Obligations in scope
Article 102 — Commission
When adopting detailed measures related to technical specifications and procedures for approval and use of security equipment concerning AI systems, the requirements set out in Chapter III, Section 2 of Regulation (EU) 2024/1689 shall be taken into account. Action required: consider.
Article 108 — European Commission
When adopting implementing acts concerning AI systems which are safety components, the requirements set out in Chapter III, Section 2 of the AI Act shall be taken into account. Action required: consider.
Article 108 — European Commission
When adopting delegated acts concerning AI systems which are safety components, the requirements set out in Chapter III, Section 2 of the AI Act shall be taken into account. Action required: consider.
Article 108 — European Commission
When adopting implementing acts concerning AI systems which are safety components, the requirements set out in Chapter III, Section 2 of the AI Act shall be taken into account. Action required: consider.
Article 108 — European Commission
When adopting delegated acts concerning AI systems which are safety components, the requirements set out in Chapter III, Section 2 of the AI Act shall be taken into account. Action required: consider.
Article 108 — European Commission
When adopting implementing acts concerning AI systems which are safety components, the requirements set out in Chapter III, Section 2 of the AI Act shall be taken into account. Action required: consider.
Article 108 — European Commission
When adopting delegated acts concerning AI systems which are safety components, the requirements set out in Chapter III, Section 2 of the AI Act shall be taken into account. Action required: consider.
Practical steps
What the obligations on this page actually require you to do, ordered by article. Use this as a starting checklist; verify each item against the underlying article text before treating it as legal advice.
- Art 102 — consider (Commission)
Obligation reference table
| Article | Obligated entity | Deadline | Penalty |
|---|---|---|---|
| Art 102 | Commission | — | — |
| Art 108 | European Commission | — | — |
| Art 108 | European Commission | — | — |
| Art 108 | European Commission | — | — |
| Art 108 | European Commission | — | — |
| Art 108 | European Commission | — | — |
| Art 108 | European Commission | — | — |
Penalty exposure
None of the 7 obligations on this page carry an explicit penalty figure in the AI Act text itself — the fine ceiling is set elsewhere in the regulation and applies by reference. Refer to AI Act's general penalties article (or the diagnostic below) to estimate exposure before signing off on a compliance programme.
Cross-regulatory conflicts
AI Act interacts with other EU regulations in ways that can pull compliance teams in opposite directions. The most concrete conflicts in the Fontvera corpus involving this regulation:
- AI Act Art 18 ↔ DMA Art 5 (medium) — [entity affected: Gatekeeper/Provider] AI Act requires providers to keep technical documentation and logs for 10 years, while DMA requires gatekeepers to provide real-time access to data and algorithms, potentially creating tension between long-term data retention for compliance and immediate data portability/access rights.
- AI Act Art 19 ↔ GDPR Art 5 (medium) — [entity affected: provider] AI Act mandates keeping logs for at least six months, which may conflict with GDPR's storage limitation principle requiring data to be kept no longer than necessary if the logs contain personal data not needed for that duration.
- AI Act Art 19 ↔ ePrivacy Directive Art 6 (high) — [entity affected: provider] The AI Act requires providers to keep automatically generated logs for at least six months, whereas ePrivacy requires traffic data to be erased or anonymized as soon as it is no longer needed for transmission, potentially creating a conflict if logs contain traffic data.
- AI Act Art 10 ↔ GDPR Art 17 (high) — [entity affected: provider] AI Act allows processing special categories of data for bias detection if strictly necessary, which may conflict with GDPR's right to erasure if the data is no longer necessary for the original purpose but needed for ongoing bias monitoring.
Related Fontvera pages
- ai act art 17 provider obligations
- ai act art 70 commission obligations
- ai act authorized representative
- ai act automotive
Check your full compliance exposure with the 5-minute Fontvera diagnostic →