EU AI Act (Regulation (EU) 2024/1689)

The European Union Artificial Intelligence Act. Article 12 requires high-risk AI systems to technically allow automatic event logging over their lifetime; Articles 19 and 26 require providers and deployers to keep those logs, to the extent under their control, for a period appropriate to the purpose and at least six months unless other law provides otherwise. The Digital Omnibus package (Council of the EU, 29 June 2026) deferred when these high-risk obligations start to apply, to 2 December 2027 (stand-alone Annex III systems) and 2 August 2028 (embedded Annex I systems); build to the requirement now, because that is the runway to be ready, not a reason to wait (see Topic 10.1).

The European Union's binding AI regulation, applying directly in every member state without separate national implementing legislation. Contains, among other provisions, Articles 14 and 15, which impose enforceable obligations on high risk AI systems, including autonomous agents operating in domains like credit decisions, insurance pricing, and investment advice.

The European Union's single, horizontal statute regulating AI systems by risk tier (unacceptable, high-risk, limited-risk, minimal-risk) with a separate cross-cutting regime for general-purpose AI models. In force 1 August 2024, phasing in through 2028 as delayed by the Digital Omnibus.

The European Union's comprehensive, risk-based AI law, in force since August 1, 2024, applying in phases. It governs AI systems placed on the EU market or whose outputs are used in the EU, and is the archetypal risk-based regime.

The European Union's binding Artificial Intelligence Act; Articles 14 (Human Oversight) and 15 (Accuracy, Robustness, Cybersecurity) apply to autonomous agents operating in high-risk domains, with high-risk obligations live from August 2026.