PM-002HoogAanbiederDetectief
Operationeel gegevensverzamelingssysteem
Aanbieders moeten een systeem implementeren voor het verzamelen en analyseren van relevante gegevens over de prestaties van AI-systemen met een hoog risico gedurende hun operationele levensduur, inclusief gegevens die door gebruiksverantwoordelijken worden verstrekt in het kader van hun samenwerkingsverplichtingen.
Artikelen:Article 72(1)Article 26(6)
Bewijs voorbeelden
- Data collection mechanism description
- Deployer data sharing agreement
- Operational telemetry architecture
Normen
ISO 42001:2023 §9.1
Gerelateerde controles
- PM-001Post-Market Monitoring Plan EstablishmentArticle 72(3) requires providers to establish, document, and implement a post-market monitoring plan that proportionately reflects the nature of the AI…
- PM-003In-Operation Performance TrackingProviders must continuously track performance indicators in operation, comparing actual performance against the baseline established during pre-market…
- PM-004Incident Detection and Root Cause AnalysisProviders must implement automated and manual mechanisms to detect incidents and near-misses in operation, and conduct root cause analysis for significant…
- PM-005Serious Incident Reporting to AuthoritiesArticle 73(1) requires providers and deployers to report serious incidents to the relevant market surveillance authority without undue delay after…
- PM-006Corrective Action ProceduresProviders must implement documented corrective action procedures that specify how identified performance issues, incidents, and non-conformities are…
- PM-007Feedback Integration from DeployersProviders must establish channels for receiving and systematically processing feedback from deployers about AI system performance, incidents, and…
Gerelateerde AI-verordening-begrippen
- Post-Market MonitoringProactive collection and review of experience gained from the use of high-risk AI systems, to identify any need for corrective or preventive actions and ensure continued compliance throughout the system lifecycle.
- Logging CapabilitiesThe automatic recording of events by a high-risk AI system during its operation — required under Article 12 to enable monitoring of its operation, post-hoc investigation of incidents, and to support the post-market monitoring obligations of providers and deployers.
- Human OversightMeasures built into high-risk AI systems enabling natural persons to understand, monitor, and — where necessary — override or shut down the system. Must be proportionate to the risks and must ensure that deployers can intervene in the system's output before it takes effect.
Upgrade wanneer het juridisch verdedigbaar moet zijn.
De gratis vragenlijst geeft voorlopige signalen. De Volledige Beoordeling zet echte systeeminformatie om in een controleerbaar besluitdossier: extractie, componentscheiding, bewijs, nationale wetgeving en een auditklaar dossier.
Start gratis risicovoorbeeld