Article 72 of the EU AI Act: Post-Market Monitoring
Article 72 keeps compliance alive after launch: providers of high-risk AI must actively monitor real-world performance and feed it back into risk management.
What Article 72 requires
Providers must establish and document a post-market monitoring system proportionate to the risks, based on a monitoring plan, that systematically collects and analyses data on the system's performance throughout its life — enabling evaluation of continuous compliance and triggering corrective action or incident reports.
Who it binds
Providers of high-risk AI systems. Post-market monitoring closes the loop with the Article 9 risk-management system and the Article 73 incident duty.
Key points
- A documented, plan-based monitoring system, not ad hoc.
- Feeds back into risk management (Article 9).
- Can trigger corrective action or a serious-incident report (Article 73).
FAQ
Is post-market monitoring a one-off?
No — it's a continuous, documented system that collects and reviews real-world performance data across the system's whole life.
Related articles
Run the free 2-minute checker — deterministic, no sign-up.