Article 15: Accuracy, Robustness and Cybersecurity
Summary of Article 15 * Accuracy, Performance, and Transparency: High-risk AI systems must ensure accuracy, robustness, and measurable performance, with clear
Summary of Article 15 * Accuracy, Performance, and Transparency: High-risk AI systems must ensure accuracy, robustness, and measurable performance, with clear
Summary of Article 16 * Compliance, Documentation, and Quality Management: Ensure compliance with legal requirements, maintain documentation, system logs, and a
Summary of Article 17 * Regulatory Compliance and Design Control: Providers must implement a documented quality management system, including regulatory compliance
Summary of Article 18 * Documentation Retention: Providers must retain technical and quality management documentation, notified body records, and the EU
Summary of Article 19 * Log Retention by Providers: Providers of high-risk AI systems must retain automatically generated logs under their
Summary of Article 20 * Corrective Actions for Non-Conformity: Providers of high-risk AI systems must take immediate corrective actions, including bringing
Summary of Article 12 * Provision of Information and Documentation: Providers must supply competent authorities with all required information and documentation
Summary of Article 22 * Appointment and Mandate of Authorised Representatives: Providers from third countries must appoint a Union-based authorised representative
Summary of Article 23 * Pre-Market Obligations: Importers must verify the high-risk AI system’s compliance with the Regulation, cooperate with
Summary of Article 24 * Pre-Market Verification: Distributors must ensure high-risk AI systems bear the CE marking, are accompanied by the
Summary of Article 25 * Assumption of Provider Obligations by Third Parties: Distributors, importers, deployers, or third parties become providers when
Summary of Article 26 * Implementation and Operation of High-Risk AI Systems: Deployers must use high-risk AI systems as instructed, assign
Summary of Article 27 * Fundamental Rights Impact Assessment: Deployers of specified high-risk AI systems must assess their impact on fundamental
Summary of Article 28 * Establishment and Designation of Notifying Authorities: Member States must designate or establish notifying authorities to oversee
Summary of Article 29 * Application for Notification: Conformity assessment bodies must submit an application to the notifying authority, including details
Summary of Article 30 * Requirements for Notification: Notifying authorities can only notify conformity assessment bodies that meet the requirements of
Summary of Article 31 * Legal and Organisational Requirements: Notified bodies must be established under national law, have legal personality, and
Where a conformity assessment body demonstrates its conformity with the criteria laid down in the relevant harmonised standards or parts
Summary of Article 33 * Compliance and Oversight: Notified bodies must ensure subcontractors and subsidiaries meet the requirements of Article 31,
Summary of Article 34 * Conformity Verification and Proportionality: Notified bodies must verify the conformity of high-risk AI systems under Article
1. The Commission shall assign a single identification number to each notified body, even where a body is notified under
Summary of Article 36 * Notification and Changes to Designation: Notifying authorities must inform the Commission and Member States of any
Summary of Article 37 * Investigation and Provision of Information: The Commission must investigate cases of doubts about a notified body’
1. The Commission shall ensure that, with regard to high-risk AI systems, appropriate coordination and cooperation between notified bodies active
Sign up to get access to free resources and checklists