! High compliance impact for SMEs
WHAT THE ARTICLE IS ABOUT
Keeping humans meaningfully in control
Article 14 establishes human oversight as a mandatory design requirement for high-risk AI systems. It goes beyond simply saying ‘humans should be involved’ — it specifies what effective oversight actually means, and places obligations on both providers (to build oversight capability in) and deployers (to actually exercise it).
WHAT IT SAYS
Designed for oversight — not just technically interruptible
- High-risk AI systems must be designed and developed in a way that allows natural persons to effectively oversee them during the period of use
- Providers must identify the appropriate human oversight measures before placing the system on the market and must build these into the system or its instructions for use
- Oversight measures must enable the persons overseeing the system to: understand the system’s capabilities and limitations, detect and address failures or unexpected outputs, and intervene or override the system when necessary
- Where relevant, systems must include a stop button or similar capability that allows full shutdown
- The persons designated to oversee the system must have the necessary competence, training, and authority to do so — this is an obligation on deployers to ensure their staff are actually equipped to exercise oversight, not just nominally assigned to it
WHO IS AFFECTED
Providers build it in — deployers must exercise it
- Providers of high-risk AI systems — must build oversight mechanisms into the system as a design requirement
- Deployers of high-risk AI systems — must assign qualified individuals to exercise oversight and ensure they actually do so
- Any employee designated as an AI oversight officer within an organisation deploying high-risk AI
- HR departments responsible for ensuring staff have the competence to oversee AI systems
WHAT IT MEANS FOR SMES
Do not automate away the human check on consequential decisions
- This article has direct operational implications: if you are using a high-risk AI system to support decisions about people — hiring, lending, scoring — someone in your organisation must be genuinely capable of understanding and overriding that system
- Assigning oversight to someone who does not understand the AI system does not satisfy this requirement — the Act requires real competence, not just a job title
- When buying AI systems, ask vendors specifically what oversight mechanisms are built in and what the override procedure is
- Document your oversight arrangements — who is assigned, what training they have received, and how override decisions are logged
- This article is closely linked to Article 4 on AI literacy — the literacy obligation exists in part to ensure that oversight under Article 14 is meaningful
Related Articles
- Article 4 — AI literacy (oversight requires genuine understanding)
- Article 13 — Transparency (instructions for use must specify oversight requirements)
- Article 26 — Deployer obligations (deployers must implement the oversight measures specified)
- Article 9 — Risk management (oversight is one of the key risk mitigation measures)
