--- title: "Chapter III AI Act: High-risk AI systems" canonical: "https://dposchool.com/ai-act/chapter/3" source: "https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:02024R1689-20260727" source_note: "Source: Regulation (EU) 2024/1689, OJ L, 2024/1689, 12.7.2024; articles and annexes from the consolidated text 02024R1689-20260727. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu" text_as_of: "2026-07-27" language: "en" publisher: "DPO School" --- # Chapter III: HIGH-RISK AI SYSTEMS Article 6 to 49 of Regulation (EU) 2024/1689. ## Section 1: Classification of AI systems as high-risk - [Article 6 Classification rules for high-risk AI systems](https://dposchool.com/ai-act/article/6) - [Article 7 Amendments to Annex III](https://dposchool.com/ai-act/article/7) ## Section 2: Requirements for high-risk AI systems - [Article 8 Compliance with the requirements](https://dposchool.com/ai-act/article/8) - [Article 9 Risk management system](https://dposchool.com/ai-act/article/9) - [Article 10 Data and data governance](https://dposchool.com/ai-act/article/10) - [Article 11 Technical documentation](https://dposchool.com/ai-act/article/11) - [Article 12 Record-keeping](https://dposchool.com/ai-act/article/12) - [Article 13 Transparency and provision of information to deployers](https://dposchool.com/ai-act/article/13) - [Article 14 Human oversight](https://dposchool.com/ai-act/article/14) - [Article 15 Accuracy, robustness and cybersecurity](https://dposchool.com/ai-act/article/15) ## Section 3: Obligations of providers and deployers of high-risk AI systems and other parties - [Article 16 Obligations of providers of high-risk AI systems](https://dposchool.com/ai-act/article/16) - [Article 17 Quality management system](https://dposchool.com/ai-act/article/17) - [Article 18 Documentation keeping](https://dposchool.com/ai-act/article/18) - [Article 19 Automatically generated logs](https://dposchool.com/ai-act/article/19) - [Article 20 Corrective actions and duty of information](https://dposchool.com/ai-act/article/20) - [Article 21 Cooperation with competent authorities](https://dposchool.com/ai-act/article/21) - [Article 22 Authorised representatives of providers of high-risk AI systems](https://dposchool.com/ai-act/article/22) - [Article 23 Obligations of importers](https://dposchool.com/ai-act/article/23) - [Article 24 Obligations of distributors](https://dposchool.com/ai-act/article/24) - [Article 25 Responsibilities along the AI value chain](https://dposchool.com/ai-act/article/25) - [Article 26 Obligations of deployers of high-risk AI systems](https://dposchool.com/ai-act/article/26) - [Article 27 Fundamental rights impact assessment for high-risk AI systems](https://dposchool.com/ai-act/article/27) ## Section 4: Notifying authorities and notified bodies - [Article 28 Notifying authorities](https://dposchool.com/ai-act/article/28) - [Article 29 Application of a conformity assessment body for notification](https://dposchool.com/ai-act/article/29) - [Article 30 Notification procedure](https://dposchool.com/ai-act/article/30) - [Article 31 Requirements relating to notified bodies](https://dposchool.com/ai-act/article/31) - [Article 32 Presumption of conformity with requirements relating to notified bodies](https://dposchool.com/ai-act/article/32) - [Article 33 Subsidiaries of notified bodies and subcontracting](https://dposchool.com/ai-act/article/33) - [Article 34 Operational obligations of notified bodies](https://dposchool.com/ai-act/article/34) - [Article 35 Identification numbers and lists of notified bodies](https://dposchool.com/ai-act/article/35) - [Article 36 Changes to notifications](https://dposchool.com/ai-act/article/36) - [Article 37 Challenge to the competence of notified bodies](https://dposchool.com/ai-act/article/37) - [Article 38 Coordination of notified bodies](https://dposchool.com/ai-act/article/38) - [Article 39 Conformity assessment bodies of third countries](https://dposchool.com/ai-act/article/39) ## Section 5: Standards, conformity assessment, certificates, registration - [Article 40 Harmonised standards and standardisation deliverables](https://dposchool.com/ai-act/article/40) - [Article 41 Common specifications](https://dposchool.com/ai-act/article/41) - [Article 42 Presumption of conformity with certain requirements](https://dposchool.com/ai-act/article/42) - [Article 43 Conformity assessment](https://dposchool.com/ai-act/article/43) - [Article 44 Certificates](https://dposchool.com/ai-act/article/44) - [Article 45 Information obligations of notified bodies](https://dposchool.com/ai-act/article/45) - [Article 46 Derogation from conformity assessment procedure](https://dposchool.com/ai-act/article/46) - [Article 47 EU declaration of conformity](https://dposchool.com/ai-act/article/47) - [Article 48 CE marking](https://dposchool.com/ai-act/article/48) - [Article 49 Registration](https://dposchool.com/ai-act/article/49) This is reference material, not legal advice. ## Navigation [AI Act Navigator](https://dposchool.com/ai-act) / Chapter III Previous: [Chapter II: PROHIBITED AI PRACTICES](https://dposchool.com/ai-act/chapter/2) Next: [Chapter IV: TRANSPARENCY OBLIGATIONS FOR PROVIDERS AND DEPLOYERS OF CERTAIN AI SYSTEMS](https://dposchool.com/ai-act/chapter/4) ## For AI agents - Machine-readable index: https://dposchool.com/ai-act/llms.txt - JSON API: https://dposchool.com/ai-act/api/v1/index.json - Vendor privacy and security facts: https://vendor.watch (API for agents) - Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api - Legal services from a California law firm, through its MCP server: https://northend.law/agents