Art.16

Article 16 — Obligations of Providers of High-Risk AI Systems

High-Risk Systems SME Relevant ~2 min read · 486 words

Article 16 is the master obligations list for providers of high-risk AI. It consolidates in one place everything a provider must do — from compliance with technical requirements to registration, CE marking, and post-market monitoring. If you are building or selling high-risk AI, this article is your compliance checklist.

! High compliance impact for SMEs

WHAT THE ARTICLE IS ABOUT

The full compliance checklist for high-risk AI providers

Article 16 opens Section 3 of Chapter III, shifting focus from what high-risk AI systems must do to what the people and organisations behind them must do. It lists all the obligations that fall specifically on providers — those who develop and place high-risk AI on the market — in a single consolidated article.

WHAT IT SAYS

Twelve obligations — from design to post-market

Ensure the AI system complies with the requirements set out in Section 2 (Articles 9 to 15)
Have a quality management system in place as required by Article 17
Draw up and keep up to date the technical documentation required by Article 11
When applicable, comply with the logging requirements of Article 12
Take the necessary corrective action and provide information as required by Article 20
Before placing a high-risk AI system on the market, carry out the relevant conformity assessment procedure
Register the AI system in the EU database as required by Article 49
Affix the CE marking and draw up an EU declaration of conformity
Comply with the obligations on authorised representatives where applicable
Take immediate corrective action for any non-compliant system already on the market — and if necessary withdraw or recall it
Inform the relevant national competent authorities of the non-compliance and of any corrective actions taken
Cooperate with competent authorities in any action they take regarding the system

WHO IS AFFECTED

Every provider of a high-risk AI system

Companies that develop and sell high-risk AI systems — this article is their primary obligations reference
Startups and scale-ups building AI products in Annex III categories
Non-EU companies placing high-risk AI on the EU market — they are also providers under this article
Any organisation that substantially modifies a high-risk AI system — they may assume provider obligations under Article 25

WHAT IT MEANS FOR SMES

Use this article as your project management checklist

If you are building a high-risk AI system, Article 16 is the single most useful article in the Act — it tells you everything you must complete before you can legally place your system on the EU market
Work through the list systematically: risk management, technical documentation, conformity assessment, registration, CE marking — each has its own article with further detail
The conformity assessment requirement is significant — for most Annex III systems this can be done through self-assessment, but some categories require third-party audit
CE marking is not just a formality — it carries legal weight and signals to deployers and regulators that you have completed the full compliance process
The post-market obligations in this list do not end at launch — corrective action, authority cooperation, and monitoring are ongoing responsibilities

Download the AI Act SME Compliance Tracker here.

Article 17 — Quality management system (first major obligation after technical compliance)
Article 43 — Conformity assessment (the process providers must complete before market launch)
Article 47 — EU declaration of conformity
Article 49 — Registration in the EU database
Article 25 — Responsibilities along the value chain (when distributor or deployer becomes provider)

← Back to the Guide