EU AI Act Art. 8 — Compliance with the requirements
Article 8 is the master clause for high-risk AI: every system must meet the quality requirements in Articles 9–15 — risk management, data governance, documentation, logging, transparency, human oversight, and accuracy. For AI embedded in regulated products, compliance plugs into the existing product conformity route.
At a glance
What this article requires
- High-risk AI must satisfy the Chapter III, Section 2 requirements (Arts 9–15) throughout its lifecycle.
- Requirements apply relative to the system's intended purpose and the state of the art.
- For AI that is part of an Annex I product (e.g. a medical device), testing and reporting integrate with the product's existing conformity procedures.
- Compliance evidence feeds the technical documentation and the conformity assessment.
Scope
Who this applies to
Providers of high-risk AI — and deployers who modify a system enough to become a provider, who then inherit Article 8 compliance duties.
Obligations
What you must actually do
Treat Articles 9–15 as a single package
Article 8 does not add new standalone requirements; it makes the full Section 2 suite mandatory and non-negotiable for high-risk systems.
Integrate with product conformity
Where AI is a safety component of an Annex I product, run the AI Act testing within the product's existing conformity assessment to avoid duplication.
Keep requirements current
Reassess compliance when the intended purpose, data, or model materially changes.
Action plan
Practical first steps
- 1
Run an Article 8 checklist against Articles 9–15 for each high-risk system before development concludes.
- 2
Map each requirement to an owner and an evidence document.
- 3
For Annex I products, coordinate the AI Act assessment with the sectoral notified body early.
Penalty exposure
Article 8 failures sit in the general tier: up to €15 million or 3% of global annual turnover.
FAQ
Questions about Art. 8
Is Article 8 a separate obligation from Articles 9–15?
Not really. It is the umbrella clause that makes the whole set of Section 2 requirements binding — you cannot satisfy it without satisfying each underlying article.
Does Article 8 apply to general-purpose AI models?
GPAI models have their own regime (Arts 51–56). Article 8 applies to high-risk systems; a GPAI model faces Article 8 duties only when it is integrated into a high-risk system as part of the provider chain.
Sources
Citations & further reading
Related
More article explainers
Wondering which articles apply to your AI?
Describe your system in the free Risk Scanner and get a preliminary risk read with the obligations that likely apply — in seconds.
Check my use casePreliminary EU AI Act clarity summary. Not legal advice.