§ EU AI Act · Article 73
AI Act Article 73: Obligations, Deadlines & Penalties
At a glance
Article 73 of the AI Act imposes 13 obligations on Commission, market surveillance authority, national competent authority and 1 other entity type(s). At least one obligation carries an explicit compliance deadline.
§ Obligations
All obligations under Article 73
Obligation 1
Providers of high-risk AI systems must report any serious incident to the market surveillance authorities of the Member States where the incident occurred.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
report
- Deadline
-
15 days after becoming aware of the incident
- Penalty
-
—
Obligation 2
Providers must report serious incidents immediately after establishing a causal link or reasonable likelihood thereof, and in any event not later than 15 days after becoming aware of the incident.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
report
- Deadline
-
immediately after establishing link, max 15 days after awareness
- Penalty
-
—
Obligation 3
In the event of a widespread infringement or a serious incident as defined in Article 3(49)(b), the report must be provided immediately and not later than two days after becoming aware of the incident.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
report
- Deadline
-
immediately, max 2 days after awareness
- Penalty
-
—
Obligation 4
In the event of the death of a person, the report must be provided immediately after establishing or suspecting a causal relationship, but not later than 10 days after becoming aware of the incident.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
report
- Deadline
-
immediately after establishing/suspecting link, max 10 days after awareness
- Penalty
-
—
Obligation 5
Where necessary to ensure timely reporting, the provider may submit an initial incomplete report followed by a complete report.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
report
- Deadline
-
—
- Penalty
-
—
Obligation 6
Following the reporting of a serious incident, the provider shall without delay perform necessary investigations including a risk assessment and corrective action.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
investigate
- Deadline
-
without delay
- Penalty
-
—
Obligation 7
The provider shall cooperate with competent authorities and notified bodies during investigations and shall not alter the AI system in a way affecting evaluation of causes prior to informing authorities.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
provider
- Sector scope
- high-risk AI systems
- Action required
-
cooperate
- Deadline
-
—
- Penalty
-
—
Obligation 8
Upon receiving a notification of a serious incident referred to in Article 3(49)(c), the relevant market surveillance authority shall inform the national public authorities or bodies referred to in Article 77(1).
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
market surveillance authority
- Action required
-
notify
- Deadline
-
—
- Penalty
-
—
Obligation 9
The Commission shall develop dedicated guidance to facilitate compliance with the reporting obligations and issue it by 2 August 2025.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
Commission
- Action required
-
develop guidance
- Deadline
-
2 August 2025
- Penalty
-
—
Obligation 10
The market surveillance authority shall take appropriate measures within seven days from receiving the notification and follow notification procedures as provided in Regulation (EU) 2019/1020.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
market surveillance authority
- Action required
-
take measures
- Deadline
-
7 days from receiving notification
- Penalty
-
—
Obligation 11
For high-risk AI systems in Annex III placed on the market by providers subject to equivalent Union legislative reporting obligations, notification of serious incidents is limited to those referred to in Article 3(49)(c).
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
provider
- Sector scope
- Annex III high-risk AI systems
- Action required
-
report
- Deadline
-
—
- Penalty
-
—
- Exemptions
- Providers subject to equivalent Union legislative instruments
Obligation 12
For high-risk AI systems that are safety components of devices or devices covered by Regulations (EU) 2017/745 and (EU) 2017/746, notification of serious incidents is limited to those referred to in Article 3(49)(c) and made to the national competent authority.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
provider
- Sector scope
- Medical devices (MDR/IVDR)
- Action required
-
report
- Deadline
-
—
- Penalty
-
—
- Exemptions
- Devices covered by MDR/IVDR
Obligation 13
National competent authorities shall immediately notify the Commission of any serious incident, whether or not they have taken action on it, in accordance with Article 20 of Regulation (EU) 2019/1020.
Regulation (EU) 2024/1689, Article 73, Article 73
- Obligated entity
-
national competent authority
- Action required
-
notify
- Deadline
-
immediately
- Penalty
-
—
§ Deadlines
EU AI Act compliance deadlines
-
2025-02-02
Article 4 AI literacy
in_force
-
2025-02-02
Article 5 prohibitions (unacceptable risk)
in_force
-
2025-08-02
GPAI model obligations (Articles 51 to 56)
in_force
-
2026-08-02
Article 50(2) machine-readable marking (watermarking) of AI-generated content
provisionally_amended
-
2026-08-02
Article 50 transparency obligations OTHER than the 50(2) marking grace (for example disclosure that a user is interacting with an AI system)
scheduled
-
2026-08-02
Annex III stand-alone high-risk obligations
provisionally_amended
-
2026-08-02
National AI regulatory sandboxes (establishment deadline)
provisionally_amended
-
2026-12-02
NEW Article 5 prohibition: AI generation of non-consensual intimate imagery (NCII) and CSAM
provisionally_amended
-
2027-08-02
Annex I embedded (regulated-product) high-risk obligations
provisionally_amended
§ Frequently asked
Questions about Article 73
Who must comply with Article 73 of the AI Act?
+
Commission, market surveillance authority, national competent authority, provider.
What does Article 73 of the AI Act require?
+
report investigate cooperate
What is the compliance deadline for AI Act Article 73?
+
15 days after becoming aware of the incident; 2 August 2025; 7 days from receiving notification; immediately; immediately after establishing link, max 15 days after awareness; immediately after establishing/suspecting link, max 10 days after awareness; immediately, max 2 days after awareness; without delay