GRCLibrary.ai

Annex

European Union AI Regulatory Requirements

This annex gives the adopter a single per-regime view of the European Union artificial-intelligence framework, Regulation (EU) 2024/1689 (the "AI Act"). The corpus already carries the operational substance of the AI Act scattered across the AI-governance documents: the risk-tier classification model, the deployer obligation chain, and the general-purpose AI (GPAI) obligations all live in ai/policy-ai-compliance.md, and the fundamental-rights impact assessment sits in the unified router ai/procedure-integrated-ai-and-privacy-assessment.md. This annex consolidates that content by cross-reference rather than restating it, and adds the per-regime framing an adopter needs to see the whole jurisdiction at once: the operator roles, the applicability timeline, the penalty structure, and which obligations land on the adopter as provider, deployer, importer, or distributor.

Type
Annex
Version
0.0.27
Date
2026-10-30
Owner
Chief Information Security Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
AI Governance
Review frequency
Annual and upon material AI regulatory change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Applicable law and regulatory authorities
  • Scope and extraterritorial reach
  • Operator roles
  • Risk-tier structure
  • High-risk obligation chain
  • General-purpose AI model obligations
  • Applicability timeline
  • Penalties
  • Adopter-role framing
  • Limitations
  • Framework alignment

Frameworks it maps to

Related documents