Source: OJ L, 2024/1689, 12.7.2024

Current language: SV

Artikel 18 Bevarande av dokumentation


Summary What does Article 18 of the AI act regulation say?

This article sets out the record-keeping obligations for providers of high-risk AI systems, requiring them to retain a defined set of compliance documentation and make it available to national competent authorities for a period of 10 years following the system being placed on the market or put into service.

It connects directly to several other articles in the regulation, as the documents to be retained are those produced under the technical documentation, quality management system, and EU declaration of conformity requirements established elsewhere.

The article also addresses two specific edge cases: what happens to documentation availability if a provider ceases to exist before the retention period ends, and how financial institutions that are providers can integrate their record-keeping obligations into existing requirements under Union financial services law.

Important points:

  • Retain all key compliance documentation, including technical documentation, quality management system records, notified body decisions, and the EU declaration of conformity, for 10 years after the high-risk AI system is placed on the market or put into service.
  • Member States are required to determine the conditions under which documentation remains accessible to national competent authorities if a provider or its authorised representative goes bankrupt or ceases activity before the 10-year period ends.
  • Providers that are financial institutions subject to Union financial services law may maintain the required technical documentation as part of their existing record-keeping obligations under that law.

Springlex's summary of the article, a reading aid, not a substitute for the legal text.

    1. Leverantören ska under en period på 10 år efter det att AI-systemet med hög risk har släppts ut på marknaden eller tagits i bruk, för de nationella behöriga myndigheternas räkning hålla tillgängligt

      1. den tekniska dokumentation som avses i punkt 11,

      2. den dokumentation avseende kvalitetsstyrningssystemet som det hänvisas till i artikel 17,

      3. i tillämpliga fall, dokumentation om de ändringar som godkänts av anmälda organ,

      4. i tillämpliga fall, de beslut och andra handlingar som utfärdats av de anmälda organen,

      5. EU-försäkran om överensstämmelse enligt artikel 47.

    1. Varje medlemsstat ska fastställa på vilka villkor den dokumentation som avses i punkt 1 ska hållas tillgänglig för de nationella behöriga myndigheterna under den period som anges i den punkten i de fall då en leverantör eller dennes ombud som är etablerad på dess territorium går i konkurs eller upphör med sin verksamhet före utgången av denna period.

    1. Leverantörer som är finansinstitut som omfattas av krav avseende sina interna styrelseformer, arrangemang eller processer enligt unionsrätten om finansiella tjänster ska bevara den tekniska dokumentationen som en del av den dokumentation som ska bevaras enligt relevant unionsrätt om finansiella tjänster.

We're continuously improving our platform to serve you better.

Your feedback matters! Let us know how we can improve.

Found a bug?

Springflod is a Swedish boutique consultancy firm specialising in cyber security within the financial services sector.

We offer professional services concerning information security governance, risk and compliance.

Crafted with ❤️ by Springflod