Article 26: Obligations of deployers of high-risk AI systems
Deployers of high-risk AI systems must ensure proper use, human oversight, relevant input data, and operational monitoring. They are required to keep automatically generated logs for at least six months, inform workers before workplace deployment, and comply with registration obligations if they are public authorities. Additionally, specific rules govern law enforcement use of post-remote biometric identification, including authorization requirements and reporting obligations.
Summary and content fields are drawn from the document text and are pending editorial review.
Who issued it
Who it governs
Entities and public authorities deploying high-risk AI systems in the European Union need to read this to understand their legal compliance requirements.
What the document contains
The document details the comprehensive legal obligations of deployers utilizing high-risk AI systems under the European Union AI Act, including rules on human oversight, input data quality, log retention, monitoring, incident reporting, worker notification, public authority registration, and law enforcement restrictions.
The text does not provide definitions for technical terms used within the article, nor does it detail the specific conformity assessment procedures required for providers.
- Deployers must use high-risk AI systems strictly according to the accompanying instructions for use.
- Human oversight must be assigned to competent, trained individuals equipped with necessary support.
- Logs automatically generated by high-risk systems must be retained under deployer control for at least six months.
- Employers must inform workers and their representatives before deploying a high-risk AI system in the workplace.
- Law enforcement use of post-remote biometric identification requires strict ex ante or prompt judicial or administrative authorization.
· Paragraph 1: Technical and organisational measures for use in accordance with instructions · Paragraph 2: Assignment of human oversight · Paragraph 3: Preservation of deployer autonomy and resource organisation · Paragraph 4: Control over relevant and representative input data · Paragraph 5: Operational monitoring and incident reporting · Paragraph 6: Retention of automatically generated logs · Paragraph 7: Workplace information obligations for employers · Paragraph 8: Registration obligations for public authorities · Paragraph 9: Data protection impact assessment integration · Paragraph 10: Special rules for post-remote biometric identification by law enforcement · Paragraph 11: Information obligations toward natural persons subject to AI decisions · Paragraph 12: Cooperation with competent authorities
How it scores
Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.
Accountability
4/5Clear responsibility for AI outcomes
Deployers of high-risk AI systems shall take appropriate technical and organisational measures to ensure they use such systems in accordance with the instructions for use
Article 26: Obligations of deployers of high-risk AI systems
screening score · 2026-10-23
Fairness
1/5Non-discrimination and equitable treatment
Article 4a: Processing of special categories of personal data for bias detection and correction
Table of Contents / Article 4a
screening score · 2026-10-23
Human Dignity
3/5Respect for the inherent worth of persons
It shall be ensured that no decision that produces an adverse legal effect on a person may be taken by the law enforcement authorities based solely on the output of such post-remote biometric identification systems.
Article 26: Obligations of deployers of high-risk AI systems
screening score · 2026-10-23
Human Oversight
4/5Humans remain in control of consequential decisions
Deployers shall assign human oversight to natural persons who have the necessary competence, training and authority, as well as the necessary support.
Article 26: Obligations of deployers of high-risk AI systems
screening score · 2026-10-23
Privacy
4/5Protection of personal data and private life
Deployers of high-risk AI systems shall keep the logs automatically generated by that high-risk AI system to the extent such logs are under their control, for a period appropriate to the intended purpose
Article 26: Obligations of deployers of high-risk AI systems
screening score · 2026-10-23
Enforcement
4/5Consequences and compliance mechanisms with real force
Deployers shall cooperate with the relevant competent authorities in any action those authorities take in relation to the high-risk AI system in order to implement this Regulation.
Article 26: Obligations of deployers of high-risk AI systems
screening score · 2026-10-23
Impact Assessment
4/5Required assessment of an AI system's risks/impacts before or during use
Where applicable, deployers of high-risk AI systems shall use the information provided under Article 13 of this Regulation to comply with their obligation to carry out a data protection impact assessment
Article 26: Obligations of deployers of high-risk AI systems
screening score · 2026-10-23