Use high-risk AI as instructed, monitor it and inform affected people

Practical action

Create a deployer checklist per high-risk system and a notice for affected individuals and workers.

Who does it apply to?

Any organisation deploying a high-risk AI system in the EU.

Actors

Deployer / user organisationPublic authority / government body

Sectors

Cross-sector / all sectorsEmployment and HRPublic services and government

Use cases

AI in hiring and employmentAI in finance, credit and insuranceAI in public services

Applies from: 2 December 2027

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

• supportsProcessAI system owner · once per ai system
  Human oversight design and override procedure

  Serves 12 recorded duties · evidence: Human oversight and override procedure, Human-involvement design rationale, Overseer training completion

  Assigning trained natural persons to oversee the system.

• supportsTechnical measureAI system owner · continuous
  Post-deployment monitoring and drift detection

  Serves 10 recorded duties · evidence: Post-market monitoring plan, Monitoring dashboard or periodic monitoring report, Monitoring review decision

  Monitoring operation and informing the provider of risks.

• supportsProcessProduct owner · at launch and on material change
  AI interaction and use disclosure notices

  Serves 18 recorded duties · evidence: AI interaction or use notice, Notice catalogue, Notice wording approval

  Informing workers and affected people that a high-risk system is used.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

• AI System Inventory

  Register · XLSX and DOCX · v6

• EU AI Act Role and Risk Classifier

  Checklist · XLSX · v4

• AI Acceptable Use Policy

  Policy · DOCX · v1

• AI Governance Policy and RACI

  Policy · DOCX and XLSX · v5

All 12 templates that cover it →

What evidence would a reviewer expect?

Framework mappings

Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.

See every European Union duty mapped this way →

Frequently asked questions

Cite this record

AIPolicyTracker (2026). “Use high-risk AI as instructed, monitor it and inform affected people (EU AI Act)” [AIPT-OBL-0015, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0015 (accessed 27 October 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0015: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence, Official Journal of the European Union, https://eur-lex.europa.eu/eli/reg/2024/1689/oj.

@misc{aipolicytracker2026_usehighriskaiasinstructe,
  author       = {{AIPolicyTracker}},
  title        = {{Use high-risk AI as instructed, monitor it and inform affected people (EU AI Act)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/eu-ai-act-deployer-obligations}},
  url          = {https://aipolicytracker.org/obligations/eu-ai-act-deployer-obligations},
  urldate      = {2026-10-27},
  note         = {Data licensed CC BY 4.0. Accessed 27 October 2026}
}

Change history

Similar obligations in other instruments

• Providers must meet the full set of provider duties for high-risk AI — EU AI Act, European Union
• Providers must supply conformity evidence and log access to authorities on request — EU AI Act, European Union
• Non-EU providers must appoint an EU authorised representative for high-risk AI — EU AI Act, European Union
• Deployers, distributors and importers must assume provider duties when they rebrand or substantially modify high-risk AI — EU AI Act, European Union
• Law-enforcement deployers must obtain authorisation for post-remote biometric identification and report annually — EU AI Act, European Union
• Providers of GPAI models must notify the Commission within two weeks of meeting the systemic-risk threshold — EU AI Act, European Union
• Non-EU providers of GPAI models must appoint an EU authorised representative — EU AI Act, European Union
• Frontier developers must protect employees who report catastrophic-risk concerns — California SB 53, California (United States)