{"slug":"eu-ai-act-art-16-provider-obligations","id":"AIPT-OBL-0023","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0023","title":"Providers must meet the full set of provider duties for high-risk AI","short_title":"Obligations of providers of high-risk AI","category":"governance_accountability","summary":"Article 16 lists what a provider of a high-risk AI system owes: compliance with the Section 2 requirements, its name and contact details on the system or its documentation, a quality management system, retention of documentation and logs, conformity assessment, an EU declaration of conformity, CE marking, registration, corrective action when needed, cooperation with authorities on request, and accessibility in line with the EU accessibility directives.\n","practical_action":"Map each Article 16 point to an owner and an evidence location in a compliance matrix for every high-risk system.\n","is_binding":true,"applies_from":"2027-12-02","section":"Articles 16–27","source_reference":"Article 16","official_source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","review_status":"verified","confidence_level":"high","last_verified_at":"2026-09-26","reviewed_by":null,"actors":["provider"],"sectors":["cross_sector"],"use_cases":["hiring_and_hr","biometrics","finance_and_credit","safety_critical"],"applicability":[{"description":"Any provider placing a high-risk AI system on the EU market or putting it into service, wherever established.","actors":["provider"],"conditions":null}],"evidence_examples":[{"title":"Provider compliance matrix","description":"Article 16 points (a)–(l) mapped to owners, status and evidence for each high-risk system.","artifact_type":"register"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clause 5.3; Annex A.3.2","note":"Original editorial mapping to roles, responsibilities and authorities.","confidence_level":"medium","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"GOVERN 1.1, GOVERN 2.1","note":"Legal requirements identified and roles assigned.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"ai-governance-policy-and-accountability","title":"AI governance policy and accountability structure","kind":"policy","relationship":"satisfies","note":"Assigns each provider duty to a named owner with a reporting line.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/ai-governance-policy-and-accountability"},{"slug":"ai-quality-management-system","title":"Quality management system for AI development and supply","kind":"policy","relationship":"supports","note":"The QMS is where most Article 16 duties are operated.","confidence_level":"high","url":"https://aipolicytracker.org/controls/ai-quality-management-system"}],"url":"https://aipolicytracker.org/obligations/eu-ai-act-art-16-provider-obligations","policy":{"slug":"eu-ai-act","title":"Regulation (EU) 2024/1689 — Artificial Intelligence Act","status":"partially_applicable","jurisdiction":"eu","url":"https://aipolicytracker.org/policies/eu-ai-act"}}