Articles, EU obligations
59 entries collected under articles for EU obligations. Each row has its own address, reading date, checksum and citation format.
Share this page
- AI Act, 16: Obligations of providers of high-risk AI systems
- AI Act, 9: Risk management system
- AI Act, 10: Data and data governance
- AI Act, 11: Technical documentation
- AI Act, 12: Record-keeping
- AI Act, 17: Quality management system
- AI Act, 43: Conformity assessment
- AI Act, 72: Post-market monitoring by providers and post-market monitoring plan for high-risk AI systems
- AI Act, 73: Reporting of serious incidents
- AI Act, 26: Obligations of deployers of high-risk AI systems
- AI Act, 27: Fundamental rights impact assessment for high-risk AI systems
- AI Act, 23: Obligations of importers
- AI Act, 24: Obligations of distributors
- AI Act, 53: Obligations for providers of general-purpose AI models
- AI Act, 55: Obligations of providers of general-purpose AI models with systemic risk
- GDPR, 24: Responsibility of the controller
- GDPR, 25: Data protection by design and by default
- GDPR, 30: Records of processing activities
- GDPR, 32: Security of processing
- GDPR, 33: Notification of a personal data breach to the supervisory authority
- GDPR, 35: Data protection impact assessment
- GDPR, 28: Processor
- NIS2, 21: Cybersecurity risk-management measures
- NIS2, 23: Reporting obligations
- NIS2, 20: Governance
- DSA, 16: Notice and action mechanisms
- DSA, 17: Statement of reasons
- DSA, 34: Risk assessment
- DSA, 35: Mitigation of risks
- Dataförordningen, 4: The rights and obligations of users and data holders with regard to access, use and making available product data and related service data
- Dataförordningen, 23: Removing obstacles to effective switching
- DGA, 12: Conditions for providing data intermediation services
- DORA, 5: Governance and organisation
- DORA, 6: ICT risk management framework
- DORA, 11: Response and recovery
- DORA, 17: ICT-related incident management process
- DORA, 19: Reporting of major ICT-related incidents and voluntary notification of significant cyber threats
- DORA, 24: General requirements for the performance of digital operational resilience testing
- DORA, 26: Advanced testing of ICT tools, systems and processes based on TLPT
- DORA, 28: General principles
- DORA, 30: Key contractual provisions
- AMLR, 9: Scope of internal policies, procedures and controls
- AMLR, 10: Business-wide risk assessment
- AMLR, 11: Compliance functions
- AMLR, 20: Customer due diligence measures
- AMLR, 34: Scope of application of enhanced due diligence measures
- AMLR, 69: Reporting of suspicions
- AMLR, 77: Record retention
- MiCA, 59: Authorisation
- MiCA, 66: Obligation to act honestly, fairly and professionally in the best interests of clients
- MiCA, 68: Governance arrangements
- MiCA, 70: Safekeeping of clients’ crypto-assets and funds
- MiCA, 72: Identification, prevention, management and disclosure of conflicts of interest
- MiCA, 48: Requirements for the offer to the public or admission to trading of e-money tokens
- MiCA, 36: Obligation to have a reserve of assets, and composition and management of such reserve of assets
- PSD2, 73: Payment service provider’s liability for unauthorised payment transactions
- PSD2, 95: Management of operational and security risks
- PSD2, 96: Incident reporting
- PSD2, 97: Authentication
French edition
The same node in French, with the same read date, checksum and citation.
Source registers
The same material as registers, with read date and source on every row.
Next step
Three ways to put the register to work in your own practice.
Start with your task
Litigation
Find support in a judgment
Search guiding decisions, see what became final and follow changes in the law.
In-house, deals
Map the rules in a transaction
Move from theme to act and on to the article that carries the duty.
Compliance
Assess the risk in a process
Risk scoring per legal area, with the sources behind every score.