Top 10 operational impacts of the EU AI Act – Obligations on nonproviders of high-risk AI systems
This article provides insight into obligations on nonproviders of high-risk AI systems in relation to the EU AI Act.
Published: 28 Aug. 2024
This article is part of a series on the operational impacts of the EU AI Act. The full series can be accessed here, with the other articles in the series listed below.
What should you do if you are using or handling a high-risk AI system but are not a provider? The AI Act imposes a comprehensive set of obligations on deployers, importers, distributors and authorized representatives to ensure the safe and compliant use of high-risk AI systems within the EU.
These stakeholders must work together to uphold the principles of transparency, safety and accountability to foster trust and innovation in the AI ecosystem. Through diligent adherence to these regulations, the potential risks associated with AI can be mitigated, ensuring the benefits of AI are realized while protecting the fundamental rights and safety of individuals. The obligations imposed on deployers, importers, distributors and authorized representatives appear in Chapter II, Section 3.
This article provides insight into obligations on nonproviders of high-risk AI systems in relation to the EU AI Act.
Top 10 operational impacts of the EU AI Act
The overview page for the series can be accessed here.
- Subject matter, definitions, key actors and scope
- Understanding and assessing risk
- Obligations on providers of high-risk AI systems
- Obligations on nonproviders of high-risk AI systems
- Obligations for general-purpose AI models
- Governance: EU and national stakeholders
- AI Assurance across the risk categories
- Post-market monitoring, information sharing and enforcement
- Regulatory implementation and application alongside EU digital strategy
- Leveraging GDPR compliance

This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
Contributors:
Olivier Proust
Partner, Technology and Data, Fieldfisher
CIPP/E
Victoria Hordern
Partner, Data Protection and Privacy, Taylor Wessing
AIGP, CIPP/E, CIPT
Tags:
Top 10 operational impacts of the EU AI Act – Obligations on nonproviders of high-risk AI systems
This article provides insight into obligations on nonproviders of high-risk AI systems in relation to the EU AI Act.
Published: 28 Aug. 2024
Contributors:
Olivier Proust
Partner, Technology and Data, Fieldfisher
CIPP/E
Victoria Hordern
Partner, Data Protection and Privacy, Taylor Wessing
AIGP, CIPP/E, CIPT
This article is part of a series on the operational impacts of the EU AI Act. The full series can be accessed here, with the other articles in the series listed below.
What should you do if you are using or handling a high-risk AI system but are not a provider? The AI Act imposes a comprehensive set of obligations on deployers, importers, distributors and authorized representatives to ensure the safe and compliant use of high-risk AI systems within the EU.
These stakeholders must work together to uphold the principles of transparency, safety and accountability to foster trust and innovation in the AI ecosystem. Through diligent adherence to these regulations, the potential risks associated with AI can be mitigated, ensuring the benefits of AI are realized while protecting the fundamental rights and safety of individuals. The obligations imposed on deployers, importers, distributors and authorized representatives appear in Chapter II, Section 3.
This article provides insight into obligations on nonproviders of high-risk AI systems in relation to the EU AI Act.
Top 10 operational impacts of the EU AI Act
The overview page for the series can be accessed here.
- Subject matter, definitions, key actors and scope
- Understanding and assessing risk
- Obligations on providers of high-risk AI systems
- Obligations on nonproviders of high-risk AI systems
- Obligations for general-purpose AI models
- Governance: EU and national stakeholders
- AI Assurance across the risk categories
- Post-market monitoring, information sharing and enforcement
- Regulatory implementation and application alongside EU digital strategy
- Leveraging GDPR compliance

This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.
Tags:
