EU AI Act Art. 14: human oversight

Human oversight designed into the system

By Jorge García Aibar Reviewed 2026-09-24

From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-EUAIA-ART14. Drawn from chapter 08.

Text alternative

Clause: EU AI Act, Art. 14.
Duty holder: Provider.
Applies from: 2027-12-02, Deferred.
Artefact: Human-in-the-loop checkpoints.
Layer: Layer 04 Runtime Controls & Observability.
Evidence record: Agent register entry, +2 more.
Record schemas: Agent register entry , Training record , Design record .
The same topic in 18 other frameworks; the crosswalk section below links each clause.

When this obligation applies The first date in the row's status, then each later step: filled once its date has passed, outlined while it is still ahead of the review date.

Data table: the dates

Dates of AIGE-OBL-EUAIA-ART14
Date	Step	Detail
2027-12-02	Deferred	Annex III
2028-08-02	High-risk (Annex I)	Applies to Annex I embedded (product safety-component) systems
2030-08-02	Later step	Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2))

Id

AIGE-OBL-EUAIA-ART14

Instrument

EU AI Act (post-Omnibus) law

Compared side by side

ISO 42001 vs EU AI Act · NIST AI RMF vs EU AI Act

Clause

Art. 14

Duty holder

Provider

Authority

National MSA

Applies from

2027-12-02 Deferred · Annex III

Later dates

2028-08-02 Applies to Annex I embedded (product safety-component) systems
2030-08-02 Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2))

System class

High-risk (Annex III) · High-risk (Annex I)

The artefact that evidences it

Human-in-the-loop checkpoints; kill switch; override and escalation paths.

L4 Runtime Controls & Observability

What this obligation connects to Solid edges are direct relations, dashed ones looser (a case that cites the same article, a framework whose clauses only touch the topic); patterns and controls take the colour of their stack layer. Select a node to open it; the lists below give every relation in full.

Data table: every relation

Relations of AIGE-OBL-EUAIA-ART14
Family	Item	Relation
Patterns	Agent Identity & Scoped Credentials	Direct
Patterns	Human-in-the-loop Gate	Direct
Patterns	Kill Switch / Circuit Breaker	Direct
Patterns	Runtime Guardrail	Direct
Open controls	AIGE-CTL-AGENT-009 Approval log, bound to the call	Direct
Open controls	AIGE-CTL-AGENT-033 Approval requests a person can read	Direct
Open controls	AIGE-CTL-EVAL-001 Authorization Boundary	Direct
Open controls	AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed	Direct
Open controls	AIGE-CTL-AGENT-011 Drilled kill switch	Direct
Open controls	AIGE-CTL-AGENT-019 Local MCP servers sandboxed	Direct
Open controls	AIGE-CTL-AGENT-017 Output and egress filter	Direct
Open controls	AIGE-CTL-AGENT-034 Oversight audited per approver	Direct
Open controls	AIGE-CTL-DEPLOY-003 Oversight by trained people with authority to stop	Direct
Open controls	AIGE-CTL-AGENT-010 Per-agent circuit breaker	Direct
Open controls	AIGE-CTL-AGENT-032 Plan reviewed before it runs	Direct
Open controls	AIGE-CTL-AGENT-001 Registry entry	Direct
Open controls	AIGE-CTL-AGENT-039 Restrictions tested by attempting what is denied	Direct
Open controls	AIGE-CTL-AGENT-007 Runtime guardrail on every tool call	Direct
Open controls	AIGE-CTL-EVAL-006 Stop Conditions	Direct
Open controls	AIGE-CTL-AGENT-005 Tool allow-list, deny by default	Direct
Open controls	AIGE-CTL-EVAL-004 Tool and Action Mediation	Direct
Same crosswalk topic	AI Verify 10.3.1, 10.3.2, 9.4.1	Core clause
Same crosswalk topic	CSA AICM GRC-15, IAM-18, AIS-11, IAM-12	Core clause
Same crosswalk topic	GAO AI Accountability 3.9	Core clause
Same crosswalk topic	GDPR Art. 22	Core clause
Same crosswalk topic	ISO 42001 A.9	Core clause
Same crosswalk topic	Korea AI Act Art. 34(1)(4)	Core clause
Same crosswalk topic	NIST AI RMF MANAGE 2.4, MAP 3.5, GOVERN 3.2	Core clause
Same crosswalk topic	OWASP Agentic ASI09, ASI03, ASI02, ASI07, ASI10	Core clause
Same crosswalk topic	OWASP LLM LLM03:2026	Core clause
Same crosswalk topic	Singapore Agentic Agentic 2.2.2, Agentic 2.1.2	Core clause
Same crosswalk topic	TC260 Framework 3.0 TC260 App. 2 II.3, TC260 App. 2 II.2	Core clause
Same crosswalk topic	UK ATRS ATRS 2.3.2	Core clause
Same crosswalk topic	UK DUAA UK GDPR Art. 22C	Core clause
Same crosswalk topic	China Algo. Rec. AlgoRec Art. 17	Related clause
Same crosswalk topic	China GenAI Measures GenAI Art. 10	Related clause
Same crosswalk topic	CoE Convention CoE Art. 8	Related clause
Same crosswalk topic	EU AI Act Art. 26	Related clause
Same crosswalk topic	OECD AI Principles OECD 1.2(b)	Related clause

Patterns that build it

Runtime Guardrail (layer 4)
Kill Switch / Circuit Breaker (layer 4)
Agent Identity & Scoped Credentials (layer 4)
Human-in-the-loop Gate (layer 4)

The same topic in other frameworks

From the topic crosswalk: the clauses filed under the same topics as this one. Mappings are illustrative, not a claim of conformity.

Human oversight

ISO 42001 A.9 Use of AI systems (core)
NIST AI RMF MANAGE 2.4 MANAGE 2.4: Mechanisms are in place and applied, and responsibilities are assigned and understood, to supersede, disengage, or deactivate AI systems that demonstrate performance or outcomes inconsistent with intended use (core)
TC260 Framework 3.0 TC260 App. 2 II.3 Strengthen human approval (core)
GDPR Art. 22 Automated individual decision-making, including profiling (core)
NIST AI RMF MAP 3.5 MAP 3.5: Processes for human oversight are defined, assessed, and documented in accordance with organizational policies from the GOVERN function (core)
CSA AICM GRC-15 Human supervision (core)
Korea AI Act Art. 34(1)(4) Human management and supervision (core)
UK DUAA UK GDPR Art. 22C Safeguards for automated decision-making (core)
UK ATRS ATRS 2.3.2 Human review (core)
Singapore Agentic Agentic 2.2.2 Design for meaningful human oversight (core)
GAO AI Accountability 3.9 Human supervision: define and develop procedures for human supervision of the AI system (core)
AI Verify 10.3.1 Human Agency and Oversight: define the role of the human in oversight and control of the AI system (in, over or out of the loop) (core)
AI Verify 10.3.2 Human Agency and Oversight: flag decisions the model is significantly unsure of for human review, and monitor human overrides (core)
EU AI Act Art. 26 Obligations of deployers of high-risk AI systems
NIST AI RMF GOVERN 3.2 GOVERN 3.2: Policies and procedures are in place to define and differentiate roles and responsibilities for human-AI configurations and oversight of AI systems
China Algo. Rec. AlgoRec Art. 17 User option to switch off
China GenAI Measures GenAI Art. 10 User guidance and protection
OWASP Agentic ASI09 Human-Agent Trust Exploitation
CoE Convention CoE Art. 8 Transparency and oversight
OECD AI Principles OECD 1.2(b) Human agency and oversight safeguards
AI Verify 9.4.1 Accountability: a manual to deactivate the AI model and a communications plan for disengagement

Agent identity and autonomy

CSA AICM IAM-18 Agent Access Restriction (core)
CSA AICM AIS-11 Agents Security Boundaries (core)
OWASP Agentic ASI03 Identity and Privilege Abuse (core)
OWASP LLM LLM03:2026 Excessive Agency (core)
Singapore Agentic Agentic 2.1.2 Bound risks through design by defining agents limits and permissions (core)
TC260 Framework 3.0 TC260 App. 2 II.2 Identity and access management (core)
NIST AI RMF GOVERN 3.2 GOVERN 3.2: Policies and procedures are in place to define and differentiate roles and responsibilities for human-AI configurations and oversight of AI systems
CSA AICM IAM-12 Unique Identities
OWASP Agentic ASI02 Tool Misuse and Exploitation
OWASP Agentic ASI07 Insecure Inter-Agent Communication
OWASP Agentic ASI10 Rogue Agents
Singapore Agentic Agentic 2.2.2 Design for meaningful human oversight
TC260 Framework 3.0 TC260 App. 2 II.3 Strengthen human approval

Open controls that evidence it

Draft controls in the open control profiles that map to this row: each states a requirement and the evidence it must leave behind.

AIGE-CTL-EVAL-001 Authorization Boundary (Evaluation environment profile)
AIGE-CTL-EVAL-004 Tool and Action Mediation (Evaluation environment profile)
AIGE-CTL-EVAL-006 Stop Conditions (Evaluation environment profile)
AIGE-CTL-AGENT-001 Registry entry (Agent runtime profile)
AIGE-CTL-AGENT-005 Tool allow-list, deny by default (Agent runtime profile)
AIGE-CTL-AGENT-007 Runtime guardrail on every tool call (Agent runtime profile)
AIGE-CTL-AGENT-009 Approval log, bound to the call (Agent runtime profile)
AIGE-CTL-AGENT-010 Per-agent circuit breaker (Agent runtime profile)
AIGE-CTL-AGENT-011 Drilled kill switch (Agent runtime profile)
AIGE-CTL-AGENT-015 Checkpoints on irreversible actions, failing closed (Agent runtime profile)
AIGE-CTL-AGENT-017 Output and egress filter (Agent runtime profile)
AIGE-CTL-AGENT-019 Local MCP servers sandboxed (Agent runtime profile)
AIGE-CTL-AGENT-032 Plan reviewed before it runs (Agent runtime profile)
AIGE-CTL-AGENT-033 Approval requests a person can read (Agent runtime profile)
AIGE-CTL-AGENT-034 Oversight audited per approver (Agent runtime profile)
AIGE-CTL-AGENT-039 Restrictions tested by attempting what is denied (Agent runtime profile)
AIGE-CTL-DEPLOY-003 Oversight by trained people with authority to stop (Deployment and monitoring profile)

Source

Chapter 08, section EU AI Act, post-Omnibus, checked against its sources on the review date above.

Machine-readable

This obligation: /api/v1/obligations/aige-obl-euaia-art14.json
The register: /api/v1/obligations.json · CSV
Schema and stability promise: open data and API

Cite this obligation

García Aibar, J. (2026). EU AI Act Art. 14: human oversight (AIGE-OBL-EUAIA-ART14). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-euaia-art14. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{EU AI Act Art. 14: human oversight (AIGE-OBL-EUAIA-ART14)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-euaia-art14},
  note         = {Version 0.5.0}
}