§ EU AI Act · Article 72
AI Act Article 72: Obligations, Deadlines & Penalties
At a glance
Article 72 of the AI Act imposes 6 obligations on provider.
§ Obligations
All obligations under Article 72
Obligation 1
Providers shall establish and document a post-market monitoring system in a manner that is proportionate to the nature of the AI technologies and the risks of the high-risk AI system.
Regulation (EU) 2024/1689, Article 72, Article 72
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
establish
- Deadline
-
—
- Penalty
-
—
Obligation 2
The post-market monitoring system shall actively and systematically collect, document and analyse relevant data on the performance of high-risk AI systems throughout their lifetime to evaluate continuous compliance with Chapter III, Section 2 requirements.
Regulation (EU) 2024/1689, Article 72, Article 72
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
collect
- Deadline
-
—
- Penalty
-
—
- Exemptions
- sensitive operational data of deployers which are law enforcement authorities
Obligation 3
Where relevant, post-market monitoring shall include an analysis of the interaction with other AI systems.
Regulation (EU) 2024/1689, Article 72, Article 72
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
analyse
- Deadline
-
—
- Penalty
-
—
Obligation 4
The post-market monitoring system shall be based on a post-market monitoring plan which shall be part of the technical documentation referred to in Annex IV.
Regulation (EU) 2024/1689, Article 72, Article 72
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
document
- Deadline
-
—
- Penalty
-
—
Obligation 5
For high-risk AI systems covered by Union harmonisation legislation where a post-market monitoring system is already established, providers shall integrate the necessary elements into existing systems and plans provided that it achieves an equivalent level of protection.
Regulation (EU) 2024/1689, Article 72, Article 72
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems covered by Union harmonisation legislation
- Action required
-
integrate
- Deadline
-
—
- Penalty
-
—
Obligation 6
For high-risk AI systems placed on the market by financial institutions subject to Union financial services law, providers shall integrate the necessary elements into existing systems and plans provided that it achieves an equivalent level of protection.
Regulation (EU) 2024/1689, Article 72, Article 72
- Obligated entity
-
provider
- Sector scope
- financial institutions
- Action required
-
integrate
- Deadline
-
—
- Penalty
-
—
§ Deadlines
EU AI Act compliance deadlines
-
2025-02-02
Article 4 AI literacy
in_force
-
2025-02-02
Article 5 prohibitions (unacceptable risk)
in_force
-
2025-08-02
GPAI model obligations (Articles 51 to 56)
in_force
-
2026-08-02
Article 50(2) machine-readable marking (watermarking) of AI-generated content
provisionally_amended
-
2026-08-02
Article 50 transparency obligations OTHER than the 50(2) marking grace (for example disclosure that a user is interacting with an AI system)
scheduled
-
2026-08-02
Annex III stand-alone high-risk obligations
provisionally_amended
-
2026-08-02
National AI regulatory sandboxes (establishment deadline)
provisionally_amended
-
2026-12-02
NEW Article 5 prohibition: AI generation of non-consensual intimate imagery (NCII) and CSAM
provisionally_amended
-
2027-08-02
Annex I embedded (regulated-product) high-risk obligations
provisionally_amended
§ Frequently asked
Questions about Article 72
Who must comply with Article 72 of the AI Act?
+
provider.
What does Article 72 of the AI Act require?
+
establish collect analyse