Chapter III · Section 3 · Obligations of providers and deployers of high-risk AI systems and other parties
Article 21 — Cooperation with competent authorities
▼ Primary text, verbatim. Our annotations appear below, visibly separated.
1. Providers of high-risk AI systems shall, upon a reasoned request by a competent authority, provide that authority all the information and documentation necessary to demonstrate the conformity of the high-risk AI system with the requirements set out in Section 2, in a language which can be easily understood by the authority in one of the official languages of the institutions of the Union as indicated by the Member State concerned.
2. Upon a reasoned request by a competent authority, providers shall also give the requesting competent authority, as applicable, access to the automatically generated logs of the high-risk AI system referred to in Article 12(1), to the extent such logs are under their control.
3. Any information obtained by a competent authority pursuant to this Article shall be treated in accordance with the confidentiality obligations set out in Article 78.
This text is meant purely as a documentation tool and has no legal effect. The Union's institutions do not assume any liability for its contents. The authentic versions of the relevant acts, including their preambles, are those published in the Official Journal of the European Union and available in EUR-Lex.
What this means for you
In your terms · Cooperation with competent authorities
Producing months-old logs for one system on request is a retrieval procedure you can rehearse.
- Evidence retrieval procedure
In your terms · Cooperation with competent authorities
An authority request is answered from what exists: the response path, the language question and the named owner are decided in advance.
- Authority response runbook with named owner
Failure smells likeA reasoned request arrives with a deadline on it, and answering means asking four teams what they happen to have.
Obligations derived from this article
If you would rather not read the law
The basics page explains the Regulation's own categories in order: scope, role, tier, date. The engineering view groups the obligations by the platform capability they demand.