With its AI regulation, the EU is pursuing a risk-based approach to regulate AI technologies. For this purpose, four risk categories are defined, for which specific information obligations or prohibitions may apply. In the event of violations, the authorities of the member states may impose fines of up to 7% of the worldwide prior year’s turnover.
| Art. 1 | Subject matter |
| Art. 2 | Scope |
| Art. 3 | Definitions |
| Art. 4 | AI literacy |
| Art. 5 | Prohibited AI practices |
| Art. 6 | Classification rules for high-risk AI systems |
| Art. 7 | Amendments to Annex III |
| Art. 8 | Compliance with the requirements |
| Art. 9 | Risk management system |
| Art. 10 | Data and data governance |
| Art. 11 | Technical documentation |
| Art. 12 | Record-keeping |
| Art. 13 | Transparency and provision of information to deployers |
| Art. 14 | Human oversight |
| Art. 15 | Accuracy, robustness and cybersecurity |
| Art. 40 | Harmonised standards and standardisation deliverables |
| Art. 41 | Common specifications |
| Art. 42 | Presumption of conformity with certain requirements |
| Art. 43 | Conformity assessment |
| Art. 44 | Certificates |
| Art. 45 | Information obligations of notified bodies |
| Art. 46 | Derogation from conformity assessment procedure |
| Art. 47 | EU declaration of conformity |
| Art. 48 | CE marking |
| Art. 49 | Registration |
| Art. 50 | Transparency obligations for providers and deployers of certain AI systems |
| Art. 51 | Classification of general-purpose AI models as general-purpose AI models with systemic risk |
| Art. 52 | Procedure |
| Art. 53 | Obligations for providers of general-purpose AI models |
| Art. 54 | Authorised representatives of providers of general-purpose AI models |
| Art. 55 | Obligations of providers of general-purpose AI models with systemic risk |
| Art. 56 | Codes of practice |
| Art. 70 | Designation of national competent authorities and single points of contact |
| Art. 71 | EU database for high-risk AI systems listed in Annex III |
| Art. 72 | Post-market monitoring by providers and post-market monitoring plan for high-risk AI systems |
| Art. 73 | Reporting of serious incidents |
| Art. 95 | Codes of conduct for voluntary application of specific requirements |
| Art. 96 | Guidelines from the Commission on the implementation of this Regulation |
| Art. 97 | Exercise of the delegation |
| Art. 98 | Committee procedure |
| Art. 99 | Penalties |
| Art. 100 | Administrative fines on Union institutions, bodies, offices and agencies |
| Art. 101 | Fines for providers of general-purpose AI models |