Article 42: Presumption of conformity with certain requirements
Article 42, Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744
High-risk AI systems
Amended by Regulation (EU) 2026/1744
The text below is the consolidated version, with the Digital Omnibus changes applied. Each change is listed under Amendments further down this page.
1. High-risk AI systems that have been trained and tested on data reflecting the specific geographical, behavioural, contextual or functional setting within which they are intended to be used shall be presumed to comply with the relevant requirements laid down in Article 10(4).
2. High-risk AI systems that have been certified or for which a statement of conformity has been issued under a cybersecurity scheme pursuant to Regulation (EU) 2019/881 and the references of which have been published in the Official Journal of the European Union shall be presumed to comply with the cybersecurity requirements set out in Article 15 of this Regulation in so far as the cybersecurity certificate or statement of conformity or parts thereof cover those requirements.
3. Where high-risk AI systems fall within the scope of Regulation (EU) 2024/2847 and the conditions laid down in Article 12(1) of that Regulation are fulfilled, such systems shall be deemed to comply with the cybersecurity requirements set out in Article 15 of this Regulation.
Amendments under Regulation (EU) 2026/1744 (1)
insert
Creates a presumption of compliance with the Article 15 cybersecurity requirements for high-risk AI systems falling within the Cyber Resilience Act (Regulation (EU) 2024/2847) where its Article 12(1) conditions are met.
Read the amended text
‘3. Where high-risk AI systems fall within the scope of Regulation (EU) 2024/2847 and the conditions laid down in Article 12(1) of that Regulation are fulfilled, such systems shall be deemed to comply with the cybersecurity requirements set out in Article 15 of this Regulation.’
Implementing this provision is a skill, not a lookup.
The EU AI Act Implementation Expert program teaches the working practice behind every article: classification, conformity, documentation, and the judgment to defend your decisions.
Mechanically consolidated from the official OJ texts of Regulations (EU) 2024/1689 and 2026/1744 (the Digital Omnibus, in force 27 July 2026); unofficial pending the official EUR-Lex consolidation. Study aid, not legal advice; the official texts on EUR-Lex are authoritative.