# EU AI act high risk compliance
> Source: https://legalcode.md/skills/legalcode-eu-ai-act-high-risk-compliance | [HTML version](https://legalcode.md/skills/legalcode-eu-ai-act-high-risk-compliance)

EU AI Act (Regulation 2024/1689) high-risk AI system compliance assessment covering risk classification determination (Annex I and Annex III categories), risk…

EU AI Act (Regulation 2024/1689) high-risk AI system compliance assessment covering risk classification determination (Annex I and Annex III categories), risk management system requirements (Art. 9), data governance and training data requirements (Art. 10), technical documentation (Art. 11, Annex IV), record-keeping and logging (Art. 12), transparency and provision of information to deployers (Art. 13), human oversight design (Art. 14), accuracy, robustness, and cybersecurity (Art. 15), quality management system (Art. 17), conformity assessment procedures (Art. 43, Annex VI/VII), CE marking and EU declaration of conformity (Art. 49, 71), post-market monitoring (Art. 72), and serious incident reporting (Art. 73). Use when a provider or deployer needs to assess EU AI Act compliance for a high-risk AI system, prepare for conformity assessment, build or audit a quality management system, gap-analyse an existing system against the August 2026 enforcement deadline, or determine whether a system falls within the high-risk or prohibited categories. Cross-references GDPR Article 35 DPIA requirements and ISO/IEC 42001:2023. Produces risk classification determinations, gap analysis reports, compliance checklists, remediation action plans, and conformity assessment preparation documentation.

This skill assesses whether a specific AI system meets the requirements of the EU AI Act (Regulation (EU) 2024/1689) for high-risk AI systems. It guides providers and deployers through the complete compliance lifecycle — from initial risk classification through conformity assessment preparation, post-market monitoring, and incident reporting readiness. **Covers:** - High-risk classification screening (Annex I + Annex III categories; Article 6 "significant risk" carve-out) - Prohibited AI practices screening (Annex I — to identify out-of-scope systems) - Risk management system audit (Article 9 — 4-element lifecycle assessment) - Data governance and training data review (Article 10) - Technical documentation gap analysis (Article 11, Annex IV) - Record-keeping and logging capability assessment (Article 12) - Transparency and instructions-for-use review (Article 13) - Human oversight design evaluation (Article 14) - Accuracy, robustness, and cybersecurity assessment (Article 15) - Quality management system gap analysis (Article 17; prEN 18286 alignment) - Conformity assessment path determination (Article 43; Annex VI vs. Annex VII) - CE marking and EU Declaration of Conformity preparation (Articles 49, 71) - Post-market monitoring plan review (Article 72) - Serious incident reporting readiness (Article 73) - Provider vs. deployer obligation mapping (Articles 16, 25, 26) - GDPR DPIA cross-reference (Article 35 ...

## Jurisdictions

Global



---
*Legalcode -- legalcode.md*