Article 13 of Regulation (EU) 2024/1689 — Transparency and provision of information to deployers. Official text, practical interpretation, key obligations and compliance implications.
Official Text Summary
Article 13 of Regulation (EU) 2024/1689 (the EU AI Act) establishes transparency obligations applicable to high-risk AI systems as defined in Title III. It requires providers to design and develop high-risk AI systems in a way that allows deployers to understand and correctly interpret the outputs of such systems and to use them appropriately.
The article's central mechanism is the mandatory provision of instructions for use — a structured document that must accompany every high-risk AI system placed on the market or put into service. Article 13(3) sets out the minimum content of this document in detail. It must include: the identity and contact details of the provider; the characteristics, capabilities, and limitations of the system, including its intended purpose and the specific contexts for which it has been validated; the level of accuracy, robustness, and cybersecurity against which the system has been tested, together with any known and foreseeable circumstances that may affect that performance; where relevant, technical capabilities concerning human oversight, including measures to facilitate interpretation of outputs; and guidance on the input data and the hardware and software environment in which the system is intended to operate.
The transparency required by Article 13 is not merely informational: it is a prerequisite for the meaningful human oversight mandated by Article 14. Providers cannot satisfy Article 14 obligations if deployers lack the understanding that Article 13 is designed to convey.
What This Means in Practice
For organisations developing or marketing high-risk AI systems, Article 13 translates into a concrete documentation obligation that must be embedded in the product development lifecycle rather than treated as an afterthought.
For providers, this means producing instructions for use that go well beyond a standard technical manual. The document must be calibrated to a deployer audience — typically an organisation procuring the AI system for a specific operational context, not necessarily an AI engineer. Concrete examples of what must be covered include: the accuracy rates achieved during validation broken down by relevant population subgroups where applicable (important for systems used in recruitment or creditworthiness assessments); the types of input data the system has been trained on and what deviations from that distribution might cause degraded performance; and specific guidance on how a human reviewer should interpret a confidence score or risk flag produced by the system.
For deployers, Article 13 is the foundation of the due diligence process before deployment. A deployer procuring a high-risk AI system should verify that the instructions for use are present and substantive. Absence of adequate instructions is itself a compliance signal about the provider. Deployers in regulated sectors — credit institutions, healthcare providers, public authorities — should incorporate review of Article 13 documentation into their vendor assessment and procurement procedures.
Practical examples: A provider of an AI-based CV-screening tool (high-risk under Annex III, point 4) must document its accuracy across demographic groups and the conditions under which the system's outputs should not be relied upon without human review. A provider of an AI system used for credit scoring must specify the data inputs it requires and the statistical confidence of its risk classifications.
Key Obligations
- Design for interpretability: High-risk AI systems must be designed and developed so that their operation is sufficiently transparent for deployers to interpret outputs and use the system appropriately (Article 13(1)).
- Supply instructions for use: Providers must supply instructions for use in digital or physical form with every high-risk AI system placed on the market or put into service (Article 13(2)).
- Disclose identity and contact information: Instructions must identify the provider and provide contact details enabling the deployer to communicate compliance-related queries (Article 13(3)(a)).
- Document capabilities and limitations: The instructions must describe the system's intended purpose, its performance levels as validated, known or foreseeable circumstances in which performance may fall below documented levels, and any known biases (Article 13(3)(b)).
- Specify input data requirements: Where relevant to performance, instructions must describe the nature, format, and provenance of data the system requires as input (Article 13(3)(c)).
- Enable human oversight: Instructions must include information on the measures incorporated into the system to support the human oversight obligations of Article 14, including guidance on how to interpret and act on the system's outputs (Article 13(3)(d) and (e)).
Relationship to Other Articles
Article 13 sits at the intersection of several interlocking obligations in Title III, Chapter 2. It is operationally inseparable from Article 14 (Human oversight): the measures enabling human oversight described in Article 13(3)(d) are the direct informational precondition for deployers being able to exercise the oversight duties Article 14 imposes on them. Without adequate Article 13 instructions, Article 14 compliance is structurally impossible.
Article 13 draws on the technical documentation produced under Article 11, which requires providers to maintain comprehensive documentation of their high-risk AI systems. The instructions for use are a deployer-facing extract of that broader body of documentation.
The obligations interact with Article 16 (obligations of providers) and Article 26 (obligations of deployers), which frame how each party must fulfil its respective role once the system is on the market. For systems undergoing conformity assessment under Article 43, the instructions for use constitute a required element of the conformity assessment file examined by notified bodies.
Finally, Article 13 connects to Article 50 (transparency obligations for certain AI systems) in that both address transparency, but Article 50 targets a different context — AI systems interacting with natural persons rather than professional deployers.
Compliance Timeline
The EU AI Act entered into force on 1 August 2024, twenty days after its publication in the Official Journal of the European Union. Application is phased:
- 2 February 2025: Prohibitions on unacceptable-risk AI practices (Article 5) became applicable.
- 2 August 2025: Rules governing general-purpose AI models (Title VIII, Articles 51–56) and governance obligations became applicable.
- 2 August 2026: Article 13 becomes applicable to high-risk AI systems listed in Annex III (standalone high-risk systems, including those used in biometric identification, critical infrastructure, education, employment, essential services, law enforcement, migration, and administration of justice).
- 2 August 2027: Article 13 becomes applicable to high-risk AI systems covered by Annex I (AI systems that are safety components of products subject to existing EU product-safety legislation, such as machinery, medical devices, and civil aviation equipment).
Providers targeting the August 2026 deadline should treat the current period as active preparation time. Instructions for use must be finalised and validated against Article 13(3) requirements before the system is placed on the market, not after. Organisations procuring high-risk AI systems should begin incorporating Article 13 verification into vendor due diligence processes now, ahead of the applicable dates.
Official AI Act Compliance Deadline Calendar
Updated · Sources: Regulation (EU) 2024/1689 and the 2026 Digital Omnibus on AI.
| Obligation | Applies to | Original date | New date | Status | Countdown | Legal basis |
|---|---|---|---|---|---|---|
| Prohibited Practices (Art. 5) | All providers and deployers | active | — | AI Act Art. 5 | ||
| GPAI Rules (Chapter 5) | GPAI model providers | active | — | AI Act Art. 51-56 | ||
| High-risk AI — Annex III (standalone) | Providers of standalone Annex III systems | deferred | — | AI Omnibus 2026 Art. 6(2) | ||
| High-risk AI — Annex I (embedded) | AI embedded in Annex I regulated products | deferred | — | AI Omnibus 2026 Art. 6(1) | ||
| AI-Generated Content Marking | Providers of generative GPAI systems | active | — | AI Act Art. 50(2) | ||
| Regulatory Sandboxes | National competent authorities | active | — | AI Act Art. 57 |
⬇ Download JSON · CC BY 4.0
AI Act meets DORA and NIS2
Is your organisation subject to both the AI Act and DORA? The two regulations intersect on the operational resilience of financial AI systems. Our sister site regulation-dora.eu covers DORA in depth.
Explore regulation-dora.eu ↗Frequently Asked Questions
Article 13 requires providers of high-risk AI systems to ensure that their systems are sufficiently transparent to enable deployers to understand the system's capabilities and limitations, interpret its outputs, and use it appropriately. This is achieved primarily through the obligation to supply a comprehensive instructions for use document accompanying each high-risk AI system.
The primary obligation falls on providers — the natural or legal persons who develop or place a high-risk AI system on the market or put it into service. Deployers (organisations or individuals that use a high-risk AI system under their own authority) are the intended recipients of the information, and must receive it before or at the point of deployment.
The instructions must include the identity and contact details of the provider, the system's capabilities, limitations, and intended purpose, performance metrics (including accuracy levels and known biases), any known circumstances that may affect performance, input data requirements, hardware and software environment, and, where relevant, measures needed to interpret the AI output. Human oversight measures must also be described.
Article 13 sits in Title III (high-risk AI systems) and does not directly regulate general-purpose AI models, which are governed by Title VIII (Articles 51–56). However, where a general-purpose AI model is integrated into a high-risk AI system, the provider of that system remains responsible for fulfilling Article 13 obligations.
Article 13 applies to high-risk AI systems listed in Annex III from 2 August 2026, and to high-risk AI systems covered by Annex I (product-safety legislation) from 2 August 2027. Providers should begin preparing technical documentation and instructions for use well in advance of these dates.
Stay ahead of AI Act changes
Get compliance alerts when deadlines or obligations change.
No spam. One-click unsubscribe.