Module 1 has introduced the foundational concepts of EU Regulation 2024/1689. Before advancing to Module 2's deep dive into high-risk AI compliance obligations, this chapter consolidates the key principles and highlights the most important concepts to carry forward.
Core Takeaways from Module 1
- The EU AI Act is the first comprehensive AI law globally, applying since August 2024 with staggered obligations
- Scope under Article 2 is broad: non-EU providers are in scope if their systems serve EU users
- Article 3 defines the roles of provider, deployer, importer, and distributor -- each carries distinct obligations
- The four-tier risk framework (prohibited, high-risk, limited risk, minimal risk) determines which obligations apply
- Article 5 prohibits ten AI practices outright -- these obligations applied from 2 February 2025
- Article 4 AI literacy is a universal obligation for all providers and deployers, regardless of risk tier
- The phased timeline under Article 113, as amended by the Digital Omnibus (Regulation (EU) 2026/1744), means most high-risk obligations apply from 2 December 2027
What Module 2 Covers
Module 2 drills into the obligations that apply specifically to high-risk AI systems under Annex III. This includes the risk management system (Article 9), data governance (Article 10), technical documentation (Article 11 and Annex IV), logging (Article 12), transparency (Article 13), human oversight (Article 14), accuracy and robustness (Article 15), conformity assessment (Article 43), and the full obligation sets for providers (Article 16) and deployers (Article 26).