§ EU AI Act · Article 37
AI Act Article 37: Obligations, Deadlines & Penalties
At a glance
Article 37 of the AI Act imposes 5 obligations on Commission, notifying authority. At least one obligation carries an explicit compliance deadline.
§ Obligations
All obligations under Article 37
Obligation 1
The Commission shall investigate all cases where there are reasons to doubt the competence of a notified body or the continued fulfilment of the requirements laid down in Article 31 and its applicable responsibilities.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
Commission
- Action required
-
investigate
- Deadline
-
—
- Penalty
-
—
Obligation 2
The notifying authority shall provide the Commission, on request, with all relevant information relating to the notification or the maintenance of the competence of the notified body concerned.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
notifying authority
- Action required
-
provide
- Deadline
-
on request
- Penalty
-
—
Obligation 3
The Commission shall ensure that all sensitive information obtained in the course of its investigations pursuant to this Article is treated confidentially in accordance with Article 78.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
Commission
- Action required
-
ensure confidentiality
- Deadline
-
—
- Penalty
-
—
Obligation 4
Where the Commission ascertains that a notified body does not meet or no longer meets the requirements for its notification, it shall inform the notifying Member State accordingly and request it to take the necessary corrective measures, including the suspension or withdrawal of the notification if necessary.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
Commission
- Action required
-
inform and request corrective measures
- Deadline
-
—
- Penalty
-
—
Obligation 5
Where the Member State fails to take the necessary corrective measures, the Commission may, by means of an implementing act, suspend, restrict or withdraw the designation.
Regulation (EU) 2024/1689, Article 37, Article 37
- Obligated entity
-
Commission
- Action required
-
suspend, restrict or withdraw designation
- Deadline
-
—
- Penalty
-
—
§ Deadlines
EU AI Act compliance deadlines
-
2025-02-02
Article 4 AI literacy
in_force
-
2025-02-02
Article 5 prohibitions (unacceptable risk)
in_force
-
2025-08-02
GPAI model obligations (Articles 51 to 56)
in_force
-
2026-08-02
Article 50(2) machine-readable marking (watermarking) of AI-generated content
provisionally_amended
-
2026-08-02
Article 50 transparency obligations OTHER than the 50(2) marking grace (for example disclosure that a user is interacting with an AI system)
scheduled
-
2026-08-02
Annex III stand-alone high-risk obligations
provisionally_amended
-
2026-08-02
National AI regulatory sandboxes (establishment deadline)
provisionally_amended
-
2026-12-02
NEW Article 5 prohibition: AI generation of non-consensual intimate imagery (NCII) and CSAM
provisionally_amended
-
2027-08-02
Annex I embedded (regulated-product) high-risk obligations
provisionally_amended
§ Frequently asked
Questions about Article 37
Who must comply with Article 37 of the AI Act?
+
Commission, notifying authority.
What does Article 37 of the AI Act require?
+
investigate provide ensure confidentiality
What is the compliance deadline for AI Act Article 37?
+
on request