The text below is the consolidated version, with the Digital Omnibus changes applied. Each change is listed under Amendments further down this page.
1. High-risk AI systems that have been trained and tested on data reflecting the specific geographical, behavioural, contextual or functional setting within which they are intended to be used shall be presumed to comply with the relevant requirements laid down in Article 10(4).
2. High-risk AI systems that have been certified or for which a statement of conformity has been issued under a cybersecurity scheme pursuant to Regulation (EU) 2019/881 and the references of which have been published in the Official Journal of the European Union shall be presumed to comply with the cybersecurity requirements set out in Article 15 of this Regulation in so far as the cybersecurity certificate or statement of conformity or parts thereof cover those requirements.
3. Where high-risk AI systems fall within the scope of Regulation (EU) 2024/2847 and the conditions laid down in Article 12(1) of that Regulation are fulfilled, such systems shall be deemed to comply with the cybersecurity requirements set out in Article 15 of this Regulation.
Amendments under Regulation (EU) 2026/1744 (1)
insert
Creates a presumption of compliance with the Article 15 cybersecurity requirements for high-risk AI systems falling within the Cyber Resilience Act (Regulation (EU) 2024/2847) where its Article 12(1) conditions are met.
Read the amended text
‘3. Where high-risk AI systems fall within the scope of Regulation (EU) 2024/2847 and the conditions laid down in Article 12(1) of that Regulation are fulfilled, such systems shall be deemed to comply with the cybersecurity requirements set out in Article 15 of this Regulation.’
Mechanically consolidated from the official OJ texts of Regulations (EU) 2024/1689 and 2026/1744 (the Digital Omnibus, in force 27 July 2026); unofficial pending the official EUR-Lex consolidation. Study aid, not legal advice; the official texts on EUR-Lex are authoritative.
GAGE briefings tell you which AI regulation deadlines are coming, what they actually require of you, and when a program opens.