[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:eu-ai-act\u002F26":3},{"item":4,"lessons":16,"controls":18,"related":19},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"eu-ai-act","26","Article 26","Obligations of deployers of high-risk AI systems",0,"European Union","**What it asks for.** Deployers of high-risk AI systems must take appropriate technical and organisational measures to use them in accordance with the instructions for use, assign human oversight to people with the necessary competence, training and authority, and ensure input data under their control is relevant and sufficiently representative.\n\n**In practice.** Deployers monitor operation, inform the provider and authorities and suspend use where they identify a risk, report serious incidents, and keep automatically generated logs under their control for at least six months unless other law provides otherwise. Employers must inform workers' representatives and affected workers before using a high-risk system in the workplace. Deployers that make or assist decisions about people using Annex III systems must inform those people, and public authorities must register their use. Information from the provider should feed the data protection impact assessment. Evidence includes oversight assignments, monitoring records, log retention settings and notices.\n\n**Common gaps.** Gaps include no named oversight owner, logs held only by the vendor, and missing notices to employees or affected individuals.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj","Read the AI Act on EUR-Lex","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[],[],[]]