Legal sources with official primary sources

Printed ·

Skip to main content
Skip to the answer

Source status and reading dates are reported separately. A reading date is not source verification.

Back to the act

EU regulatory register · AI Act

Article 19Automatically generated logs

CELEX 32024R1689 · Read on 2026-08-18 · Chapter III

Share this page

Short answer

1. Providers of high-risk AI systems shall keep the logs referred to in Article 12(1), automatically generated by their high-risk AI systems, to the extent such logs are under their control.

Verbatim from the article. Source: NovaCopilot · https://legal.exploreworldai.com/eu/rattsakter/ai-act-2024-1689/artikel-19 · Short answer as data · Official text

AI Act in short

Some AI uses are banned, high-risk AI requires risk management and human oversight, and deployers must ensure AI literacy.

Source: NovaCopilot

Official text

Read from the EU Publications Office for this CELEX number. The wording stands as published; nothing here is rewritten or summarised.

1. Providers of high-risk AI systems shall keep the logs referred to in Article 12(1), automatically generated by their high-risk AI systems, to the extent such logs are under their control. Without prejudice to applicable Union or national law, the logs shall be kept for a period appropriate to the intended purpose of the high-risk AI system, of at least six months, unless provided otherwise in the applicable Union or national law, in particular in Union law on the protection of personal data.

2. Providers that are financial institutions subject to requirements regarding their internal governance, arrangements or processes under Union financial services law shall maintain the logs automatically generated by their high-risk AI systems as part of the documentation kept under the relevant financial services law.

Open the article on EUR-Lex

Follow-up questions

Other articles in this chapter

Knowledge card

Applies
provider: Keep the logs automatically generated by the high-risk AI system, to the extent they are under the provider's control.
Risk if ignored
high
What to do
Keep the logs automatically generated by the high-risk AI system, to the extent they are under the provider's control.
Deadline
For a period appropriate to the intended purpose, of at least six months. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).

card:eu:article:ai-act--art-19 · sha256 68364afe7670 · Source: NovaCopilot

Obligations, actions and sanctions

  • Article 19 · Role: provider

    Keep the logs automatically generated by the high-risk AI system, to the extent they are under the provider's control.

    Deadline: For a period appropriate to the intended purpose, of at least six months. Applies from 2 December 2027 for high-risk systems under Article 6(2) and Annex III, and from 2 August 2028 under Article 6(1) and Annex I (Article 113 as amended by Regulation (EU) 2026/1744).

    Decision chain (JSON)

Sanction: Administrative fine: prohibited practices up to EUR 35 million or 7 % of worldwide annual turnover; other obligations up to EUR 15 million or 3 %; incorrect information up to EUR 7.5 million or 1 %. For general-purpose AI models the Commission (AI Office) decides, up to EUR 15 million or 3 %.

Summary of the obligation in the register; the official language versions on EUR-Lex are authoritative. Source: NovaCopilot

Risk, sanction and outcome

  • Art. 19 · provider

    Risk: high · Sanction: administrative_fine, högst EUR 15 000 000 · Authority: Market surveillance authority

    Decisions applying the provision: none in the register

    Full chain (JSON)

Outcomes are counted from stored judgments that cite the provision verbatim. Source: NovaCopilot

The text is quoted from the official source and is not legal advice. A national court reads the language version that binds in its jurisdiction.

Verifiable trust signals

  • Source-linked answers and explicit evidence gaps
  • Obligations, controls, risks and consequences
  • Stable objects and verifiable checksums
  • Rule-based objects, optional source-linked reasoning
  • Model card, source status and audit

Model cardAudit