EU AI Act

Who it applies to

Providers, deployers, importers and distributors of AI systems placed on the market or used in the EU, including providers outside the EU whose system output is used in the EU, and providers of general-purpose AI models.

Key requirements

• Do not use prohibited practices, such as social scoring and certain manipulative or exploitative systems.
• For high-risk systems: risk management, data governance, technical documentation, logging, transparency, human oversight, and accuracy, robustness and cybersecurity.
• Conformity assessment and registration of high-risk systems before use.
• Transparency duties, for example telling people they are interacting with an AI system and labelling certain synthetic content.
• Documentation and copyright policy duties for general-purpose AI model providers, with extra duties for models with systemic risk.
• AI literacy measures for staff who operate or use AI systems.

Breach and incident notification

Providers of high-risk AI systems report serious incidents to market surveillance authorities. Providers of general-purpose models with systemic risk also report serious incidents. Check the official text for the deadlines that apply.

Penalties

Up to EUR 35 million or 7% of worldwide annual turnover, whichever is higher, for prohibited practices; lower tiers apply to other infringements.

Go deeper