{"slug":"eu-ai-act-deployer-obligations","id":"AIPT-OBL-0015","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0015","title":"Use high-risk AI as instructed, monitor it and inform affected people","short_title":"Obligations of deployers of high-risk AI","category":"governance_accountability","summary":"Deployers of high-risk AI must take technical and organisational measures to use systems according to the instructions, assign human oversight, ensure input data is relevant where they control it, monitor operation, inform the provider and authorities of risks or serious incidents, keep logs, inform workers' representatives before deploying at the workplace, inform affected natural persons where decisions are made about them, and cooperate with authorities.\n","practical_action":"Create a deployer checklist per high-risk system and a notice for affected individuals and workers.\n","is_binding":true,"applies_from":"2027-12-02","section":"Articles 16–27","source_reference":"Article 26","official_source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","review_status":"pending_review","confidence_level":"medium","last_verified_at":null,"reviewed_by":null,"actors":["deployer","public_authority"],"sectors":["cross_sector","employment","public_services"],"use_cases":["hiring_and_hr","finance_and_credit","public_services"],"applicability":[{"description":"Any organisation deploying a high-risk AI system in the EU.","actors":["deployer","public_authority"],"conditions":null}],"evidence_examples":[{"title":"Deployment checklist and oversight assignment","description":null,"artifact_type":"record"},{"title":"Worker and affected-person notices","description":null,"artifact_type":"document"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Annex A controls on responsible use of AI systems","note":"Original editorial mapping.","confidence_level":"medium","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"MANAGE 3.x, GOVERN 5.x","note":"Deployment management and stakeholder engagement.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"human-oversight-and-override","title":"Human oversight design and override procedure","kind":"process","relationship":"supports","note":"Assigning trained natural persons to oversee the system.","confidence_level":"high","url":"https://aipolicytracker.org/controls/human-oversight-and-override"},{"slug":"post-market-monitoring-and-drift-detection","title":"Post-deployment monitoring and drift detection","kind":"technical","relationship":"supports","note":"Monitoring operation and informing the provider of risks.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/post-market-monitoring-and-drift-detection"},{"slug":"ai-interaction-and-use-disclosure","title":"AI interaction and use disclosure notices","kind":"process","relationship":"supports","note":"Informing workers and affected people that a high-risk system is used.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/ai-interaction-and-use-disclosure"}],"url":"https://aipolicytracker.org/obligations/eu-ai-act-deployer-obligations","policy":{"slug":"eu-ai-act","title":"Regulation (EU) 2024/1689 — Artificial Intelligence Act","status":"partially_applicable","jurisdiction":"eu","url":"https://aipolicytracker.org/policies/eu-ai-act"}}