Article 16 of the EU AI Act: Provider Obligations
Article 16 is the master list of provider obligations for high-risk AI — it points to every duty a provider must meet before and after placing a system on the market.
What Article 16 requires
Providers must ensure the system meets the Chapter III requirements; operate a quality management system (Art. 17); keep documentation and logs; run the conformity assessment (Art. 43); draw up the declaration of conformity (Art. 47) and affix the CE marking (Art. 48); register the system (Art. 49); take corrective action; and cooperate with authorities. Non-EU providers must appoint an authorised representative (Art. 22).
Who it binds
Providers — including operators who, under Article 25, become providers by rebranding or substantially modifying a high-risk system.
Key points
- The umbrella article that references the full provider duty set.
- Includes QMS, conformity assessment, CE marking, registration and corrective action.
- Non-EU providers additionally need an EU authorised representative.
FAQ
Who is a provider under Article 16?
Anyone who develops a high-risk AI system, or has one developed, and places it on the market under their own name — plus anyone who rebrands or substantially modifies a high-risk system (Article 25).
Related articles
Run the free 2-minute checker — deterministic, no sign-up.