{"slug":"eu-ai-act-art-21-cooperation-with-authorities","id":"AIPT-OBL-0027","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0027","title":"Providers must supply conformity evidence and log access to authorities on request","short_title":"Cooperation with competent authorities","category":"governance_accountability","summary":"On a reasoned request from a national competent authority, a provider of a high-risk AI system must supply all the information and documentation needed to show that the system meets the Section 2 requirements, in a language the authority can readily understand, and must give the authority access to the automatically generated logs it holds. Authorities must treat what they receive as confidential under Article 78.\n","practical_action":"Keep an authority-request playbook with a named contact, the documentation index and a pre-agreed export format for logs.\n","is_binding":true,"applies_from":"2027-12-02","section":"Articles 16–27","source_reference":"Article 21","official_source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","review_status":"verified","confidence_level":"high","last_verified_at":"2026-09-26","reviewed_by":null,"actors":["provider"],"sectors":["cross_sector"],"use_cases":["biometrics","public_services","safety_critical"],"applicability":[{"description":"Providers of high-risk AI systems; requests may come from any national competent authority.","actors":["provider"],"conditions":null}],"evidence_examples":[{"title":"Regulator request handling procedure","description":null,"artifact_type":"document"},{"title":"Log of authority requests and responses","description":null,"artifact_type":"register"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clause 7.5; Annex A.8.3","note":"Documented information available for external reporting.","confidence_level":"medium","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"GOVERN 1.4, GOVERN 4.2","note":"Transparency and accountability records.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"record-keeping-and-logging","title":"Automatic event logging and record retention","kind":"technical","relationship":"supports","note":"Logs must be retrievable in a usable format.","confidence_level":"high","url":"https://aipolicytracker.org/controls/record-keeping-and-logging"},{"slug":"ai-governance-policy-and-accountability","title":"AI governance policy and accountability structure","kind":"policy","relationship":"supports","note":"Names the regulator liaison and escalation path.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/ai-governance-policy-and-accountability"},{"slug":"technical-documentation-and-model-cards","title":"Technical documentation, model cards and instructions for use","kind":"process","relationship":"supports","note":"The documentation set that is handed over.","confidence_level":"high","url":"https://aipolicytracker.org/controls/technical-documentation-and-model-cards"}],"url":"https://aipolicytracker.org/obligations/eu-ai-act-art-21-cooperation-with-authorities","policy":{"slug":"eu-ai-act","title":"Regulation (EU) 2024/1689 — Artificial Intelligence Act","status":"partially_applicable","jurisdiction":"eu","url":"https://aipolicytracker.org/policies/eu-ai-act"}}