Regulation (EU) 2024/1689 — Artificial Intelligence Act

AIMSS §10.2

External assurance & independent re-audit

Governance

✓

Full

Notified-body conformity assessment for many high-risk systems.

Art. 43, Annex VII

AIMSS §4.1

AI inventory & system register

Governance

✓

Full

Article 49 requires registration of high-risk systems in the EU database.

Art. 49

AIMSS §4.3

Risk classification & impact assessment

Governance

✓

Full

Risk categories and conformity assessments mandated.

Art. 6, Annex III

AIMSS §4.4

Third-party & supply-chain AI obligations

Governance

✓

Full

Importer, distributor and downstream-deployer obligations defined.

Art. 23–27

AIMSS §5.2

Human oversight & meaningful intervention

Ethics

✓

Full

Human oversight measures mandated for high-risk AI.

Art. 14

AIMSS §5.3

Explainability of automated decisions

Ethics

✓

Full

Right to explanation of individual decisions for high-risk AI.

Art. 86

AIMSS §5.4

Disclosure to affected persons

Ethics

✓

Full

Article 50 transparency obligations for AI systems interacting with humans.

Art. 50

AIMSS §8.1

Bias & disparate-impact testing

Society

✓

Full

Art. 10 data and bias requirements for high-risk systems.

Art. 10

AIMSS §8.2

Demographic-data governance for fairness testing

Society

✓

Full

Permitted processing of special-category data to detect and correct bias.

Art. 10(5)

AIMSS §8.3

Accessibility for users with disabilities

Society

✓

Full

Compliance with EU accessibility requirements mandated.

Art. 16(l)

AIMSS §8.5

Content provenance & synthetic-media labelling

Society

✓

Full

Machine-readable marking of AI-generated and deepfake content.

Art. 50(2)–(4)

AIMSS §9.1

Post-market monitoring & incident reporting

Lifecycle

✓

Full

Articles 72 & 73 mandate post-market monitoring and serious-incident reporting.

Art. 72–73

AIMSS §9.2

Cybersecurity & adversarial robustness

Lifecycle

✓

Full

Accuracy, robustness and cybersecurity requirements for high-risk AI.

Art. 15

AIMSS §9.4

Audit trail & technical documentation

Lifecycle

✓

Full

Automatic logs and detailed technical documentation required.

Art. 11–12, Annex IV

AIMSS §10.1

Continuous integrity programme

Governance

◐

Partial

Conformity reassessment after substantial modification.

Art. 43

AIMSS §4.2

Documented AI policy & accountable executive

Governance

◐

Partial

Quality-management system required for providers of high-risk AI.

Art. 17

AIMSS §5.1

Independent ethics review

Ethics

◐

Partial

Fundamental rights impact assessment required for some deployers.

AIMSS §6.1

Water & cooling impact disclosure

Climate

◐

Partial

GPAI Code of Practice asks for compute-environment energy reporting; water not specified.

Art. 53

AIMSS §6.2

Training & inference emissions accounting

Climate

◐

Partial

GPAI providers must report energy use of training.

Art. 53(1)(a)

AIMSS §6.3

Lifecycle carbon disclosure to buyers

Climate

◐

Partial

GPAI providers must document known or estimated energy consumption in technical documentation passed to downstream providers.

Art. 53(1)(a), Annex XI

AIMSS §7.1

Data-worker labour conditions

Labour

◐

Partial

Data governance Art. 10 implies labelling quality; no direct labour standards.

AIMSS §7.3

Red-team psychological safeguards

Labour

◐

Partial

Adversarial testing required for systemic-risk GPAI.

Art. 55

AIMSS §7.4

Workforce displacement notice & re-skilling

Labour

◐

Partial

Workers' representatives must be informed before workplace AI deployment.

Art. 26(7)

AIMSS §8.4

Misuse & dual-use assessment

Society

◐

Partial

Systemic-risk evaluation for advanced GPAI.

Art. 55

AIMSS §9.3

Public complaints register

Lifecycle

◐

Partial

Right to lodge complaint with market surveillance authority.

Art. 85