# Regulation AI — EU AI Act Hub

> The reference hub for EU AI Act compliance: deadlines, Annex III/I, GPAI, omnibus changes and convergence with DORA/NIS2.

## About

Regulation AI — EU AI Act Hub is the reference hub for EU AI Act compliance, covering:
- AI Act deadlines and timeline (original + omnibus amendments)
- High-risk AI obligations (Annex I and Annex III)
- GPAI model rules and transparency requirements
- Prohibited practices (Art. 5), including NCII/CSAM bans
- Convergence with DORA and NIS2
- Compliance checklists and practical guides

**Last updated:** 2026-10-09

## Articles

- [EU AI Act — All 113 Articles (Regulation 2024/1689)](https://www.regulation-ai.eu/en/articles/): All 113 Articles. How many articles does the EU AI Act have? What is the structure of the EU AI Act?
- [Article 1 — Subject matter (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-1/): Subject matter. What does Article 1 of the EU AI Act establish? Does Article 1 impose direct obligations on businesses?
- [Article 10 — Data and data governance (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-10/): Data and data governance. What does Article 10 of the EU AI Act require? Who is subject to Article 10 of the EU AI Act?
- [Article 100 — Administrative fines on Union institutions and bodies (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-100/): Administrative fines on Union institutions and bodies. Why are EU institutions fined so much less than companies?
- [Article 101 — Penalties applicable to providers of general-purpose AI models (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-101/): Penalties applicable to providers of general-purpose AI models. What is the maximum fine for providers of general-purpose AI models under Article 101?
- [Article 102 — Amendments to Regulation (EU) No 300/2008 (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-102/): Amendments to Regulation (EU) No 300/2008. What does Article 102 of the EU AI Act amend? Who is affected by Article 102?
- [Article 103 — Amendments to Regulation (EU) No 167/2013 (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-103/): Amendments to Regulation (EU) No 167/2013. What does Article 103 of the EU AI Act amend?
- [Article 104 — Amendments to Regulation (EU) No 168/2013 (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-104/): Amendments to Regulation (EU) No 168/2013. What does Article 104 of the EU AI Act amend? Which vehicles are affected by Article 104?
- [Article 105 — Amendments to Directive 2014/90/EU (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-105/): Amendments to Directive 2014/90/EU. What does Article 105 of the EU AI Act change in Directive 2014/90/EU? Who is directly affected by Article 105?
- [Article 106 — Amendments to Directive (EU) 2016/797 (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-106/): Amendments to Directive (EU) 2016/797. What does Article 106 of the EU AI Act do? Who is affected by Article 106?
- [Article 107 — Amendments to Regulation (EU) 2018/858 (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-107/): Amendments to Regulation (EU) 2018/858. What does Article 107 of the EU AI Act amend? Who is affected by Article 107 of the EU AI Act?
- [Article 108 — Amendments to Regulation (EU) 2018/1139 (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-108/): Amendments to Regulation (EU) 2018/1139. What does Article 108 of the EU AI Act amend? Who is affected by Article 108?
- [Article 109 — Amendments to Regulation (EU) 2019/2144 (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-109/): Amendments to Regulation (EU) 2019/2144. What does Article 109 of the EU AI Act amend? Which vehicles and systems are affected by Article 109?
- [Article 11 — Technical documentation (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-11/): Technical documentation. What is the purpose of technical documentation under Article 11 of the EU AI Act?
- [Article 110 — Amendment to the Representative Actions Directive (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-110/): Amendment to the Representative Actions Directive. What kinds of AI Act breaches could trigger a representative action?
- [Article 111 — Transitional provisions (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-111/): Transitional provisions. What does Article 111 of the EU AI Act cover? Who benefits from the transitional provisions in Article 111?
- [Article 112 — Evaluation (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-112/): Evaluation. What does Article 112 of the EU AI Act require? When must the Commission submit its first evaluation report under Article 112?
- [Article 113 — Entry into force and application (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-113/): Entry into force and application. When did the EU AI Act enter into force? When does the EU AI Act become fully applicable?
- [Article 12 — Record-keeping (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-12/): Record-keeping. What does Article 12 of the EU AI Act require? Who is responsible for implementing record-keeping under Article 12?
- [Article 13 — Transparency and provision of information to deployers (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-13/): Transparency and provision of information to deployers. What does Article 13 of the EU AI Act require? Who is bound by Article 13?
- [Article 14 — Human oversight (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-14/): Human oversight. Who is responsible for implementing human oversight measures under Article 14? What does 'effective oversight' mean under Article 14?
- [Article 15 — Accuracy, robustness and cybersecurity (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-15/): Accuracy, robustness and cybersecurity. What does Article 15 of the EU AI Act require? Who is bound by Article 15?
- [Article 16 — Obligations of providers of high-risk AI systems (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-16/): Obligations of providers of high-risk AI systems. Who qualifies as a 'provider' under Article 16 of the EU AI Act?
- [Article 17 — Quality management system (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-17/): Quality management system. Who is required to establish a quality management system under Article 17?
- [Article 18 — Documentation keeping (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-18/): Documentation keeping. What documentation must providers of high-risk AI systems keep under Article 18?
- [Article 19 — Automatically generated logs (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-19/): Automatically generated logs. What are automatically generated logs under Article 19? Who is responsible for keeping logs under Article 19?
- [Article 2 — Scope (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-2/): Scope. Who does the EU AI Act apply to? Does the EU AI Act apply to AI systems developed and used outside the EU?
- [Article 20 — Corrective actions and duty of information (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-20/): Corrective actions and duty of information. What triggers the corrective action obligation under Article 20? Who must providers notify under Article 20?
- [Article 21 — Cooperation with competent authorities (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-21/): Cooperation with competent authorities. Who is required to cooperate with competent authorities under Article 21?
- [Article 22 — Authorised representatives of providers established outside the Union (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-22/): Authorised representatives of providers established outside the Union. Who must appoint an authorised representative under Article 22 of the EU AI Act?
- [Article 23 — Obligations of importers (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-23/): Obligations of importers. Who qualifies as an importer under Article 23 of the EU AI Act? What is the main obligation of an importer under Article 23?
- [Article 24 — Obligations of distributors (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-24/): Obligations of distributors. Who qualifies as a distributor under the EU AI Act? What is the primary obligation of a distributor under Article 24?
- [Article 25 — Responsibilities along the AI value chain (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-25/): Responsibilities along the AI value chain. Who does Article 25 of the EU AI Act apply to? When does a deployer become a provider under Article 25?
- [Article 26 — Obligations of deployers of high-risk AI systems (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-26/): Obligations of deployers of high-risk AI systems. Who qualifies as a deployer under Article 26 of the EU AI Act?
- [Article 27 — Fundamental rights impact assessment for high-risk AI systems (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-27/): Fundamental rights impact assessment for high-risk AI systems. Who is required to conduct a fundamental rights impact assessment under Article 27?
- [Article 28 — Notifying authorities (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-28/): Notifying authorities. What is a notifying authority under the EU AI Act?
- [Article 29 — Application of a conformity assessment body for notification (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-29/): Application of a conformity assessment body for notification. Who can apply for notification as a conformity assessment body under Article 29?
- [Article 3 — Definitions (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-3/): Definitions. What is the legal definition of an 'AI system' under the EU AI Act?
- [Article 30 — Notification procedure (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-30/): Notification procedure. What is the notification procedure under Article 30 of the EU AI Act?
- [Article 31 — Requirements relating to notified bodies (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-31/): Requirements relating to notified bodies. What is a notified body under the EU AI Act? Who decides whether an organisation qualifies as a notified body?
- [Article 32 — Presumption of conformity of notified bodies (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-32/): Presumption of conformity of notified bodies. What is the presumption of conformity for notified bodies under Article 32?
- [Article 33 — Subsidiaries of notified bodies and subcontracting (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-33/): Subsidiaries of notified bodies and subcontracting. Can a notified body subcontract conformity assessment tasks under the EU AI Act?
- [Article 34 — Operational obligations of notified bodies (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-34/): Operational obligations of notified bodies. What are the main operational obligations of notified bodies under Article 34?
- [Article 35 — Identification numbers and lists of notified bodies (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-35/): Identification numbers and lists of notified bodies. What is the purpose of assigning identification numbers to notified bodies under Article 35?
- [Article 36 — Changes to notifications (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-36/): Changes to notifications. What must a notified body do if its circumstances change after being notified?
- [Article 37 — Challenge to the competence of notified bodies (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-37/): Challenge to the competence of notified bodies. Who can challenge the competence of a notified body under Article 37?
- [Article 38 — Coordination of notified bodies (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-38/): Coordination of notified bodies. What is the purpose of the coordination mechanism for notified bodies under Article 38?
- [Article 39 — Conformity assessment bodies of third countries (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-39/): Conformity assessment bodies of third countries. Can a conformity assessment body established outside the EU be notified under the EU AI Act?
- [Article 4 — AI literacy (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-4/): AI literacy. Who is subject to the AI literacy obligation under Article 4? Does Article 4 require a formal certification or training programme?
- [Article 40 — Harmonised standards and standardisation deliverables (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-40/): Harmonised standards and standardisation deliverables. What is the purpose of harmonised standards under Article 40 of the EU AI Act?
- [Article 41 — Common specifications (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-41/): Common specifications. What are common specifications under Article 41 of the EU AI Act? When does Article 41 apply instead of harmonised standards?
- [Article 42 — Presumption of conformity with certain requirements (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-42/): Presumption of conformity with certain requirements. What is the presumption of conformity under Article 42 of the EU AI Act?
- [Article 43 — Conformity assessment (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-43/): Conformity assessment. What is a conformity assessment under Article 43 of the EU AI Act?
- [Article 44 — Certificates (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-44/): Certificates. What is the validity period of an EU AI Act conformity certificate? Who can issue certificates under Article 44 of the EU AI Act?
- [Article 45 — Information obligations on notified bodies (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-45/): Information obligations on notified bodies. What information must notified bodies disclose under Article 45? Who is subject to Article 45 obligations?
- [Article 46 — Derogation from conformity assessment procedure (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-46/): Derogation from conformity assessment procedure. What is the derogation under Article 46 of the EU AI Act? Who can invoke the Article 46 derogation?
- [Article 47 — EU declaration of conformity (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-47/): EU declaration of conformity. What is the EU declaration of conformity under Article 47 of the EU AI Act?
- [Article 48 — CE marking (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-48/): CE marking. Which AI systems must bear CE marking under Article 48? Who is responsible for affixing the CE mark on a high-risk AI system?
- [Article 49 — Registration (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-49/): Registration. Who is required to register an AI system under Article 49? What is the EU database for high-risk AI systems?
- [Article 5 — Prohibited AI practices (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-5/): Prohibited AI practices. What AI practices does Article 5 of the EU AI Act prohibit? When did the Article 5 prohibitions become applicable?
- [Article 50 — Transparency obligations for providers and deployers of certain AI systems (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-50/): Transparency obligations for providers and deployers of certain AI. Who must comply with Article 50 of the EU AI Act? Does Article 50 apply to all AI systems?
- [Article 51 — Classification of general-purpose AI models as models with systemic risk (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-51/): Article 51 of Regulation (EU) 2024/1689 — Classification of general-purpose AI models as models with systemic risk.
- [Article 52 — Systemic-risk classification procedure (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-52/): Systemic-risk classification procedure. When must a provider notify the Commission under Article 52? Can a provider contest a systemic-risk designation?
- [Article 53 — Obligations for all providers of general-purpose AI models (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-53/): Obligations for all providers of general-purpose AI models. Who is subject to Article 53 of the EU AI Act?
- [Article 54 — Authorised representatives of providers of general-purpose AI models established outside the Union (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-54/): Authorised representatives of providers of general-purpose AI models. Who must appoint an authorised representative under Article 54 of the EU AI Act?
- [Article 55 — Obligations for providers of general-purpose AI models with systemic risk (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-55/): Obligations for providers of general-purpose AI models with systemic. Who is subject to the obligations under Article 55?
- [Article 56 — Codes of practice (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-56/): Codes of practice. Is adhering to a code of practice mandatory? What happens if no adequate code exists?
- [Article 57 — AI regulatory sandboxes (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-57/): AI regulatory sandboxes. What is an AI regulatory sandbox under Article 57 of the EU AI Act? Who can access an AI regulatory sandbox under Article 57?
- [Article 58 — Conditions for the establishment and operation of AI regulatory sandboxes (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-58/): Conditions for the establishment and operation of AI regulatory. What is an AI regulatory sandbox under Article 58?
- [Article 59 — Processing of personal data in regulatory sandboxes (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-59/): Processing of personal data in regulatory sandboxes. Can personal data be processed in an AI regulatory sandbox under the EU AI Act?
- [Article 6 — Classification rules for high-risk AI systems (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-6/): Classification rules for high-risk AI systems. What makes an AI system 'high-risk' under Article 6?
- [Article 60 — Testing of high-risk AI systems in real-world conditions outside AI regulatory sandboxes (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-60/): Testing of high-risk AI systems in real-world conditions outside AI. Who can conduct real-world testing under Article 60?
- [Article 61 — Informed consent in real-world testing (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-61/): Informed consent in real-world testing. Can a testing subject withdraw after the test has started? How does Article 61 interact with the GDPR?
- [Article 62 — Measures for providers and deployers that are SMEs, including start-ups (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-62/): Measures for providers and deployers that are SMEs, including start-ups. Does Article 62 exempt SMEs from EU AI Act obligations?
- [Article 63 — Derogations from certain requirements applicable to high-risk AI systems for certain operators (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-63/): Derogations from certain requirements applicable to high-risk AI. Who can benefit from the derogations under Article 63 of the EU AI Act?
- [Article 64 — AI Office (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-64/): AI Office. What is the AI Office established under Article 64 of the EU AI Act? What are the main functions of the AI Office?
- [Article 65 — European Artificial Intelligence Board (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-65/): European Artificial Intelligence Board. What is the European Artificial Intelligence Board established by Article 65?
- [Article 66 — Tasks of the Board (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-66/): Tasks of the Board. What is the EU AI Office Board and what does Article 66 establish? Does Article 66 create direct obligations for AI providers or deployers?
- [Article 67 — Advisory forum (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-67/): Advisory forum. What is the Advisory forum under Article 67 of the EU AI Act? Who can participate in the Advisory forum?
- [Article 68 — Scientific panel of independent experts (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-68/): Scientific panel of independent experts. What is the scientific panel established under Article 68 of the EU AI Act?
- [Article 69 — Access to the pool of experts by the Member States (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-69/): Access to the pool of experts by the Member States. Why would a national authority use the pool of experts? Who pays for the experts?
- [Article 7 — Amendments to Annex III (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-7/): Amendments to Annex III. What is the purpose of Article 7 of the EU AI Act? Who is affected by Article 7?
- [Article 70 — National competent authority (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-70/): National competent authority. What is the role of the national competent authority under Article 70 of the EU AI Act?
- [Article 71 — EU database for high-risk AI systems (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-71/): EU database for high-risk AI systems. What is the EU database for high-risk AI systems established under Article 71?
- [Article 72 — Post-market monitoring by providers and post-market monitoring plan for high-risk AI systems (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-72/): Post-market monitoring by providers and post-market monitoring plan. What is the purpose of post-market monitoring under Article 72 of the EU AI Act?
- [Article 73 — Reporting of serious incidents (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-73/): Reporting of serious incidents. Who is required to report serious incidents under Article 73? What qualifies as a 'serious incident' under Article 73?
- [Article 74 — Market surveillance and control of AI systems in Union territory (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-74/): Market surveillance and control of AI systems in Union territory. Which authorities are responsible for market surveillance under Article 74 of the EU AI Act?
- [Article 75 — Mutual assistance, market surveillance, and control of general-purpose AI models (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-75/): Mutual assistance, market surveillance, and control of general-purpose. What is the purpose of Article 75 of the EU AI Act?
- [Article 76 — Supervision of testing in real-world conditions by market surveillance authorities (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-76/): Article 76 of Regulation (EU) 2024/1689 — Supervision of testing in real-world conditions by market surveillance authorities.
- [Article 77 — Powers of authorities protecting fundamental rights (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-77/): Powers of authorities protecting fundamental rights. What is the purpose of Article 77 of the EU AI Act? Which authorities are covered by Article 77?
- [Article 78 — Confidentiality (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-78/): Confidentiality. What information must market surveillance authorities keep confidential under Article 78?
- [Article 79 — National procedure for AI systems presenting a risk (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-79/): National procedure for AI systems presenting a risk. Who can trigger an Article 79 evaluation? What if the operator disputes the finding?
- [Article 8 — Compliance with the requirements (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-8/): Compliance with the requirements. What does Article 8 of the EU AI Act require? Who is responsible for compliance under Article 8?
- [Article 80 — Procedure for systems misclassified as non-high-risk (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-80/): Procedure for systems misclassified as non-high-risk. What makes Article 80 important in practice?
- [Article 81 — Union safeguard procedure (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-81/): Union safeguard procedure. Why does the AI Act need a safeguard procedure? What should an operator do while the procedure runs?
- [Article 82 — Compliant AI systems which present a risk (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-82/): Compliant AI systems which present a risk. How can a compliant system still present a risk? Does Article 82 create liability?
- [Article 83 — Formal non-compliance (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-83/): Formal non-compliance. Why sanction paperwork when the system works fine? How does Article 83 differ from Articles 79 and 82?
- [Article 84 — Union testing facilities (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-84/): Union testing facilities. What are Union testing facilities under Article 84 of the EU AI Act? Who can use Union testing facilities?
- [Article 85 — Right to lodge a complaint with a market surveillance authority (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-85/): Right to lodge a complaint with a market surveillance authority. Who can lodge a complaint under Article 85 of the EU AI Act?
- [Article 86 — Right to explanation of individual decision-making (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-86/): Right to explanation of individual decision-making. What is the right to explanation under Article 86 of the EU AI Act?
- [Article 87 — Whistleblowing (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-87/): Whistleblowing. What protection does Article 87 of the EU AI Act provide to whistleblowers? Who can report violations under Article 87?
- [Article 88 — Enforcement of the obligations of GPAI providers (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-88/): Enforcement of the obligations of GPAI providers. Why is GPAI enforcement centralised rather than national?
- [Article 89 — Monitoring actions of the AI Office (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-89/): Monitoring actions of the AI Office. What can a downstream provider complain about? Does signing a code of practice reduce monitoring exposure?
- [Article 9 — Risk management system (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-9/): Risk management system. Who must implement a risk management system under Article 9? What does the risk management system under Article 9 need to cover?
- [Article 90 — Alerts of systemic risks by the scientific panel (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-90/): Alerts of systemic risks by the scientific panel. Who sits on the scientific panel? What does a qualified alert change for a provider?
- [Article 91 — Power to request documentation and information (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-91/): Power to request documentation and information. What exactly can the Commission ask for? How should a provider prepare?
- [Article 92 — Power to conduct evaluations (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-92/): Power to conduct evaluations. Can the Commission really demand source-code access? What should a provider do when an evaluation opens?
- [Article 93 — Power to request measures (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-93/): Power to request measures. What can the Commission request under Article 93 of the EU AI Act? Which companies does Article 93 affect?
- [Article 94 — Procedural rights of GPAI economic operators (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-94/): Procedural rights of GPAI economic operators. Why does one sentence deserve a whole article? What should a provider do with these rights in practice?
- [Article 95 — Codes of conduct for voluntary application of specific requirements (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-95/): Codes of conduct for voluntary application of specific requirements. What is the purpose of codes of conduct under Article 95 of the EU AI Act?
- [Article 96 — Guidelines from the Commission on the implementation of this Regulation (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-96/): Guidelines from the Commission on the implementation of this Regulation. What is the purpose of the Commission guidelines under Article 96 of the EU AI Act?
- [Article 97 — Exercise of the delegation (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-97/): Exercise of the delegation. What is the purpose of Article 97 of the EU AI Act? How long does the delegation of power last under Article 97?
- [Article 98 — Committee procedure (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-98/): Committee procedure. What is the committee procedure under Article 98 of the EU AI Act? What is the examination procedure referenced in Article 98?
- [Article 99 — Penalties (EU AI Act)](https://www.regulation-ai.eu/en/articles/article-99/): Penalties. What is the maximum fine under Article 99 of the EU AI Act? Who can be fined under Article 99?
- [CSRD and AI Act: What Your SME Needs to Know in 2025](https://www.regulation-ai.eu/en/articles/csrd-ai-act-sme-2025/): The intersecting obligations of CSRD and the AI Act for European SMEs: timeline, exemptions, and a concrete action plan for your business.

## AI Act

- [EU AI Act: Complete Compliance Guide (2025–2028)](https://www.regulation-ai.eu/en/ai-act/): The EU AI Act (Regulation 2024/1689) is the world's first comprehensive AI law. It applies in tiers: prohibited practices from February 2025, GPAI rules from

## Changes

- [Changes to Regulation (EU) 2024/1689 — the AI Act as it now stands](https://www.regulation-ai.eu/en/changes/): One amending act has touched the AI Act since it entered into force: Regulation (EU) 2026/1744, the Digital Omnibus on AI, in force 27 July 2026.

## Deadlines

- [EU AI Act Compliance Deadlines — Complete Timeline 2025–2028](https://www.regulation-ai.eu/en/deadlines/): Complete EU AI Act compliance timeline updated for the 2026 Digital Omnibus amendments. Prohibited practices: 2 February 2025. GPAI: 2 August 2025.

## Annex III

- [Annex III High-risk AI: Obligations, Scope and Deadline (2 December 2027)](https://www.regulation-ai.eu/en/annex-iii/): Annex III of the EU AI Act defines 8 categories of standalone high-risk AI systems. Providers and deployers must comply by 2 December 2027 (extended from

## GPAI

- [GPAI Model Rules under the EU AI Act — What Providers Must Do](https://www.regulation-ai.eu/en/gpai/): GPAI means general-purpose AI — a model trained at scale that performs a wide range of tasks, such as an LLM. Chapter 5 rules have applied since 2 August 2025.

## Annex I

- [Annex I High-risk AI: Safety Components in Regulated Products (Deadline: 2 August 2028)](https://www.regulation-ai.eu/en/annex-i/): Annex I of the EU AI Act covers AI systems that are safety components of products already regulated under EU product safety legislation — medical devices

## Prohibited Practices

- [EU AI Act Prohibited Practices (Art. 5): In Force Since February 2025](https://www.regulation-ai.eu/en/prohibited-practices/): EU AI Act Article 5 prohibits eight AI practices with unacceptable risk. These bans apply from 2 February 2025.

## Transparency Obligations

- [EU AI Act Transparency Obligations (Art. 50) — Chatbots, Deepfakes & Synthetic Content](https://www.regulation-ai.eu/en/transparency-obligations/): Article 50 has applied since 2 August 2026 and is risk-independent — it catches chatbots, synthetic content, emotion recognition and deepfakes whatever your
- [Commission Guidelines on the AI Act Transparency Obligations (Article 50)](https://www.regulation-ai.eu/en/transparency-obligations/guidelines/): On 20 July 2026 the Commission published C(2026) 5054 final — guidelines on how the Article 50 transparency obligations are to be applied.

## Technical Documentation

- [EU AI Act Technical Documentation (Art. 11): What High-Risk AI Systems Must Prepare](https://www.regulation-ai.eu/en/technical-documentation/): High-risk AI systems must maintain a complete technical file before placing on the EU market. Art.

## Providers vs Deployers

- [EU AI Act: Providers vs. Deployers — Who Is Responsible for What?](https://www.regulation-ai.eu/en/providers-vs-deployers/): The EU AI Act splits obligations between providers (who build AI systems) and deployers (who put them into practice).

## Glossary

- [EU AI Act Glossary: Key Definitions and Terms Explained](https://www.regulation-ai.eu/en/glossary/): Official definitions from the EU AI Act (Art. 3) and commonly used terms in EU AI regulation. Understanding what the Act means by 'AI system', 'provider'

## Compliance Checklist

- [EU AI Act Compliance Checklist: Step-by-Step FAQ Guide](https://www.regulation-ai.eu/en/compliance-checklist/): A step-by-step EU AI Act compliance checklist in question-and-answer form: scope, deadlines still ahead, risk classification, prohibited practices, GPAI

## Post-Market Monitoring

- [EU AI Act Post-Market Monitoring (Art. 72): Obligations for High-Risk AI Providers](https://www.regulation-ai.eu/en/post-market-monitoring/): Compliance does not end at market entry. Art. 72 requires providers of high-risk AI systems to maintain an active post-market monitoring system, collect

## EU AI Office

- [EU AI Office: Mandate, Powers, and Role in AI Act Enforcement](https://www.regulation-ai.eu/en/eu-ai-office/): The EU AI Office, established within the European Commission, is the primary EU-level body overseeing GPAI models and coordinating AI Act enforcement.

## Financial Sector

- [EU AI Act in the Financial Sector: Banks, Insurers, and Credit Institutions](https://www.regulation-ai.eu/en/financial-sector/): Banks, insurers, asset managers, and payment institutions face EU AI Act obligations layered on top of existing financial regulation (DORA, MiFID II, GDPR

## Sectors

- [EU AI Act by Sector — Industry-Specific Compliance Guide](https://www.regulation-ai.eu/en/sectors/): Sector-specific EU AI Act compliance guides for healthcare, HR, public sector, transport, insurance, retail, SMEs, and education.
- [Banking & Finance — EU AI Act Compliance Guide](https://www.regulation-ai.eu/en/sectors/banking/): EU AI Act obligations for banks, credit institutions, and fintech firms. Credit scoring AI, AML systems, algorithmic trading, DORA overlap, and EBA guidelines.
- [Education & EdTech — EU AI Act Compliance](https://www.regulation-ai.eu/en/sectors/education/): EU AI Act obligations for education AI: admissions, automated grading, proctoring, and learning platforms.
- [Healthcare & Life Sciences — EU AI Act Compliance](https://www.regulation-ai.eu/en/sectors/healthcare/): EU AI Act obligations for medical device AI, diagnostic systems, and clinical decision support. Covers MDR/IVDR interaction and Annex I dual compliance.
- [HR & Recruitment — EU AI Act Compliance](https://www.regulation-ai.eu/en/sectors/hr-recruitment/): EU AI Act obligations for AI used in recruitment, employee monitoring, and performance assessment. Annex III category 4 covers all employment AI systems.
- [Insurance — EU AI Act Compliance](https://www.regulation-ai.eu/en/sectors/insurance/): EU AI Act obligations for insurance AI: actuarial models, underwriting, claims assessment, and pricing AI for natural persons.
- [Public Sector & Justice — EU AI Act Compliance](https://www.regulation-ai.eu/en/sectors/public-sector/): EU AI Act obligations for AI in public administration, law enforcement, border control, and the justice system.
- [Retail, E-commerce & Call Centres — EU AI Act Compliance](https://www.regulation-ai.eu/en/sectors/retail/): EU AI Act obligations for retail and call centre AI: chatbot disclosure, emotion recognition transparency, employee monitoring, and customer AI. Covers Art.
- [SMEs — EU AI Act Compliance Guide](https://www.regulation-ai.eu/en/sectors/sme/): EU AI Act compliance for small and medium-sized enterprises. SME-specific provisions, sandbox access, reduced fees, and practical guidance for AI deployers and
- [Transport & Critical Infrastructure — EU AI Act Compliance](https://www.regulation-ai.eu/en/sectors/transport/): EU AI Act obligations for AI in autonomous vehicles, traffic management, aviation, rail, and critical infrastructure.

## Third-Party AI

- [Using Third-Party AI Systems and LLMs: Deployer Obligations Under the EU AI Act](https://www.regulation-ai.eu/en/third-party-ai/): 90% of organisations using AI are deployers integrating third-party models — OpenAI, Anthropic, Azure AI, or AI SaaS tools.

## AI Act vs DORA vs NIS2

- [AI Act vs DORA vs NIS2: Compliance Convergence for Financial Organisations](https://www.regulation-ai.eu/en/ai-act-vs-dora-vs-nis2/): Financial institutions must navigate AI Act, DORA, and NIS2 with overlapping obligations and timelines.

## Omnibus

- [EU AI Act Digital Omnibus 2026: What It Changes](https://www.regulation-ai.eu/en/omnibus/): The 2026 Digital Omnibus moved four AI Act deadlines, not two: Annex III to 2 December 2027, Annex I to 2 August 2028, national sandboxes to 2 August 2027, and
- [EU AI Act Omnibus 2026: New Compliance Deadlines Explained](https://www.regulation-ai.eu/en/omnibus/ai-act-omnibus-deadlines/): The 2026 Digital Omnibus on AI extended two critical AI Act deadlines: Annex III standalone high-risk systems to 2 December 2027, and Annex I embedded systems

## Tools

- [Free EU AI Act Compliance Tools — Risk Classifier, GPAI Checker, Compliance Checklist](https://www.regulation-ai.eu/en/tools/): Seven free interactive tools for EU AI Act compliance: compliance checklist wizard, AI risk classifier, GPAI checker, deadline calculator, sanction estimator
- [AI Risk Classifier — Is Your AI System High-Risk Under the EU AI Act?](https://www.regulation-ai.eu/en/tools/ai-risk-classifier/): Answer 3-4 questions to classify your AI system under the EU AI Act: Annex I (product embedded), Annex III (standalone high-risk), GPAI, transparency-only, or
- [EU AI Act Compliance Checker — Interactive Checklist & Score](https://www.regulation-ai.eu/en/tools/compliance-checklist/): Interactive EU AI Act compliance checklist. Select your role (provider, deployer, GPAI developer) and AI system type, check off completed obligations, and get
- [Conformity Assessment Selector — Which EU AI Act Procedure Applies to Your AI?](https://www.regulation-ai.eu/en/tools/conformity-selector/): Determine the correct EU AI Act conformity assessment procedure for your AI system. Self-assessment (Annex VI) vs. third-party (Annex VII).
- [EU AI Act Deadline Calculator — When Does Your AI System Need to Comply?](https://www.regulation-ai.eu/en/tools/deadline-calculator/): Calculate your EU AI Act compliance deadline based on your AI system type. Prohibited practices: Feb 2025. GPAI: Aug 2025. Annex III: Dec 2027.
- [DORA + EU AI Act Overlap Detector — Dual Compliance for Financial Entities](https://www.regulation-ai.eu/en/tools/dora-ai-overlap/): Financial entities subject to DORA face simultaneous EU AI Act obligations. This tool identifies where DORA ICT requirements and AI Act obligations overlap for
- [GPAI Checker — Does Your AI Model Have EU AI Act GPAI Obligations?](https://www.regulation-ai.eu/en/tools/gpai-checker/): Check whether your AI model qualifies as GPAI under the EU AI Act and which obligations apply: standard (all providers), systemic risk (>10²⁵ FLOPs), or
- [EU AI Act Sanction Estimator — Calculate Your Maximum Fine](https://www.regulation-ai.eu/en/tools/sanction-estimator/): Estimate your maximum EU AI Act fine based on violation type and company turnover. Prohibited practices: €35M/7%. High-risk non-compliance: €15M/3%.

## Academy

- [EU AI Act Training & Certification — Online Courses for Compliance Teams](https://www.regulation-ai.eu/en/academy/): Free EU AI Act training: 33 modules across five tracks, a server-graded exam and a publicly verifiable certificate. Plus the Annex IV and Art.
- [AI Act Compliance & DPO Certification — Running the Programme](https://www.regulation-ai.eu/en/academy/ai-act-compliance/): Seven-module certification for compliance officers, DPOs and legal counsel: the inventory and classification register, the Art.
- [AI Act Compliance & DPO Certification Examination](https://www.regulation-ai.eu/en/academy/ai-act-compliance/exam/): Sit the AI Act Compliance & DPO certification examination: 20 questions drawn from a bank of over 90, stratified across all seven modules, graded on the server.
- [Module 1 — The Map, and the Timetable That Actually Applies](https://www.regulation-ai.eu/en/academy/ai-act-compliance/module-1/): Module 1 of the AI Act Compliance certification: who owes what across the roles, what is in force today after the Digital Omnibus, and how to sequence a
- [Module 2 — The Inventory and Classification Register](https://www.regulation-ai.eu/en/academy/ai-act-compliance/module-2/): Module 2 of the AI Act Compliance certification: the register that answers the first question a supervisor asks, the fields that cannot be reconstructed, and
- [Module 3 — The Article 4 AI Literacy Programme](https://www.regulation-ai.eu/en/academy/ai-act-compliance/module-3/): Module 3 of the AI Act Compliance certification: what the July 2026 rewrite of Art. 4 changed, why evidence shifted from levels to measures, and the register
- [Module 4 — Governance Gates: Procurement, Purpose, Modification](https://www.regulation-ai.eu/en/academy/ai-act-compliance/module-4/): Module 4 of the AI Act Compliance certification: three gates that between them prevent most of the expensive failures in this Regulation, and what each one
- [Module 5 — AI Act and GDPR Together](https://www.regulation-ai.eu/en/academy/ai-act-compliance/module-5/): Module 5 of the AI Act Compliance certification: DPIA and FRIA, GDPR Art. 22 and AI Act Art. 86, lawful basis, the Art.
- [Module 6 — Incidents, Complaints and Whistleblowing](https://www.regulation-ai.eu/en/academy/ai-act-compliance/module-6/): Module 6 of the AI Act Compliance certification: the Art. 26(5) suspension duty, Art. 73 serious incident reporting, the Art. 85 complaint right, Art.
- [Module 7 — The Audit File and the Board Conversation](https://www.regulation-ai.eu/en/academy/ai-act-compliance/module-7/): Module 7 of the AI Act Compliance certification: what to hold, what to report upward, what to budget, and how to state honestly what is not done.
- [AI Act Deployer Certification — For Organisations That Buy AI, Not Build It](https://www.regulation-ai.eu/en/academy/ai-act-deployer/): Seven-module certification for deployers of AI systems under the EU AI Act: Art. 26 obligation by obligation, human oversight, logs, the Art.
- [AI Act Deployer Certification Examination](https://www.regulation-ai.eu/en/academy/ai-act-deployer/exam/): Sit the AI Act Deployer certification examination: 20 questions drawn from a bank of over 100, stratified across all seven modules, graded on the server.
- [Module 1 — Are You a Deployer, and of What?](https://www.regulation-ai.eu/en/academy/ai-act-deployer/module-1/): Module 1 of the AI Act Deployer certification: Art. 3(4), building the system inventory, classifying from the buyer's seat, and where the Art.
- [Module 2 — Article 26, Paragraph by Paragraph](https://www.regulation-ai.eu/en/academy/ai-act-deployer/module-2/): Module 2 of the AI Act Deployer certification: the twelve paragraphs of Art. 26 turned into an operating procedure, with the evidence each one produces and the
- [Module 3 — Human Oversight That Survives a Review](https://www.regulation-ai.eu/en/academy/ai-act-deployer/module-3/): Module 3 of the AI Act Deployer certification: Art. 14 as a design duty on the provider, Art. 26(2) as an assignment duty on the deployer, automation bias, and
- [Module 4 — Logs, Monitoring, Suspension and Incidents](https://www.regulation-ai.eu/en/academy/ai-act-deployer/module-4/): Module 4 of the AI Act Deployer certification: Art. 12 logging, the six-month floor in Art. 26(6), monitoring against the instructions, when to suspend under
- [Module 5 — The Article 25 Trap: When a Deployer Becomes a Provider](https://www.regulation-ai.eu/en/academy/ai-act-deployer/module-5/): Module 5 of the AI Act Deployer certification: the three Art. 25 triggers that reclassify a deployer as a provider, what lands on you when one fires, and how
- [Module 6 — Transparency You Owe Directly (and Owe Today)](https://www.regulation-ai.eu/en/academy/ai-act-deployer/module-6/): Module 6 of the AI Act Deployer certification: Art. 50(3) and 50(4) as deployer duties in force since August 2026, Art.
- [Module 7 — The Evidence File a Supervisor Actually Asks For](https://www.regulation-ai.eu/en/academy/ai-act-deployer/module-7/): Module 7 of the AI Act Deployer certification: assembling the deployer file — classification record, the Art. 27 FRIA determination, the Art.
- [AI Act Fundamentals — Free 5-Module Course on EU AI Act Compliance](https://www.regulation-ai.eu/en/academy/ai-act-fundamentals/): Free 5-module EU AI Act training course: scope, risk classification (Annex I/III/GPAI), core obligations, deadlines, and enforcement.
- [Module 1 — What the EU AI Act Actually Regulates (and What It Does Not)](https://www.regulation-ai.eu/en/academy/ai-act-fundamentals/module-1/): Module 1 of the free EU AI Act Fundamentals course: what counts as an AI system under Art. 3(1), who the Act binds, extraterritorial reach, and the exclusions
- [Module 2 — Risk Classification: Why Most Financial AI Is Not High-Risk](https://www.regulation-ai.eu/en/academy/ai-act-fundamentals/module-2/): Module 2 of the free EU AI Act Fundamentals course: the four risk tiers, Annex I vs Annex III, and the carve-outs that keep fraud detection, KYC matching and
- [Module 3 — Obligations by Role: Provider, Deployer, and the Art. 25 Trap](https://www.regulation-ai.eu/en/academy/ai-act-fundamentals/module-3/): Module 3 of the free EU AI Act Fundamentals course: what providers owe under Art. 8-17, what deployers owe under Art.
- [Module 4 — GPAI Models: Who Is the Provider After You Fine-Tune?](https://www.regulation-ai.eu/en/academy/ai-act-fundamentals/module-4/): Module 4 of the free EU AI Act Fundamentals course: general-purpose AI obligations under Art. 53-55, the systemic-risk threshold, and the one-third compute
- [Module 5 — Deadlines and Enforcement: What Is Due, and What It Costs](https://www.regulation-ai.eu/en/academy/ai-act-fundamentals/module-5/): Module 5 of the free EU AI Act Fundamentals course: the full application timetable after the Digital Omnibus, who enforces what, and the three penalty bands of
- [AI Act GPAI Certification — General-Purpose AI Models and What Builds on Them](https://www.regulation-ai.eu/en/academy/ai-act-gpai/): Six-module certification on Chapter V of the EU AI Act: the model/system boundary, Art. 53 obligations, systemic risk under Art.
- [AI Act GPAI Certification Examination](https://www.regulation-ai.eu/en/academy/ai-act-gpai/exam/): Sit the AI Act GPAI certification examination: 20 questions drawn from a bank of nearly 90, stratified across all six modules, graded on the server.
- [Module 1 — Model or System? The Chapter V Boundary](https://www.regulation-ai.eu/en/academy/ai-act-gpai/module-1/): Module 1 of the AI Act GPAI certification: Art. 3(63), significant generality, the research carve-out, and why an organisation building on foundation models is
- [Module 2 — What Every GPAI Provider Owes (Art. 53)](https://www.regulation-ai.eu/en/academy/ai-act-gpai/module-2/): Module 2 of the AI Act GPAI certification: Annex XI technical documentation, Annex XII information to downstream providers, the copyright policy and TDM
- [Module 3 — Systemic Risk (Art. 51, 52 and 55)](https://www.regulation-ai.eu/en/academy/ai-act-gpai/module-3/): Module 3 of the AI Act GPAI certification: the 10^25 FLOP presumption and how to rebut it, the two-week notification under Art.
- [Module 4 — Codes of Practice and the Standards Gap (Art. 56)](https://www.regulation-ai.eu/en/academy/ai-act-gpai/module-4/): Module 4 of the AI Act GPAI certification: what adherence to a code of practice demonstrates, what it does not, and how to work while harmonised standards do
- [Module 5 — Becoming a Model Provider: Fine-Tuning, Modification and Open Source](https://www.regulation-ai.eu/en/academy/ai-act-gpai/module-5/): Module 5 of the AI Act GPAI certification: when modification makes you the provider of a model, what the open-source relief covers, and the Art.
- [Module 6 — Building Downstream: You Are the Provider of the System](https://www.regulation-ai.eu/en/academy/ai-act-gpai/module-6/): Module 6 of the AI Act GPAI certification: Art. 50 transparency for generative systems, the Art.
- [AI Act Provider Certification — Building and Placing High-Risk AI on the EU Market](https://www.regulation-ai.eu/en/academy/ai-act-provider/): Eight-module certification for providers of high-risk AI systems: risk management, data governance, Annex IV documentation, oversight by design, conformity
- [AI Act Provider Certification Examination](https://www.regulation-ai.eu/en/academy/ai-act-provider/exam/): Sit the AI Act Provider certification examination: 25 questions drawn from a bank of over 100, stratified across all eight modules, graded on the server.
- [Module 1 — Are You a Provider, and by Which Route?](https://www.regulation-ai.eu/en/academy/ai-act-provider/module-1/): Module 1 of the AI Act Provider certification: Art. 3(3), placing on the market versus putting into service, inheriting provider status through Art.
- [Module 2 — The Risk Management System (Art. 9)](https://www.regulation-ai.eu/en/academy/ai-act-provider/module-2/): Module 2 of the AI Act Provider certification: Art. 9 as a continuous iterative process — identification, estimation, evaluation, mitigation, residual risk
- [Module 3 — Data and Data Governance (Art. 10)](https://www.regulation-ai.eu/en/academy/ai-act-provider/module-3/): Module 3 of the AI Act Provider certification: Art. 10 governance for training, validation and testing data, the bias examination duty, and the narrow Art.
- [Module 4 — Technical Documentation (Art. 11 and Annex IV)](https://www.regulation-ai.eu/en/academy/ai-act-provider/module-4/): Module 4 of the AI Act Provider certification: the Annex IV file element by element, when it must exist, how long it is kept, and the simplified form available
- [Module 5 — Logging, Instructions and Oversight by Design (Art. 12-14)](https://www.regulation-ai.eu/en/academy/ai-act-provider/module-5/): Module 5 of the AI Act Provider certification: automatic record-keeping under Art. 12, the instructions for use required by Art.
- [Module 6 — Accuracy, Robustness, Cybersecurity and the Quality Management System](https://www.regulation-ai.eu/en/academy/ai-act-provider/module-6/): Module 6 of the AI Act Provider certification: Art. 15 declared performance, resilience and AI-specific attacks — data poisoning, model poisoning, adversarial
- [Module 7 — Conformity Assessment, Declaration, CE Marking, Registration](https://www.regulation-ai.eu/en/academy/ai-act-provider/module-7/): Module 7 of the AI Act Provider certification: choosing between Annex VI internal control and Annex VII notified body assessment, the EU declaration of
- [Module 8 — After the Market: Post-Market Monitoring and Serious Incidents](https://www.regulation-ai.eu/en/academy/ai-act-provider/module-8/): Module 8 of the AI Act Provider certification: the Art. 72 post-market monitoring system and plan, Art.
- [EU AI Act Certification — How to Get Certified in AI Compliance](https://www.regulation-ai.eu/en/academy/certification/): Complete guide to EU AI Act certification: what the regulation requires (Art. 4 AI literacy), what certifications exist, how to get certified, and what the
- [EU AI Act Corporate Training — Executive, In-House & Team Programmes](https://www.regulation-ai.eu/en/academy/corporate-training/): EU AI Act corporate training for compliance teams, legal, and executives: in-house workshops, executive briefings, and custom programmes. One Art.
- [EU AI Act Certification Exam — Free AI Literacy Certificate (Art. 4)](https://www.regulation-ai.eu/en/academy/exam/): Sit the free EU AI Act Fundamentals exam: 15 questions, 70% to pass, and a certificate with a public verification id. Evidence of Art.

## General

- [Your EU AI Act Certificate — View, Print and Share](https://www.regulation-ai.eu/en/certificate/): Open any regulation-ai.eu certificate from its public id: a printable sheet, an Add to LinkedIn profile link, and the Open Badge assertion. No account needed.
- [Privacy Notice — regulation-ai.eu](https://www.regulation-ai.eu/en/privacy/): What regulation-ai.eu collects, why, who processes it and how to have it deleted. Audience measurement only if you accept it; no advertising trackers.
- [Verify an EU AI Act Certificate — Public Certificate Check](https://www.regulation-ai.eu/en/verify/): Check any regulation-ai.eu EU AI Act certificate by its public id. Shows the holder name, course, score and issue date. No account needed.

## Ai-act-vs-gdpr

- [EU AI Act vs GDPR: How the Two Regulations Interact](https://www.regulation-ai.eu/en/ai-act-vs-gdpr/): The AI Act regulates systems, the GDPR regulates personal data. Where they overlap, what each adds, and why an existing DPIA does not discharge AI Act duties.

## Ai-literacy

- [AI Literacy under Article 4 of the EU AI Act: What Is Actually Required](https://www.regulation-ai.eu/en/ai-literacy/): Article 4 has applied since 2 February 2025 and binds every provider and deployer of AI — not just high-risk ones.

## Analysis

- [EU AI Act Analysis — Enforcement, Deadlines and Regulatory Change](https://www.regulation-ai.eu/en/blog/): Dated analysis of EU AI Act enforcement, Commission guidance and deadline changes — what each development actually obliges providers and deployers to do, and
- [AI Watermarking: What's Been Deployed, the Results So Far, and the Consequences](https://www.regulation-ai.eu/en/blog/ai-watermarking-deployment-results-consequences/): AI Act Article 50 requires machine-readable AI watermarks. Here's what SynthID and C2PA actually deployed, what studies show, and the consequences.
- [EU AI Act Enforcement Has Started: What Changed on 2 August 2026](https://www.regulation-ai.eu/en/blog/eu-ai-act-enforcement-august-2026/): On 2 August 2026 the EU AI Act stopped being a paper deadline. Article 50 transparency obligations now apply, the AI Office can fine general-purpose AI
- [European Commission Publishes Guidelines on AI Act Transparency Obligations](https://www.regulation-ai.eu/en/blog/european-commission-transparency-obligations-guidelines-ai-act/): On 20 July 2026 the European Commission published guidelines on the Article 50 transparency obligations of the EU AI Act, which apply to providers and
- [The Marking Reprieve Is Closing: What Providers Are Doing With Their Older Models](https://www.regulation-ai.eu/en/blog/marking-older-models-december-deadline/): Generative models already in service before 2 August 2026 must mark their outputs by 2 December.

## Conformity-assessment

- [EU AI Act Conformity Assessment: Routes, Notified Bodies and CE Marking](https://www.regulation-ai.eu/en/conformity-assessment/): Which conformity assessment route applies to your high-risk AI system, when a notified body is required, and what CE marking, the EU declaration and

## High-risk

- [High-Risk AI Systems under the EU AI Act: Classification and Obligations](https://www.regulation-ai.eu/en/high-risk/): How the EU AI Act classifies high-risk AI: the Annex I and Annex III routes, the Article 6(3) exception, provider and deployer duties, and the applicable

## Newsletter

- [EU AI Act Newsletter — Weekly Compliance Insights](https://www.regulation-ai.eu/en/newsletter/): Subscribe to the EU AI Act newsletter: weekly regulatory updates, deadline alerts, and practical compliance tips for teams implementing the AI Act.

## Penalties

- [EU AI Act Penalties and Fines: The Three Tiers Explained](https://www.regulation-ai.eu/en/penalties/): EU AI Act fines run in three tiers: €35M or 7% of turnover for prohibited practices, €15M or 3% for most breaches, €7.5M or 1% for misleading information.

## Toolkits

- [EU AI Act Toolkits — Working Templates for Compliance Teams](https://www.regulation-ai.eu/en/toolkits/): Working Excel templates for EU AI Act compliance: system inventory and classification, Art. 9 risk register, Annex IV technical file, Art.
- [EU AI Act Complete Toolkit — All Seven Working Files](https://www.regulation-ai.eu/en/toolkits/complete/): Every working file on this site: inventory and classification, the three high-risk templates, transparency, vendor due diligence and the literacy programme.
- [EU AI Act Data Governance Checklist — Art. 10 Training Data Requirements](https://www.regulation-ai.eu/en/toolkits/data-governance/): Art. 10 is the requirement that fails quietly. Inventory your data sets, test each against the eleven Art.
- [EU AI Act Art. 4 AI Literacy Programme — Curriculum and Training Register](https://www.regulation-ai.eu/en/toolkits/literacy-programme/): Art. 4 has applied since February 2025 and binds providers and deployers whatever the risk tier.
- [EU AI Act Template Pack — Risk Register, Technical File and Data Governance](https://www.regulation-ai.eu/en/toolkits/pro-pack/): The three high-risk working files together: Art. 9 risk register, Annex IV technical documentation, and the Art. 10 data governance checklist.
- [EU AI Act Risk Register — Art. 9 Risk Management System (Annex III Mapped)](https://www.regulation-ai.eu/en/toolkits/risk-register/): Article 9 requires a risk management system across the whole lifecycle. This is that system as a working register: 18 scenarios pre-written, scored, and tied
- [AI System Inventory & Classification Workbook — EU AI Act](https://www.regulation-ai.eu/en/toolkits/system-inventory/): Step one of every AI Act programme: list your systems, then classify them along a decision path that puts the carve-outs before Annex III.
- [EU AI Act Technical Documentation File — Annex IV Template (Art. 11)](https://www.regulation-ai.eu/en/toolkits/technical-file/): Annex IV reads as nine dense paragraphs. This turns them into 30 discrete elements, each with an owner, a state and a place to point at the evidence, so
- [EU AI Act Art. 50 Transparency Pack — Disclosure Templates & Register](https://www.regulation-ai.eu/en/toolkits/transparency-pack/): The Art. 50 obligation applies 2 August 2026 and was not deferred, whatever your risk tier. Touchpoint register, ready disclosure wording, and a
- [AI Vendor Due Diligence Pack — 32 Questions and Contract Clauses](https://www.regulation-ai.eu/en/toolkits/vendor-due-diligence/): Your AI Act obligations as a deployer depend on information only the provider has. 32 questions to send before you sign, the scoring to read the answers, and