§ EU AI Act · Article 37
AI Act Article 37: Obligations, Deadlines & Penalties
At a glance
Article 37 of the AI Act imposes 5 obligations on Commission, notifying authority. At least one obligation carries an explicit compliance deadline.
§ Obligations
All obligations under Article 37
Obligation 1
The Commission shall investigate all cases where there are reasons to doubt the competence of a notified body or the continued fulfilment of the requirements laid down in Article 31 and its applicable responsibilities.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
Commission
- Action required
-
investigate
- Deadline
-
—
- Penalty
-
—
Obligation 2
The notifying authority shall provide the Commission, on request, with all relevant information relating to the notification or the maintenance of the competence of the notified body concerned.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
notifying authority
- Action required
-
provide
- Deadline
-
on request
- Penalty
-
—
Obligation 3
The Commission shall ensure that all sensitive information obtained in the course of its investigations pursuant to this Article is treated confidentially in accordance with Article 78.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
Commission
- Action required
-
ensure confidentiality
- Deadline
-
—
- Penalty
-
—
Obligation 4
Where the Commission ascertains that a notified body does not meet or no longer meets the requirements for its notification, it shall inform the notifying Member State accordingly and request it to take the necessary corrective measures, including the suspension or withdrawal of the notification if necessary.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
Commission
- Action required
-
inform and request corrective measures
- Deadline
-
—
- Penalty
-
—
Obligation 5
Where the Member State fails to take the necessary corrective measures, the Commission may, by means of an implementing act, suspend, restrict or withdraw the designation.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
Commission
- Action required
-
suspend, restrict or withdraw designation
- Deadline
-
—
- Penalty
-
—
§ Deadlines
EU AI Act compliance deadlines
-
2025-02-02
Article 5 prohibitions (unacceptable risk)
in_force
-
2025-02-02
Article 4 AI literacy
in_force
-
2025-08-02
GPAI model obligations (Articles 51 to 56)
in_force
-
2026-07-27
Regulation (EU) 2026/1744 (Digital Omnibus on AI) enters into force — AI Act applies as amended
in_force
-
2026-08-02
AI Act general date of application (Art 113) — governance, penalties and remaining provisions without a different date
in_force
-
2026-08-02
Article 50 transparency obligations (AI-interaction disclosure, labelling of deepfakes and AI-generated text, emotion-recognition notices)
in_force
-
2026-12-02
Article 50(2) machine-readable marking of AI-generated content — transition for generative AI systems placed on the market before 2 August 2026
scheduled
-
2026-12-02
NEW Article 5 prohibition: AI generation of non-consensual intimate imagery (NCII) and CSAM
scheduled
-
2027-08-02
National AI regulatory sandboxes: at least one operational per Member State (Art 57(1))
scheduled
-
2027-12-02
Annex III stand-alone high-risk obligations
scheduled
-
2028-08-02
Annex I embedded (regulated-product) high-risk obligations
scheduled
§ Frequently asked
Questions about Article 37
Who must comply with Article 37 of the AI Act?
+
Commission, notifying authority.
What does Article 37 of the AI Act require?
+
investigate provide ensure confidentiality
What is the compliance deadline for AI Act Article 37?
+
on request