Deployers's obligations

must verify and confirm the identification resulting from the system by at least two natural persons with the necessary competence, training and authority before taking action or decision.

must be considered a provider of a high-risk AI system and be subject to the obligations of the provider under Article 16

must assign human oversight to natural persons who have the necessary competence, training and authority, as well as the necessary support.

must ensure that input data is relevant and sufficiently representative in view of the intended purpose of the high-risk AI system.

must monitor the operation of the high-risk AI system on the basis of the instructions for use and, where relevant, inform providers in accordance with Article 72.

must inform the provider or distributor and the relevant market surveillance authority without undue delay if the use of the high-risk AI system may result in that AI system presenting a risk.

Deadline: without undue delay

must inform the provider, importer or distributor and the relevant market surveillance authorities immediately if a serious incident is identified.

Deadline: immediately

must keep the logs automatically generated by that high-risk AI system for a period appropriate to the intended purpose of the high-risk AI system, of at least six months.

must submit annual reports to the relevant market surveillance and national data protection authorities on their use of post-remote biometric identification systems.

must make available documented information to the relevant market surveillance authority and the national data protection authority upon request.

must inform natural persons that they are subject to the use of the high-risk AI system.

must cooperate with the relevant competent authorities in any action those authorities take in relation to the high-risk AI system.

must register themselves, select the system and register its use in the EU database referred to in Article 71.

Deadline: Before putting into service or using