Article 82 — Right to explanation of individual decision-making (EU AI Act)

Article 82 of Regulation (EU) 2024/1689 — Right to explanation of individual decision-making. Official text, practical interpretation, key obligations and compliance implications.

Official Text Summary

Article 82 of Regulation (EU) 2024/1689 — the EU AI Act — establishes a right to explanation for natural persons who are subject to decisions made with the involvement of high-risk AI systems listed in Annex III. Where such a decision produces legal effects on a person, or similarly significantly affects them, that person has the right to obtain from the deployer a meaningful explanation of the role the AI system played in the decision-making procedure.

The explanation must encompass, at minimum, the main parameters taken into account by the system and the weight those parameters carried in reaching the specific outcome affecting the individual. This obligation is placed on the deployer — the entity putting the high-risk AI system into use — rather than the provider who developed and placed the system on the market.

The right is not absolute. Article 82 carves out situations in which the decision is necessary for entering into or performing a contract, is required or authorised under Union or Member State law, or rests on the explicit prior consent of the data subject. Even in these exempt situations, deployers are generally required to implement suitable safeguards, including making human review available and informing individuals of their ability to request such review. The article thus operates as a complementary instrument to the individual rights framework established under the GDPR, particularly Articles 13–15 and 22 of Regulation (EU) 2016/679, while being tailored to the specific context of AI-assisted decision-making.

What This Means in Practice

Article 82 has direct operational implications for any organisation deploying a high-risk AI system in a context where individual outcomes are at stake. Typical scenarios include AI-assisted credit scoring by financial institutions, AI-supported recruitment or candidate screening tools, AI systems used in benefits entitlement determinations by public authorities, and AI-driven risk classification in insurance underwriting.

In each of these cases, the deployer must be capable of generating — on request — a sufficiently granular account of why a particular decision came out the way it did for a specific individual. A generic description of how the model works as a class is insufficient. The explanation must be individualised: it must reflect the actual parameters evaluated for that person and how each parameter contributed to the outcome.

Practically, this requires deployers to maintain logging and audit trail capabilities at the individual inference level, not merely at the model level. Where the AI system is procured from a third-party provider, the deployer must ensure that the contractual and technical arrangements in place allow them to obtain and communicate the required information. Providers are correspondingly obligated under Article 13 (transparency) and Article 16 (obligations of providers) to supply deployers with the documentation necessary to meet this duty.

Organisations should also review how Article 82 intersects with their existing GDPR Article 22 processes. Where automated decision-making triggers Article 22 GDPR rights, the EU AI Act explanation right may apply concurrently, and a consolidated response mechanism covering both frameworks will reduce compliance burden and improve the experience of affected individuals.

Key Obligations

• Deployers of high-risk AI systems listed in Annex III must provide, upon request, an individualised explanation of the main parameters of a decision produced with AI involvement and the relative weight of those parameters in the specific outcome.
• Explanations must be specific to the individual concerned, not a generic description of the system's overall logic or training methodology.
• Deployers must maintain technical and documentary infrastructure — including inference-level logs — sufficient to reconstruct and communicate the relevant decision parameters after the fact.
• Deployers must inform affected persons of their right to request explanation and, where applicable, their right to request human review of a decision, in a clear and accessible manner.
• Where exemptions apply (contractual necessity, legal obligation, explicit consent), deployers must still ensure adequate safeguards are in place, including a genuine human review mechanism.
• Providers supplying high-risk AI systems to deployers must furnish sufficient technical documentation and instructions under Articles 13 and 16 to enable deployers to meet their Article 82 obligations downstream.

Relationship to Other Articles

Article 82 does not operate in isolation and must be read alongside several interconnected provisions of the EU AI Act and external instruments.

Within the Regulation, Article 82 depends directly on the Annex III classification of high-risk AI systems; the right is triggered only where a system falls within that scope. It is closely linked to Article 13 (transparency and provision of information to deployers), Article 14 (human oversight requirements), Article 26 (obligations of deployers), and Article 72 (fundamental rights impact assessment obligations for certain public deployers).

Externally, Article 82 is explicitly designed to complement GDPR Article 22, which restricts solely automated decisions producing significant effects on individuals, and GDPR Articles 13–15, which govern information rights. Where both instruments apply, the AI Act explanation right adds an AI-specific layer of granularity to the GDPR's existing transparency framework. Practitioners should also consider the interaction with the proposed AI Liability Directive, where explanation records may become material in establishing causation in damages claims arising from AI-assisted decisions.

Compliance Timeline

The EU AI Act entered into force on 1 August 2024, twenty days after publication in the Official Journal of the European Union. Application is phased:

• February 2025: Provisions on prohibited AI practices (Article 5) became applicable.
• August 2025: Rules governing general-purpose AI models (Title VIII, Articles 51–56) and governance structures became applicable.
• August 2026: Rules applicable to high-risk AI systems covered by existing Union harmonisation legislation (Annex I) began applying.
• December 2026 / August 2027: The full high-risk AI system obligations under Title III — including deployer obligations under Article 26 and the Article 82 right to explanation — apply from 2 August 2026 for systems listed in Annex III, with a transitional period for certain high-risk systems already in service that extends to 2 August 2027.

Organisations deploying Annex III high-risk AI systems that are not yet compliant with Article 82 should treat December 2026 as a firm deadline and prioritise building explanation infrastructure and individual rights request workflows well in advance of that date.