Skip to content
RGPD

Article 21

Cooperation with competent authorities

1.   Providers of high-risk AI systems shall, upon a reasoned request by a competent authority, provide that authority all the information and documentation necessary to demonstrate the conformity of the high-risk AI system with the requirements set out in Section 2, in a language which can be easily understood by the authority in one of the official languages of the institutions of the Union as indicated by the Member State concerned.

2.   Upon a reasoned request by a competent authority, providers shall also give the requesting competent authority, as applicable, access to the automatically generated logs of the high-risk AI system referred to in Article 12(1), to the extent such logs are under their control.

3.   Any information obtained by a competent authority pursuant to this Article shall be treated in accordance with the confidentiality obligations set out in Article 78.

Common Questions

Frequently Asked Questions

What information must providers give to authorities about high-risk AI systems?
Providers must give authorities detailed information and documentation to show clearly that their high-risk AI system meets European safety and transparency rules when asked, and this information must be presented in a language that authorities can easily understand, specifically in one of the official EU languages as chosen by that country.
Can authorities access logs generated automatically by high-risk AI systems?
Yes, authorities can ask to access automatically generated logs from high-risk AI systems if these logs are controlled by the provider; having access to these logs helps authorities verify and monitor how the systems operate and ensure they comply with safety and transparency standards set by EU regulations.
How will the shared information with authorities be protected?
Information provided by the AI system providers to the competent authorities is subject to strict confidentiality requirements, meaning the authorities receiving the information must treat it securely and privately and follow specific rules defined in the European AI Act to prevent misuse or unauthorized access to the sensitive data shared.
In which language do providers communicate AI system information to the authorities?
Providers are expected to communicate with authorities in one of the official European Union languages designated by the specific Member State involved, helping ensure clear and understandable communication and minimizing misunderstandings about the compliance of high-risk AI systems with EU rules and standards.