Source: OJ L, 2024/1689, 12.7.2024

Current language: EN

Article 16 Obligations of providers of high-risk AI systems


Summary What does Article 16 of the AI Act say?

This article serves as the master checklist of obligations for providers of high-risk AI systems.

Rather than establishing any single new rule in depth, it consolidates the full range of duties a provider must fulfil, pointing to other articles in the regulation for the detailed requirements behind each obligation.

It covers everything from technical compliance and quality management, to conformity assessment, CE marking, registration, and accessibility — essentially acting as the central reference point for what it means to be a compliant provider of a high-risk AI system.

Important points:

  • Ensure your high-risk AI system undergoes a conformity assessment, carries the CE marking, and is registered before it is placed on the market or put into service.
  • Maintain a quality management system, retain required documentation and logs, and be prepared to demonstrate compliance to a national competent authority upon a reasoned request.
  • Ensure the high-risk AI system meets accessibility requirements in accordance with the two referenced EU Directives.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

Providers of high-risk AI systems shall:

  1. ensure that their high-risk AI systems are compliant with the requirements set out in Section 2;

  2. indicate on the high-risk AI system or, where that is not possible, on its packaging or its accompanying documentation, as applicable, their name, registered trade name or registered trade mark, the address at which they can be contacted;

  3. have a quality management system in place which complies with Article 17;

  4. keep the documentation referred to in Article 18;

  5. when under their control, keep the logs automatically generated by their high-risk AI systems as referred to in Article 19;

  6. ensure that the high-risk AI system undergoes the relevant conformity assessment procedure as referred to in Article 43, prior to its being placed on the market or put into service;

  7. draw up an EU declaration of conformity in accordance with Article 47;

  8. affix the CE marking to the high-risk AI system or, where that is not possible, on its packaging or its accompanying documentation, to indicate conformity with this Regulation, in accordance with Article 48;

  9. comply with the registration obligations referred to in Article 49(1);

  10. take the necessary corrective actions and provide information as required in Article 20;

  11. upon a reasoned request of a national competent authority, demonstrate the conformity of the high-risk AI system with the requirements set out in Section 2;

  12. ensure that the high-risk AI system complies with accessibility requirements in accordance with Directives (EU) 2016/2102 and (EU) 2019/882.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod