EU AI Act Art. 14: human oversight
Human oversight designed into the system
AIGE-OBL-EUAIA-ART14. Drawn from chapter 08.
Text alternative
- Clause: EU AI Act, Art. 14.
- Duty holder: Provider.
- Applies from: 2027-12-02, Deferred.
- Artefact: Human-in-the-loop checkpoints.
- Layer: Layer 04 Runtime Controls & Observability.
- Evidence record: Agent register entry, +2 more.
- Record schemas: Agent register entry , Training record , Design record .
- The same topic in 17 other frameworks; the crosswalk section below links each clause.
- Id
AIGE-OBL-EUAIA-ART14- Instrument
- EU AI Act (post-Omnibus) law
- Compared side by side
- ISO 42001 vs EU AI Act · NIST AI RMF vs EU AI Act
- Clause
- Art. 14
- Duty holder
- Provider
- Authority
- National MSA
- Applies from
- Deferred · Annex III
- Later dates
-
- Applies to Annex I embedded (product safety-component) systems
- Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2))
- System class
- High-risk (Annex III) · High-risk (Annex I)
The artefact that evidences it
Human-in-the-loop checkpoints; kill switch; override and escalation paths.
Patterns that build it
- Runtime Guardrail (layer 4)
- Kill Switch / Circuit Breaker (layer 4)
- Agent Identity & Scoped Credentials (layer 4)
- Human-in-the-loop Gate (layer 4)
The same topic in other frameworks
From the topic crosswalk: the clauses filed under the same topics as this one. Mappings are illustrative, not a claim of conformity.
Human oversight
- ISO 42001 A.9 Use of AI systems (core)
- NIST AI RMF MANAGE 2.4 MANAGE 2.4: Mechanisms are in place and applied, and responsibilities are assigned and understood, to supersede, disengage, or deactivate AI systems that demonstrate performance or outcomes inconsistent with intended use (core)
- TC260 Framework 3.0 TC260 App. 2 II.3 Strengthen human approval (core)
- GDPR Art. 22 Automated individual decision-making, including profiling (core)
- NIST AI RMF MAP 3.5 MAP 3.5: Processes for human oversight are defined, assessed, and documented in accordance with organizational policies from the GOVERN function (core)
- CSA AICM GRC-15 Human supervision (core)
- Korea AI Act Art. 34(1)(4) Human management and supervision (core)
- UK DUAA UK GDPR Art. 22C Safeguards for automated decision-making (core)
- UK ATRS ATRS 2.3.2 Human review (core)
- Singapore Agentic Agentic 2.2.2 Design for meaningful human oversight (core)
- GAO AI Accountability 3.9 Human supervision: define and develop procedures for human supervision of the AI system (core)
- EU AI Act Art. 26 Obligations of deployers of high-risk AI systems
- NIST AI RMF GOVERN 3.2 GOVERN 3.2: Policies and procedures are in place to define and differentiate roles and responsibilities for human-AI configurations and oversight of AI systems
- China Algo. Rec. AlgoRec Art. 17 User option to switch off
- China GenAI Measures GenAI Art. 10 User guidance and protection
- OWASP Agentic ASI09 Human-Agent Trust Exploitation
- CoE Convention CoE Art. 8 Transparency and oversight
- OECD AI Principles OECD 1.2(b) Human agency and oversight safeguards
Agent identity and autonomy
- CSA AICM IAM-18 Agent Access Restriction (core)
- CSA AICM AIS-11 Agents Security Boundaries (core)
- OWASP Agentic ASI03 Identity and Privilege Abuse (core)
- OWASP LLM LLM03:2026 Excessive Agency (core)
- Singapore Agentic Agentic 2.1.2 Bound risks through design by defining agents limits and permissions (core)
- TC260 Framework 3.0 TC260 App. 2 II.2 Identity and access management (core)
- NIST AI RMF GOVERN 3.2 GOVERN 3.2: Policies and procedures are in place to define and differentiate roles and responsibilities for human-AI configurations and oversight of AI systems
- CSA AICM IAM-12 Unique Identities
- OWASP Agentic ASI02 Tool Misuse and Exploitation
- OWASP Agentic ASI07 Insecure Inter-Agent Communication
- OWASP Agentic ASI10 Rogue Agents
- Singapore Agentic Agentic 2.2.2 Design for meaningful human oversight
- TC260 Framework 3.0 TC260 App. 2 II.3 Strengthen human approval
Open controls that evidence it
Draft controls in the open control profiles that map to this row: each states a requirement and the evidence it must leave behind.
-
AIGE-CTL-EVAL-001Authorization Boundary (Evaluation environment profile) -
AIGE-CTL-EVAL-004Tool and Action Mediation (Evaluation environment profile) -
AIGE-CTL-EVAL-006Stop Conditions (Evaluation environment profile) -
AIGE-CTL-AGENT-001Registry entry (Agent runtime profile) -
AIGE-CTL-AGENT-005Tool allow-list, deny by default (Agent runtime profile) -
AIGE-CTL-AGENT-007Runtime guardrail on every tool call (Agent runtime profile) -
AIGE-CTL-AGENT-009Approval log, bound to the call (Agent runtime profile) -
AIGE-CTL-AGENT-010Per-agent circuit breaker (Agent runtime profile) -
AIGE-CTL-AGENT-011Drilled kill switch (Agent runtime profile) -
AIGE-CTL-AGENT-015Checkpoints on irreversible actions, failing closed (Agent runtime profile) -
AIGE-CTL-AGENT-017Output and egress filter (Agent runtime profile) -
AIGE-CTL-AGENT-019Local MCP servers sandboxed (Agent runtime profile) -
AIGE-CTL-DEPLOY-003Oversight by trained people with authority to stop (Deployment and monitoring profile)
Source
Chapter 08, section EU AI Act, post-Omnibus, checked against its sources on the review date above.
Machine-readable
- This obligation:
/api/v1/obligations/aige-obl-euaia-art14.json - The register:
/api/v1/obligations.json· CSV - Schema and stability promise: open data and API
Cite this obligation
García Aibar, J. (2026). EU AI Act Art. 14: human oversight (AIGE-OBL-EUAIA-ART14). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-euaia-art14. CC BY 4.0
BibTeX
@misc{aige2026obligation,
author = {Jorge García Aibar},
title = {{EU AI Act Art. 14: human oversight (AIGE-OBL-EUAIA-ART14)}},
howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
year = {2026},
version = {0.5.0},
doi = {10.5281/zenodo.22956197},
url = {https://aigovernanceengineer.com/obligations/aige-obl-euaia-art14},
note = {Version 0.5.0}
}