EU AI Act Art.16: Obligations of providers of high-risk AI systems
Article 16 of the EU AI Act binds the provider. It requires Providers must discharge the full set of provider duties for each high-risk AI system: ensure it meets the Chapter III. This page states what it requires, who it binds and the evidence to keep. Browsing is free; the conformance kit is USD 499.
Specifics
| Instrument | Regulation (EU) 2024/1689 (the EU AI Act), as amended by Regulation (EU) 2026/1744 |
|---|---|
| Article | Art.16 |
| Binds | Provider |
| Group | High-Risk Operator Obligations |
| Evidence items | 5 |
| Linked NIST AI RMF controls | 0 |
| Linked ISO/IEC 42001 controls | 1 |
| Last updated |
Who does Art.16 bind?
The article binds the provider. The Act places each duty on a named party in the value chain, so a system can carry a provider duty and a deployer duty at once. Confirm your own position against the text; this page names the party, it does not rule on your facts.
Applies with the high-risk regime: 2 December 2027 for stand-alone systems listed in Annex III, and 2 August 2028 for AI embedded in regulated products listed in Annex I (Article 113, as amended by Regulation (EU) 2026/1744). See the full timeline.
What does Art.16 require?
Providers must discharge the full set of provider duties for each high-risk AI system: ensure it meets the Chapter III Section 2 requirements; indicate their name, registered trade name or registered trade mark and a contact address on the system or, where that is not possible, on its packaging or accompanying documentation; hold a quality management system complying with Art.17; keep the Art.18 documentation; keep the automatically generated logs under Art.19 where they are under their control; put the system through the Art.43 conformity assessment before it is placed on the market or put into service; draw up the Art.47 EU declaration of conformity; affix the CE marking under Art.48; comply with the Art.49(1) registration duty; take corrective action and provide information under Art.20; demonstrate conformity to a national competent authority on reasoned request; and ensure the system meets the accessibility requirements of Directives (EU) 2016/2102 and (EU) 2019/882.
This is our plain-language statement of the article, not the text of the regulation. Read the article: Art.16 (Regulation (EU) 2024/1689 on EUR-Lex).
What evidence should we keep for Art.16?
| Category | Evidence to keep |
|---|---|
| Provider obligations | A per-system compliance file showing each of the Art.16 points (a) to (l) discharged, with a named owner |
| Provider obligations | The identification marking showing name, registered trade name or trade mark and contact address, as affixed |
| Provider obligations | Evidence the conformity assessment completed before the recorded placing-on-market date rather than after |
| Provider obligations | An accessibility conformance record against Directives (EU) 2016/2102 and (EU) 2019/882 |
| Provider obligations | Records of conformity demonstrations made to national competent authorities on reasoned request |
What does a linked control mean here?
A linked control is a NIST AI RMF or ISO/IEC 42001 control that the held rule set records as a topical match, with a confidence and a one-line reason. It does not establish that meeting one requirement satisfies the other, it is not legal advice, and it is not certification. Where no control is recorded, the page says so and does not guess. Sources: the NIST AI RMF and ISO/IEC 42001.
Which NIST AI RMF controls line up with Art.16?
No NIST AI RMF control is recorded as a match for this obligation in the held rule set. It is left unlinked and marked, never guessed.
Which ISO/IEC 42001 controls line up with Art.16?
1 control in the held rule set is recorded as a topical match for this obligation, each with its confidence and reason.
| Control | ISO/IEC 42001 | Confidence |
|---|---|---|
A.6.2.5 | AI system deployment Provider gate covers conformity assessment, declaration, marking and registration before service. | medium |
What does the conformance kit add for Art.16?
The kit renders this obligation into your own role checklist with the evidence register, the linked controls and a CSV export, for USD 499 one off. See what is in the kit or open it.