{"slug":"eu-ai-act-post-market-monitoring","id":"AIPT-OBL-0020","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0020","title":"Operate a post-market monitoring system","short_title":"Post-market monitoring","category":"post_market_monitoring","summary":"Providers must establish and document a post-market monitoring system proportionate to the nature of the AI technology and its risks, actively and systematically collecting and analysing performance data throughout the system's lifetime, based on a monitoring plan that is part of the technical documentation. The Commission is to adopt a template for the plan.\n","practical_action":"Define performance and drift indicators, feedback channels and review cadence in a monitoring plan.\n","is_binding":true,"applies_from":"2027-12-02","section":"Article 72","source_reference":"Article 72","official_source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","review_status":"pending_review","confidence_level":"medium","last_verified_at":null,"reviewed_by":null,"actors":["provider"],"sectors":["cross_sector"],"use_cases":["hiring_and_hr","finance_and_credit","safety_critical"],"applicability":[{"description":"Providers of high-risk AI systems.","actors":["provider"],"conditions":null}],"evidence_examples":[{"title":"Post-market monitoring plan and periodic reports","description":null,"artifact_type":"report"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Clause 9.1 Monitoring, measurement, analysis and evaluation","note":"Original editorial mapping.","confidence_level":"high","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"MANAGE 4.1, MEASURE 3.x","note":"Post-deployment monitoring.","confidence_level":"high","is_original":true}],"controls":[{"slug":"record-keeping-and-logging","title":"Automatic event logging and record retention","kind":"technical","relationship":"supports","note":"Logs are the primary data source.","confidence_level":"high","url":"https://aipolicytracker.org/controls/record-keeping-and-logging"},{"slug":"post-market-monitoring-and-drift-detection","title":"Post-deployment monitoring and drift detection","kind":"technical","relationship":"satisfies","note":"Documented monitoring plan with indicators, feedback channels and review cadence.","confidence_level":"high","url":"https://aipolicytracker.org/controls/post-market-monitoring-and-drift-detection"},{"slug":"ai-incident-management-and-reporting","title":"AI incident management and regulatory reporting","kind":"process","relationship":"supports","note":"Monitoring findings escalate into incidents.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/ai-incident-management-and-reporting"}],"url":"https://aipolicytracker.org/obligations/eu-ai-act-post-market-monitoring","policy":{"slug":"eu-ai-act","title":"Regulation (EU) 2024/1689 — Artificial Intelligence Act","status":"partially_applicable","jurisdiction":"eu","url":"https://aipolicytracker.org/policies/eu-ai-act"}}