Art.8

Article 8 — Compliance with Requirements for High-Risk AI Systems

High-Risk Systems SME Relevant ~2 min read · 352 words

Article 8 sets the baseline standard that all high-risk AI systems must meet. It is the entry point into the compliance chapter — establishing that providers of high-risk AI must satisfy all the requirements that follow in Articles 9 through 15, and explaining how existing EU law fits into the picture.

! High compliance impact for SMEs

WHAT THE ARTICLE IS ABOUT

The compliance checklist header for high-risk AI

Article 8 establishes the general compliance obligation for high-risk AI systems. It confirms that providers must meet all the requirements laid out in Chapter III, Section 2 of the Act — covering risk management, data governance, technical documentation, transparency, human oversight, and accuracy. It also clarifies the relationship between the AI Act and other EU product safety legislation.

WHAT IT SAYS

All nine requirements are mandatory — and can be integrated

High-risk AI systems must comply with all requirements set out in Articles 9 through 15 of the Act
Where a high-risk AI system is also subject to other EU harmonisation legislation — such as the Medical Devices Regulation or the Machinery Regulation — compliance with both sets of rules is required
To reduce duplication, providers can integrate their AI Act compliance obligations into existing conformity assessment procedures already required under other EU law
The Commission may issue guidance and common specifications to help providers demonstrate compliance

WHO IS AFFECTED

All high-risk AI providers — no exceptions

All providers of high-risk AI systems — this article applies to everyone classified as high-risk under Article 6
Providers operating in regulated sectors such as medical devices, automotive, aviation, and industrial machinery who already have existing EU compliance obligations
Conformity assessment bodies that audit high-risk AI systems

WHAT IT MEANS FOR SMES

The gateway to nine specific requirements

If you are a provider of high-risk AI, this article is your checklist header — it tells you that Articles 9 through 15 are all mandatory, not optional
If your product already carries CE marking under another EU regulation, you may be able to integrate your AI Act compliance into your existing audit process — reducing duplication and cost
The promise of common specifications from the Commission is relevant for SMEs — these will eventually provide clearer, more practical guidance on what compliance looks like in practice
Do not treat this article in isolation — read it as the gateway to the nine specific requirements that follow

Article 9 — Risk management system (first of the nine requirements)
Article 6 — High-risk classification (determines who Article 8 applies to)
Article 40 — Harmonised standards and common specifications

← Back to the Guide