Summary of Article 19
- Log Retention by Providers: Providers of high-risk AI systems must retain automatically generated logs under their control for at least six months, unless otherwise specified by applicable Union or national laws.
- Log Retention by Financial Institutions: Financial institutions must maintain automatically generated logs from high-risk AI systems as part of their documentation required under Union financial services law.
Log Retention by Providers
1. Providers of high-risk AI systems shall keep the logs referred to in Article 12(1), automatically generated by their high-risk AI systems, to the extent such logs are under their control. Without prejudice to applicable Union or national law, the logs shall be kept for a period appropriate to the intended purpose of the high-risk AI system, of at least six months, unless provided otherwise in the applicable Union or national law, in particular in Union law on the protection of personal data.
Log Retention by Financial Institutions
2. Providers that are financial institutions subject to requirements regarding their internal governance, arrangements or processes under Union financial services law shall maintain the logs automatically generated by their high-risk AI systems as part of the documentation kept under the relevant financial services law.
