EU AI Act crosswalk
Regulation (EU) 2024/1689, the Artificial Intelligence Act
In short: The EU AI Act sets duties for high-risk AI systems, including human oversight, record-keeping and log retention. Five register controls map to articles we read on EUR-Lex. Whether a given agent is high-risk depends on its use, so check scope first. This is not legal advice.
This is not legal advice.
What does EU AI Act cover?
These duties apply to high-risk AI systems as the Act defines them. An agent is not high-risk by default; it depends on its use case.
Which register controls map to EU AI Act?
| Control | Reference | What the text says |
|---|---|---|
| GOV-02 Named accountable owner | Article 26(2) | Deployers shall assign human oversight to natural persons who have the necessary competence, training and authority. |
| GOV-07 Human approval for high-risk actions | Article 14(4)(d) | People assigned oversight must be able to decide not to use the system, or to disregard, override or reverse its output. |
| GOV-11 Revocation and kill switch | Article 14(4)(e) | People assigned oversight must be able to interrupt the system through a stop button or similar procedure that halts it in a safe state. |
| GOV-13 Per-action audit log tied to a person | Article 12 | Record-keeping: high-risk systems must allow events to be recorded automatically as logs. |
| GOV-23 Evidence retention | Article 19(1) and Article 26(6) | Automatically generated logs must be kept for a period appropriate to the intended purpose, of at least six months. |
Reviewed by The Register desk