Regulation · articles · annexes

EU AI Act legal text, articles and annexes

Binding legal text, article pages, annex-related resources and official EU AI Act explorer pages.

48 documents Last update: 2026-10-05T18:18:58Z
LawEU

AI Act: Processing of Special Categories of Personal Data for Bias Detection

Article 4a of the EU AI Act allows processing of special categories of personal data for bias detection and correction in AI systems, subject to strict safeguards for fundamental rights, particularly for high-risk AI systems.

Source: European Commission / AI Act Service Desk

High-risk AI Data protection

StandardisationDE

AI Competence under EU AI Act

According to the EU AI Act, providers and users of AI systems must implement measures to develop AI competence among their staff. AI competence includes understanding, critical evaluation, and responsible use of AI. The regulation does not prescribe standardized training or specific competence levels.

Source: Bundesnetzagentur

High-risk AI AI literacy Standards Governance

GuidelineDE

Federal Network Agency: Definitions for AI Act

The Federal Network Agency provides definitions for the AI Act, including explanations of AI systems, involved actors, and biometric technologies. The document serves as an information source for implementing the EU AI Act.

Source: Bundesnetzagentur

AI literacy Governance Germany Data protection

LawEU

EU AI Act: Annex III on Risk Classification and Requirements

Annex III of the EU AI Act defines criteria for classifying AI systems as high-risk and sets detailed requirements for their development, deployment, and monitoring. It includes 83 specific articles covering risk management, data governance, transparency obligations, and conformity assessment procedures.

Source: European Commission

High-risk AI Standards Governance Data protection

Code of PracticeEU

Enforcement Framework of the EU AI Act

The document outlines the enforcement functions of the AI Office for GPAI models and AI systems. It clarifies responsibilities, investigative powers, sanctioning options, and monitoring tools. Enforcement begins on 2 August 2026.

Source: European Commission / European AI Office

Prohibited practices High-risk AI Transparency GPAI

ResourceDE

Complaints Office for AI Applications

The Federal Network Agency provides a complaints office for AI applications to support companies and users with questions regarding the AI Act. The service includes FAQs, contact options, and a focus on SMEs.

Source: Bundesnetzagentur

AI literacy Germany

ResourceDE

Federal Network Agency - AI Act

The Federal Network Agency prepares the implementation of the EU AI Act in Germany. The regulation governs AI systems based on risk, with strict requirements for transparency and safety at high risk levels. Effective from August 2027.

Source: Bundesnetzagentur

Transparency GPAI AI literacy Standards

LawEU

EDPB-EDPS Joint Opinion on the European Biotech Act

The EDPB and EDPS provide joint recommendations on data protection aspects of the European Biotech Act proposal. The proposal aims to strengthen the biotechnology industry while ensuring GDPR compliance in clinical trials and AI use.

Source: European Data Protection Board

High-risk AI AI literacy Standards Data protection

LawEU

EDPB Annual Report 2025 on the Support Pool of Experts

The EDPB 2025 Annual Report summarises the activities of the Support Pool of Experts (SPE), including completed projects on AI risks, data protection enforcement, and technological tools. The report highlights transparency and cooperation between supervisory authorities.

Source: European Data Protection Board

Transparency Standards Governance Germany

ResourceDE

AI Real Labs in the EU AI Act

The Federal Network Agency presents AI real labs as an innovation tool under the EU AI Act. Real labs allow companies to test AI systems under real conditions and clarify legal issues in advance. A pilot project and the EUSAiR pilot project provide practical insights.

Source: Bundesnetzagentur

AI literacy Governance Germany Data protection

StandardisationDE

Transparency Requirements for AI Systems

The Federal Network Agency explains transparency requirements for AI systems. Providers and deployers must meet specific requirements depending on the application, such as labeling synthetic content or informing affected individuals. Exceptions apply, for example, for criminal law purposes.

Source: Bundesnetzagentur

Transparency GPAI AI literacy Standards

GuidelineDE

EU AI Act Guidelines for General Purpose AI Models

The Federal Network Agency provides guidelines and best practices for General Purpose AI (GPAI) models under the EU AI Act. These include transparency obligations, copyright regulations, and safety measures. The Code of Practice supports providers in complying with the EU AI Act.

Source: Bundesnetzagentur

Transparency GPAI AI literacy Governance

ResourceDE

Risk Levels of the AI Act

The AI Act categorizes AI systems into four risk levels: unacceptable risk (banned), high risk (strictly regulated), limited risk (transparency obligations), and minimal risk (unregulated). High-risk systems require conformity assessments, while manipulative or surveillance systems are banned from 2025.

Source: Bundesnetzagentur

Prohibited practices High-risk AI Transparency GPAI

LawDE

Objectives, Target Groups and Timeline of the AI Act

The EU AI Act promotes trustworthy AI, protects health and fundamental rights, and establishes uniform rules. It applies to providers, operators, and distributors of AI systems from August 2, 2025. Deadlines and guidelines are defined until 2028.

Source: Bundesnetzagentur

Prohibited practices High-risk AI Transparency GPAI

ResourceDE

Federal Network Agency - AI Act

The Federal Network Agency prepares the implementation of the EU AI Act in Germany. The regulation governs AI systems on a risk-based approach, with strict requirements for transparency and safety at high risk. Effective from August 2027.

Source: Bundesnetzagentur

Transparency GPAI AI literacy Standards

GuidelineEU

Draft Guidelines for High-Risk AI Systems

The EU Commission's draft guidelines assist providers, deployers and authorities in assessing whether an AI system qualifies as high-risk. They explain the criteria under Article 6 of the AI Act and provide practical examples.

Source: European Commission

High-risk AI Governance

GuidelineEU

Draft Commission Guidelines on Classification of High-Risk AI Systems

The European Commission's draft guidelines assist providers and users of AI systems and market surveillance authorities in assessing whether an AI system should be classified as high-risk. They include practical examples and explain criteria under Article 6 of the EU AI Act.

Source: European Commission

High-risk AI Standards Governance

GuidelineEU

EU AI Act: Navigating the AI Act FAQ

The European Commission provides FAQs on implementing the EU AI Act. The regulation addresses risks to health, safety, and fundamental rights. It regulates prohibited AI systems, high-risk applications, transparency requirements, and general-purpose AI models.

Source: European Commission

Prohibited practices High-risk AI Transparency GPAI

Code of PracticeEU

EU AI Act: Transparency Code of Practice – Third and Final Draft

The European Commission has published the third and final draft of the Transparency Code of Practice under the EU AI Act. The code regulates the marking and disclosure of AI-generated content. Stakeholders across the AI value chain discussed technical and legal aspects during working group meetings and workshops.

Source: European Commission

Transparency Standards Governance

Code of PracticeEU

EU AI Act: Harmonised Standards for AI Systems

The European Commission promotes harmonised standards for the EU AI Act to simplify compliance. These standards, developed by CEN, CENELEC, and ETSI, will be published from 2026 onwards. They provide legal certainty for providers of high-risk AI systems.

Source: European Commission

High-risk AI Transparency GPAI AI literacy

StandardisationEU

Standardisation of the AI Act

The European Commission promotes harmonized standards for high-risk AI systems to ensure legal certainty and set global benchmarks. CEN and CENELEC are developing standards in ten key areas, including risk management and transparency. The first harmonized standard was published on October 30, 2025.

Source: European Commission

High-risk AI Transparency Standards Governance

StandardisationEU

Standardisation of the EU AI Act

The European Commission promotes harmonised standards for high-risk AI systems to ensure legal certainty and support innovation. These standards translate legal requirements into technical language, helping companies comply with the AI Act.

Source: European Commission

High-risk AI Transparency Standards Governance

GuidelineEU

EU AI Act: FAQs on General-Purpose AI Models

The European Commission provides FAQs on general-purpose AI models in the EU AI Act. It explains definitions, risks, obligations for providers, and transition periods. The focus is on transparency, copyright, and risk assessment.

Source: European Commission

High-risk AI Transparency GPAI AI literacy

GuidelineEU

EU Consultation on GPAI Code of Practice

The European Commission launches a consultation on a draft Code of Practice for General-Purpose AI (GPAI) providers. The code addresses transparency, copyright rules, risk identification, and mitigation. The AI Office will accompany the code and develop a template for training data summaries.

Source: European Commission / AI Office

Transparency GPAI Governance

Code of PracticeEU

EU Launches General-Purpose AI Code of Practice

The European Commission initiated the development of a General-Purpose AI Code of Practice under the AI Act. Nearly 1,000 stakeholders discussed transparency, copyright, risk assessment, and mitigation measures in an online plenary. The code will be developed in four working groups and is expected to be published in April 2025.

Source: European Commission / AI Office

Transparency GPAI Governance

FAQEU

Drafting a General-Purpose AI Code of Practice

The General-Purpose AI Code of Practice was developed through an inclusive process with over 1000 participants from industry, civil society and authorities. It helps providers comply with the AI Act's requirements for safety, transparency and copyright. The code is voluntary and will be applied from August 2025.

Source: European Commission / AI Office

Transparency GPAI Governance

GuidelineEU

EU General-Purpose AI Code of Practice

The voluntary GPAI Code of Practice supports providers in complying with AI Act requirements for safety, transparency, and copyright. Developed through a multi-stakeholder process, it includes three chapters, with safety and security applying only to providers with systemic risks.

Source: European Commission / AI Office

Transparency GPAI AI literacy Governance

Code of PracticeEU

Commission Opinion on GPAI Code of Practice

The Commission and the AI Board confirm that the GPAI Code of Practice is a suitable voluntary tool for providers to demonstrate compliance with the AI Act. It was developed by independent experts.

Source: European Commission / AI Office

GPAI Governance

Code of PracticeEU

EU Code of Practice for General-Purpose AI

The General-Purpose AI Code of Practice is a voluntary EU Commission guideline developed by 13 independent experts with input from over 1,000 stakeholders. It assists providers in complying with AI Act rules for GPAI from August 2, 2025. The Code includes three chapters on transparency, copyright, and safety.

Source: European Commission / AI Office

Transparency GPAI Governance

Code of PracticeEU

EU launches first General-Purpose AI Code of Practice

The EU initiates the development of the first General-Purpose AI Code of Practice with four working groups on transparency, copyright rules, risk identification, technical risk mitigation, and internal risk management. Experts from academia, industry, and civil society will collaborate until April 2025 to create a comprehensive framework.

Source: European Commission / AI Office

Transparency GPAI Standards Governance

GuidelineEU

EU Code of Practice for General-Purpose AI

The voluntary General-Purpose AI Code of Practice supports providers in complying with AI Act requirements on transparency, safety, and copyright. Published on July 10, 2025, it consists of three chapters.

Source: European Commission / AI Office

Transparency GPAI Standards Governance

GuidelineEU

Commission publishes guidelines on AI system definition

The European Commission has published guidelines on the definition of AI systems to facilitate the application of the first rules of the EU AI Act. The guidelines are non-binding and intended to evolve based on practical experiences.

Source: European Commission / DG CONNECT

Prohibited practices High-risk AI Transparency AI literacy

GuidelineEU

European Approach to Artificial Intelligence

The EU promotes research and industrial AI capacity while ensuring safety and fundamental rights. The AI Act establishes a four-tier risk framework. Initiatives like AI Factories and InvestAI support innovation and investments.

Source: European Commission / DG CONNECT

Prohibited practices High-risk AI Transparency GPAI

ConsultationEU

EU Consultation on AI Regulation Governance

The European Commission published a consultation on AI regulation governance. The document includes proposals for implementing the AI Act and aims to collect feedback for further development of the regulations.

Source: European Commission / DG CONNECT

Governance

LawEU

EU AI Act: First Comprehensive AI Regulatory Framework

The EU AI Act is the first comprehensive legal framework for AI, addressing risks and positioning Europe as a global tech leader. It defines four risk levels, bans certain AI practices, and imposes strict requirements for high-risk systems. The Act comes into force gradually from 2025.

Source: European Commission / DG CONNECT

Prohibited practices High-risk AI Transparency GPAI

LawEU

AI Act: Amendments to Annex III

Article 7 of the EU AI Act empowers the European Commission to amend Annex III by adding, removing, or modifying high-risk AI system use cases. Changes are subject to specific criteria and conditions outlined in the regulation.

Source: European Commission / AI Act Service Desk

High-risk AI Standards

LawEU

EU AI Act: Classification Rules for High-Risk AI Systems

Article 6 of the EU AI Act defines criteria for classifying AI systems as high-risk. An AI system is considered high-risk if it is used as a safety component of a product requiring third-party conformity assessment or listed in Annex III. Exceptions apply under specific conditions.

Source: European Commission / AI Act Service Desk

High-risk AI Standards Governance Data protection

LawEU

AI Act: Article 5 – Prohibited AI Practices

Article 5 of the EU AI Act prohibits AI systems that violate fundamental rights, such as manipulative techniques, exploitation of vulnerabilities, social scoring, and real-time remote biometric identification. Two additional prohibitions apply from 2 December 2026.

Source: European Commission / AI Act Service Desk

Prohibited practices High-risk AI Transparency GPAI

LawEU

EU AI Act: Article 4 – AI Literacy

Article 4 of the EU AI Act requires providers and deployers of AI systems to implement measures to promote AI literacy among their staff and third parties. The Commission and Member States support these efforts, particularly SMEs. It does not require guaranteeing a specific level of AI literacy for individuals.

Source: European Commission / AI Act Service Desk

AI literacy Governance

LawEU

EU AI Act: Article 2 - Scope

Article 2 of the EU AI Act defines the scope of the regulation. It specifies who is subject to the regulation when offering, deploying, importing, or distributing AI systems or general-purpose AI models within the EU. Military applications, research activities, and natural persons using AI for personal purposes are excluded.

Source: European Commission / AI Act Service Desk

High-risk AI Transparency GPAI Standards

LawEU

EU AI Act: Article 1 - Subject Matter

Article 1 of the EU AI Act defines the regulation's subject matter. It establishes the objective to improve the internal market and promote trustworthy AI while protecting fundamental rights and safety. The regulation sets harmonised rules for AI systems.

Source: European Commission / AI Act Service Desk

Prohibited practices High-risk AI Transparency GPAI

ResourceEU

EU AI Act National Resources

The document lists national resources and contact points for implementing the EU AI Act in various countries. It names the competent authorities in Cyprus, Italy, Belgium, Austria, Lithuania, Luxembourg, Germany, and the Netherlands.

Source: European Commission / AI Act Service Desk

Standards Governance Germany

LawEU

EU AI Act: FAQs on Enforcement and Governance

The FAQs address common questions on enforcement and governance of the EU AI Act. They cover the responsibilities of the AI Office, EDPS, and national authorities, the establishment of complaint and whistleblower tools, and the application of rules for GPAI models and high-risk AI systems.

Source: European Commission / AI Act Service Desk

High-risk AI Governance GPAI Data protection

ResourceEU

EU AI Act: Implementation Timeline

The EU AI Act legislation is implemented progressively, with the full application of the main milestones by 2 August 2028. The timeline accounts for amendments introduced by the Digital Omnibus on AI.

Source: European Commission / AI Act Service Desk

High-risk AI Transparency GPAI AI literacy

LawEU

EU Commission's AI Act Service Desk

The EU Commission's AI Act Service Desk enables stakeholders to submit questions about the AI Act to the AI Office. Users can log in with EU Login, complete a form, and ask questions in any official EU language. Communication happens via email.

Source: European Commission / AI Act Service Desk

Governance Data protection

LawEU

EU AI Act Explorer by European Commission

The AI Act Explorer by the European Commission is a reference tool for the EU AI Act (Regulation (EU) 2024/1689). It enables searching for prohibited practices, risk classifications, transparency obligations, and requirements for AI systems. The document has been supplemented by the Digital Omnibus Regulation (EU 2026/1744).

Source: European Commission / AI Act Service Desk

Prohibited practices High-risk AI Transparency GPAI

ResourceEU

EU AI Act: Single Information Platform for AI Regulation

The EU AI Act, effective from August 1, 2024, establishes harmonized rules for trustworthy AI. The Single Information Platform supports providers and users in complying with regulations through interactive tools like the Compliance Checker and AI Act Explorer.

Source: European Commission / AI Act Service Desk

GPAI Standards Governance Germany

LawEU

EU AI Act 2024/1689: Harmonized AI Regulation

Regulation (EU) 2024/1689 establishes harmonized rules for artificial intelligence to strengthen the internal market and ensure a high level of protection for health, safety, and fundamental rights. It regulates high-risk AI systems, protects personal data, and promotes trustworthy, human-centric AI.

Source: EUR-Lex / Europäische Union

High-risk AI Standards Germany Data protection