Article 73 of the EU AI Act: Serious Incident Reporting
Article 73 is the AI Act's incident-reporting duty: when a high-risk system causes a serious incident, the provider must tell the authorities — fast.
What Article 73 requires
Providers must report serious incidents to the relevant market-surveillance authority immediately after establishing a causal link, and no later than set deadlines: generally 15 days, shortened to 10 days where a death is involved, and as little as 2 days for a widespread infringement or critical-infrastructure disruption.
Who it binds
Providers of high-risk AI systems (and deployers who become aware of an incident must inform the provider). A serious incident includes death, serious harm to health, serious disruption of critical infrastructure, or breach of fundamental-rights obligations.
Key points
- Report to the market-surveillance authority, not just internally.
- Deadlines scale with severity: 15 / 10 / 2 days.
- Deployers must alert the provider on becoming aware.
FAQ
How fast must a serious incident be reported?
Generally within 15 days of establishing the causal link, cut to 10 days if a death is involved and as little as 2 days for critical-infrastructure disruption or widespread infringement.
Related articles
Run the free 2-minute checker — deterministic, no sign-up.