# AI Incident Response Playbook and Log

- **Type**: Template (Procedure)
- **Page**: https://aipolicytracker.org/templates/ai-incident-response-playbook
- **Formats**: DOCX and XLSX
- **Current version**: v4, built 2026-11-12

Detect, contain, report and learn: a playbook built from the recorded incident-handling duties, with the reporting deadlines they set, and a log that computes them.

## What is inside

- Document: severity scale, roles, the playbook steps, the reporting duties on record with their deadlines
- Incident log sheet: severity and harm-domain dropdowns, deadline computed from the date, status
- Regulators sheet: who to notify, by jurisdiction, from the records

## Laws and frameworks it is built from

- EU AI Act (European Union), Pending review · source-linked, checked 26 Sep 2026: https://aipolicytracker.org/policies/eu-ai-act
- NIST AI RMF (United States), Verified against the official source 26 Sep 2026: https://aipolicytracker.org/policies/us-nist-ai-rmf

## Recorded duties it covers

- Report critical safety incidents to the Office of Emergency Services (California SB 53): https://aipolicytracker.org/obligations/us-california-sb-53-critical-safety-incident-reporting
- Operate a post-market monitoring system (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-post-market-monitoring
- Report serious incidents to market surveillance authorities (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-serious-incident-reporting
- Providers must take corrective action and inform the supply chain about non-conforming high-risk AI (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-20-corrective-actions-and-information
- Deployers must monitor high-risk AI, suspend use on risk and report serious incidents (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-26-5-deployer-monitoring-and-suspension
- Providers of systemic-risk GPAI models must track and report serious incidents to the AI Office (EU AI Act): https://aipolicytracker.org/obligations/eu-ai-act-art-55-systemic-risk-incident-reporting
- Implement reasonable security safeguards and notify breaches (India DPDP Act): https://aipolicytracker.org/obligations/india-dpdp-security-and-breach-notification

## Latest changes

Dataset 52bd836b1d6b → ef1018b7a6a2.

- **Retrieved**: 2026-11-12
- **Licence**: https://creativecommons.org/licenses/by/4.0/

> Built from structured summaries of official texts. Not legal advice. A record whose review status is not "verified" has not been confirmed against its official source by a named reviewer; open the official source before relying on any date or duty. How records are verified: https://aipolicytracker.org/verification.