Complete legal library

Section 3: Obligations of Providers and Deployers

Chapter III · Articles 16–27

What this part of the EU AI Act covers

Section 3 allocates the duties. It sets out what providers of high-risk systems owe, when an importer, distributor, deployer or third party becomes a provider in their own right, the obligations specific to deployers (including human oversight, monitoring and the fundamental rights impact assessment) and the role of authorised representatives.

It binds providers and deployers, and also the importers, distributors and third parties who can become providers in their own right. Article 25 is the provision that catches organisations by surprise: putting your own name on a system, substantially modifying it, or changing its intended purpose makes you its provider.

All 12 provisions

Art. 16Obligations of Providers of High-Risk AI Systems Art. 17Quality Management System Art. 18Documentation Keeping Art. 19Automatically Generated Logs Art. 20Corrective Actions and Duty of Information Art. 21Cooperation with Competent Authorities Art. 22Authorised Representatives of Providers of High-Risk AI Systems Art. 23Obligations of Importers Art. 24Obligations of Distributors Art. 25Responsibilities Along the AI Value Chain Art. 26Obligations of Deployers of High-Risk AI Systems Art. 27Fundamental Rights Impact Assessment for High-risk AI Systems

All 12 provisions on this page have been checked against the EUR-Lex text of Regulation (EU) 2024/1689. Where this site and EUR-Lex disagree, EUR-Lex governs.

Where to go next

Chapter III: High-Risk AI SystemsThe whole chapter, Articles 6–49 Section 1: Classification of AI Systems as High-RiskArticles 6–7 Section 2: Requirements for High-Risk AI SystemsArticles 8–15 Section 4: Notifying Authorities and Notified BodiesArticles 28–39 Section 5: Standards, Conformity Assessment, Certificates and RegistrationArticles 40–49 Full EU AI Act table of contentsAll 13 chapters