentation file" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Keep the technical documentation, quality management system documentation, notified body decisions and EU declaration of conformity at the disposal of national competent authorities." ], "status": "derived_from_duty" }, "hash": "sha256:09a6303de7e77124b4cd541379820e25192de48c63dbfe969302cd52b3a497ef", "what_to_do": { "timing": { "kind": "deadline", "text": "Ten years after the system has been placed on the market or put into service. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: provider (Legal and compliance).", "Carry out the duty: Keep the technical documentation, quality management system documentation, notified body decisions and EU declaration of conformity at the disposal of national competent authorities.", "Document: Technical documentation file.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 18 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-18-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-19-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "19", "obligation": "Keep the logs automatically generated by the high-risk AI system, to the extent they are under the provider's control.", "responsible_role": { "legal_role": "provider", "owner_function": "IT and security" }, "deadline": { "value": "For a period appropriate to the intended purpose, of at least six months. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 19" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-19-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated record or log entry" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Keep the logs automatically generated by the high-risk AI system, to the extent they are under the provider's control." ], "status": "derived_from_duty" }, "hash": "sha256:bc3ef4e4e4f2ee7a37625d38f5dda1cde98f33822175130a9ab0e1533ddf9278", "what_to_do": { "timing": { "kind": "deadline", "text": "For a period appropriate to the intended purpose, of at least six months. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: provider (IT and security).", "Carry out the duty: Keep the logs automatically generated by the high-risk AI system, to the extent they are under the provider's control.", "Document: Dated record or log entry.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 19 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-19-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-20-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "20", "obligation": "Immediately take corrective action to bring a non-conforming high-risk AI system into conformity, withdraw, disable or recall it, and inform distributors, deployers and the authorities of a risk.", "responsible_role": { "legal_role": "provider", "owner_function": "Product" }, "deadline": { "value": "Immediately on considering or having reason to consider non-conformity. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "Distributors, deployers, authorised representative, importers and market surveillance authority", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 20" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-20-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Published notice or disclosure" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Immediately take corrective action to bring a non-conforming high-risk AI system into conformity, withdraw, disable or recall it, and inform distributors, deployers and the authorities of a risk." ], "status": "derived_from_duty" }, "hash": "sha256:6e061ea31c548edcc4180cb1b7815f50fc55c274f1bf8a2f8251bc8bed9f367b", "what_to_do": { "timing": { "kind": "deadline", "text": "Immediately on considering or having reason to consider non-conformity. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: provider (Product).", "Carry out the duty: Immediately take corrective action to bring a non-conforming high-risk AI system into conformity, withdraw, disable or recall it, and inform distributors, deployers and the authorities of a risk.", "Document: Published notice or disclosure.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 20 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-20-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-47-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "47", "obligation": "Draw up a written, machine-readable EU declaration of conformity for each high-risk AI system and keep it up to date.", "responsible_role": { "legal_role": "provider", "owner_function": "Product" }, "deadline": { "value": "Keep for ten years after placing on the market or putting into service. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 47" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-47-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated internal record of the action" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Draw up a written, machine-readable EU declaration of conformity for each high-risk AI system and keep it up to date." ], "status": "derived_from_duty" }, "hash": "sha256:92e10e1207b413ad5b1061a37075575908b635491fd4882c6db9d9b7b92cec91", "what_to_do": { "timing": { "kind": "deadline", "text": "Keep for ten years after placing on the market or putting into service. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: provider (Product).", "Carry out the duty: Draw up a written, machine-readable EU declaration of conformity for each high-risk AI system and keep it up to date.", "Document: Dated internal record of the action.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 47 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-47-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-48-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "48", "obligation": "Affix the CE marking visibly, legibly and indelibly to the high-risk AI system, or digitally for systems provided digitally.", "responsible_role": { "legal_role": "provider", "owner_function": "Product" }, "deadline": { "value": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 48" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-48-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated internal record of the action" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Affix the CE marking visibly, legibly and indelibly to the high-risk AI system, or digitally for systems provided digitally." ], "status": "derived_from_duty" }, "hash": "sha256:473d5e73a22c798b8ce9cdc5cdfd5dfde3830a49c948df3c20367b75b0f63ebc", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: provider (Product).", "Carry out the duty: Affix the CE marking visibly, legibly and indelibly to the high-risk AI system, or digitally for systems provided digitally.", "Document: Dated internal record of the action.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 48 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-48-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-49-provider", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "49", "obligation": "Register the provider and the high-risk AI system listed in Annex III in the EU database before placing it on the market or putting it into service.", "responsible_role": { "legal_role": "provider", "owner_function": "Product" }, "deadline": { "value": "Before placing on the market or putting into service. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "EU database (European Commission)", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 49" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-49-provider", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated record or log entry" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Register the provider and the high-risk AI system listed in Annex III in the EU database before placing it on the market or putting it into service." ], "status": "derived_from_duty" }, "hash": "sha256:0e5f573c66d3ad452c03bc7d16cc15a45f292d330944d0e30244424474054f27", "what_to_do": { "timing": { "kind": "deadline", "text": "Before placing on the market or putting into service. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: provider (Product).", "Carry out the duty: Register the provider and the high-risk AI system listed in Annex III in the EU database before placing it on the market or putting it into service.", "Document: Dated record or log entry.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 49 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-49-provider" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-26-6-deployer", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "26(6)", "obligation": "Keep the logs automatically generated by the high-risk AI system, to the extent under the deployer's control, and inform workers' representatives and affected workers before putting the system into service at the workplace.", "responsible_role": { "legal_role": "deployer", "owner_function": "IT and security" }, "deadline": { "value": "Logs for a period appropriate to the intended purpose, of at least six months. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "internal", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "high", "basis": "Fixed rule: turnover-based fine of at least 2 % = high, other fine = medium, other sanction = low", "max_amount": "EUR 15 000 000", "max_turnover_pct": 3, "sanctions": [ { "id": "sanction:eu:ai-act-art-99-4", "authority": "Market surveillance authority" } ] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 26(6)" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-26-6-deployer", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Dated record or log entry" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Keep the logs automatically generated by the high-risk AI system, to the extent under the deployer's control, and inform workers' representatives and affected workers before putting the system into service at the workplace." ], "status": "derived_from_duty" }, "hash": "sha256:addce4ddbe849bfc8911745d162f92187452f0616d0a0112e680fec15e395d65", "what_to_do": { "timing": { "kind": "deadline", "text": "Logs for a period appropriate to the intended purpose, of at least six months. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: deployer (IT and security).", "Carry out the duty: Keep the logs automatically generated by the high-risk AI system, to the extent under the deployer's control, and inform workers' representatives and affected workers before putting the system into service at the workplace.", "Document: Dated record or log entry.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 26(6) before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-26-6-deployer" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" }, { "id": "duty:eu:ai-act-art-86-deployer", "schema_version": 1, "domain": "ai-act", "jurisdiction": "eu", "act": "ai-act", "provision": "86", "obligation": "Provide affected persons, on request, with a clear and meaningful explanation of the role of the high-risk AI system in a decision that produces legal or similarly significant effects.", "responsible_role": { "legal_role": "deployer", "owner_function": "Product" }, "deadline": { "value": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).", "note": null, "recipient": "Affected person", "applies_from": null }, "exceptions": [ { "provision": "AI Act art. 2.3", "condition": "AI systems placed on the market or used exclusively for military, defence or national security purposes.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.6", "condition": "AI systems or models developed and put into service for the sole purpose of scientific research and development.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" }, { "provision": "AI Act art. 2.10", "condition": "Deployers who are natural persons using AI systems in a purely personal, non-professional activity.", "effect": "not_applicable", "source_url": "https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689" } ], "risk": { "level": "not_in_register", "basis": "No sanction linked in the register", "max_amount": null, "max_turnover_pct": null, "sanctions": [] }, "evidence_chain": [ { "step": 1, "kind": "primary_source", "ref": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, { "step": 2, "kind": "provision", "ref": "ai-act 86" }, { "step": 3, "kind": "obligation", "ref": "obligation:eu:ai-act-art-86-deployer", "method": "Paraphrased from the provision text" }, { "step": 4, "kind": "evidence_to_keep", "ref": "Approved policy or plan" } ], "source": { "title": "Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744", "url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "recommended_action": { "do": [ "Provide affected persons, on request, with a clear and meaningful explanation of the role of the high-risk AI system in a decision that produces legal or similarly significant effects." ], "status": "derived_from_duty" }, "hash": "sha256:538808b3867f089957ae7feff64a7c955f109795ea6c09d089ba39e4a82590ad", "what_to_do": { "timing": { "kind": "deadline", "text": "Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744)." }, "steps": [ "Assign responsibility: deployer (Product).", "Carry out the duty: Provide affected persons, on request, with a clear and meaningful explanation of the role of the high-risk AI system in a decision that produces legal or similarly significant effects.", "Document: Approved policy or plan.", "Check the wording of Regulation (EU) 2024/1689 (AI Act), as amended by Regulation (EU) 2026/1744 86 before deciding." ], "steps_status": "derived_from_provision", "source_url": "https://eur-lex.europa.eu/eli/reg/2024/1689/oj" }, "gaps": [ "sanction", "reviewed_action_kit" ], "links": { "obligation_graph": "https://legal.exploreworldai.com/api/public/v1/graph/obligation?id=eu:ai-act", "provenance_graph": "https://legal.exploreworldai.com/api/public/v1/graph/provenance?id=eu:ai-act", "action_graph": "https://legal.exploreworldai.com/api/public/v1/graph/action?id=eu:ai-act", "self": "https://legal.exploreworldai.com/api/public/v1/duty-objects?id=duty%3Aeu%3Aai-act-art-86-deployer" }, "read_at": "2026-08-31", "source_label": "Source: NovaCopilot" } ], "source": "NovaCopilot", "hash": "sha256:d150233557ae085691f33e8860b835b236ebcaa051df72352cc312a8f4ef180f", "version": "legal-2026-10-20", "expires": "2026-10-22T00:00:00.000Z", "dependency": { "index_version": "legal-2026-10-20+legal-2026-10-20+2026-10-20T21:45:12", "content_hash": "sha256:d150233557ae085691f33e8860b835b236ebcaa051df72352cc312a8f4ef180f", "revalidate_after": "2026-10-21T03:02:09.007Z", "max_copy_age_seconds": 3600, "policy": "revalidate-required; attribution-preferred", "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency", "verify": "https://legal.exploreworldai.com/api/public/v1/verify", "stale_copy_invalid": true }, "canonical": "https://legal.exploreworldai.com/api/public/v1/duty-objects", "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.", "content_notice": { "legal_advice": false, "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.", "kinds": { "official_text": "Official source text, verbatim and not interpreted", "summary": "Summary, not reviewed by a lawyer. Always read the source text", "classification": "Automatic label from the source's own text, not reviewed by a lawyer" }, "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.", "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections", "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration" }, "usageInfo": "https://legal.exploreworldai.com/citering" }