AI Act obligations planner: which duties bind you, and from when.
Tick the roles you hold in the value chain and what the system is. You get the rows of the obligation register that bind you: the artefact that evidences each, its stack layer, the date it applies and its status on the date you choose, with a timeline and files to plan from.
Indicative, not legal advice and not a conformity claim. Nothing you enter leaves your browser.
JavaScript is off or has not loaded, so the filtered plan, the timeline and the exports are not available. The questions, the criteria and the guide below still work as a worksheet you can read and fill in by hand.
Built from 08. Regulatory map of the Body of Knowledge. Runs entirely in this page: no account and no upload.
One task from the everyday practice of AI governance, defined and compared.
Your obligations
A reading aid, not legal advice. Mappings are illustrative, not a claim of conformity. Register as of ; each row links its own page and sources, and the sources below back the role mapping. Dates from the post-Omnibus timeline.
| Date | What happens |
|---|
| Obligation | Why it binds you | Artefact and layer | Applies from | Status on the reference date | Patterns |
|---|
Duties outside the register
Your role carries these duties too. The register does not hold them as rows yet, so they have no id or layer; the dates are those of the same chapter of the Act.
How the planner reads the register
Each row of the obligation register names a clause, the artefact that evidences it, the stack layer that artefact lives in, who it binds, the date it applies and where it stands [3]. The planner adds only the role mapping and adds no date of its own.
- A row binds you when one of your roles is among its duty holders and the system carries one of its classes. Every system carries the baseline classes (Arts. 4 and 5); a GPAI role carries the GPAI classes.
- Its date is the one for your classes. The high-risk rows start on
2027-12-02 for Annex III systems and on 2028-08-02 for Annex I systems (
Art. 113(c)) [1][2]; the planner takes the earliest date among the classes you ticked and lists the later ones as steps. - Its status is read on your reference date, not copied: a row applies once its date has passed, whatever status the register gave it on its review date.
- Conditions stay visible. Where the Act narrows a duty to some holders of a role (the FRIA, registration by public-authority deployers, Article 25), the row carries the condition instead of dropping out [1][4].
The roles, and where their duties sit
| Role | Who holds it | Rows it binds |
|---|---|---|
| Provider Art. 3(3) | Develops an AI system, or has one developed, and places it on the market or puts it into service under its own name or trademark. | Art. 3(1), Art. 4, Art. 4a, Art. 5, Art. 6, Art. 6(3)–(4), Art. 9, Art. 10, Art. 11, Art. 12, Art. 13, Art. 14, Art. 15, Art. 15(4), Art. 16(l), Art. 17, Art. 17(1)(m), Art. 18, Art. 19, Art. 20, Art. 22, Art. 25, Art. 43, Art. 43(4), Art. 47, Art. 48, Art. 49 / Art. 71, Art. 50, Art. 60, Art. 72, Art. 73, Art. 73(6), Art. 75(1a), Art. 87 |
| Deployer Art. 3(4) | Uses an AI system under its authority, other than in a personal, non-professional activity. | Art. 3(1), Art. 4, Art. 5, Art. 25, Art. 26, Art. 26(2), Art. 26(4), Art. 26(5), Art. 26(6), Art. 26(7), Art. 26(11), Art. 27, Art. 49 / Art. 71, Art. 50, Art. 86, Art. 87 |
| Importer Art. 3(6) | Located or established in the Union; places on the market an AI system bearing the name or trademark of someone established outside it. | Art. 23, Art. 25, Art. 87 |
| Distributor Art. 3(7) | In the supply chain, other than the provider or the importer; makes an AI system available on the Union market. | Art. 24, Art. 25, Art. 87 |
| Authorised representative Art. 3(5) | Located or established in the Union, with a written mandate from a provider outside it to carry out its obligations on its behalf. | Art. 22, Art. 49 / Art. 71, Art. 54, Art. 87 |
| GPAI model provider Art. 53 | Provides a general-purpose AI model: the model itself, not a system built on it. | Art. 52, Art. 53, Art. 53(1)(c), Art. 54, Art. 87, Transparency chapter, Copyright chapter |
| Provider of a GPAI model with systemic risk Art. 55 | Provides a general-purpose AI model with systemic risk; the Art. 53 duties apply as well (Art. 55(1)). | Art. 52, Art. 53, Art. 53(1)(c), Art. 54, Art. 55, Art. 87, Safety and Security chapter, Transparency chapter, Copyright chapter, Safety and Security, Commitment 9, Safety and Security, Appendix 1.3 and 1.4 |
Every row the planner reads
The worksheet for planning by hand: 55 rows, in register order. Each links its own page with the artefact, the layer, the patterns and the crosswalk.
| Obligation | Binds | System class | Applies from | Later dates | Status |
|---|---|---|---|---|---|
| EU AI Act Art. 3(1) AI system definition (scope of the Act) AIGE-OBL-EUAIA-ART3-1 | Provider, Deployer | Every AI system | 2025-02-02 | None | In force |
| EU AI Act Art. 4 AI literacy AIGE-OBL-EUAIA-ART4 | Provider, Deployer | Every AI system | 2025-02-02 | 2026-07-27: Omnibus rewording in force: providers and deployers take measures to support AI literacy | In force |
| EU AI Act Art. 4a lawful basis for special-category data in bias detection AIGE-OBL-EUAIA-ART4A | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2026-07-27 | None | In force |
| EU AI Act Art. 5 prohibited practices (incl. new NCII and CSAM bans) AIGE-OBL-EUAIA-ART5 | Provider, Deployer | Prohibited-practice screen (every AI system) | 2025-02-02 | 2026-12-02: New bans on AI-generated NCII and CSAM apply | In force |
| EU AI Act Art. 6 classification of high-risk AI systems (incl. the Annex III route) AIGE-OBL-EUAIA-ART6 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | None | Deferred |
| EU AI Act Art. 6(3)–(4) documented non-high-risk assessment and registration AIGE-OBL-EUAIA-ART6-3 | Provider | High-risk through use (Annex III) | 2027-12-02 | None | Deferred |
| EU AI Act Art. 9 risk management system AIGE-OBL-EUAIA-ART9 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 10 data and data governance AIGE-OBL-EUAIA-ART10 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 11 technical documentation (Annex IV) AIGE-OBL-EUAIA-ART11 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 12 record-keeping and logging AIGE-OBL-EUAIA-ART12 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 13 transparency and information to deployers AIGE-OBL-EUAIA-ART13 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 14 human oversight AIGE-OBL-EUAIA-ART14 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 15 accuracy, robustness and cybersecurity AIGE-OBL-EUAIA-ART15 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 15(4) feedback loops in systems that continue to learn AIGE-OBL-EUAIA-ART15-4 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 16(l) accessibility requirements for high-risk AI systems AIGE-OBL-EUAIA-ART16-L | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 17 quality management system AIGE-OBL-EUAIA-ART17 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 17(1)(m) accountability framework within the quality management system AIGE-OBL-EUAIA-ART17-1M | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 18 documentation keeping AIGE-OBL-EUAIA-ART18 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 19 automatically generated logs kept by the provider AIGE-OBL-EUAIA-ART19 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 20 corrective actions and duty of information AIGE-OBL-EUAIA-ART20 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 22 authorised representative of non-EU high-risk providers AIGE-OBL-EUAIA-ART22 | Provider, Authorised representative Provider: Only if you are established outside the Union: before making the system available, appoint by written mandate an authorised representative established in the Union (Art. 22(1)).Authorised representative: Perform the mandate: verify the declaration of conformity, the technical documentation and the conformity assessment, keep them for 10 years, cooperate with the authorities, and end the mandate if the provider acts contrary to its obligations (Art. 22(3)). | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 23 obligations of importers AIGE-OBL-EUAIA-ART23 | Importer | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 24 obligations of distributors AIGE-OBL-EUAIA-ART24 | Distributor | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 25 responsibilities along the AI value chain AIGE-OBL-EUAIA-ART25 | Provider, Deployer, Importer, Distributor Provider: As the initial provider, cooperate with anyone who becomes the provider (Art. 25(2)) and fix the information and access your suppliers owe you in a written agreement (Art. 25(4)).Deployer: Only if you put your name or trademark on a high-risk system already on the market, make a substantial modification that keeps it high-risk, or change its intended purpose so it becomes high-risk: you then become its provider, with the Art. 16 duties (Art. 25(1)).Importer: Only if you put your name or trademark on a high-risk system already on the market, make a substantial modification that keeps it high-risk, or change its intended purpose so it becomes high-risk: you then become its provider, with the Art. 16 duties (Art. 25(1)).Distributor: Only if you put your name or trademark on a high-risk system already on the market, make a substantial modification that keeps it high-risk, or change its intended purpose so it becomes high-risk: you then become its provider, with the Art. 16 duties (Art. 25(1)). | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 26 deployer obligations for high-risk systems AIGE-OBL-EUAIA-ART26 | Deployer | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 26(2) human oversight assigned to persons with competence, training and authority AIGE-OBL-EUAIA-ART26-2 | Deployer | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 26(4) input data relevant and sufficiently representative AIGE-OBL-EUAIA-ART26-4 | Deployer | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 26(5) deployer monitoring, suspension and informing the provider AIGE-OBL-EUAIA-ART26-5 | Deployer | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 26(6) deployer retention of automatically generated logs AIGE-OBL-EUAIA-ART26-6 | Deployer | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 26(7) informing workers before workplace use AIGE-OBL-EUAIA-ART26-7 | Deployer Deployer: Only deployers who are employers, before putting the system into service or using it at the workplace: inform the workers’ representatives and the affected workers (Art. 26(7)). | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 26(11) informing people subject to Annex III decisions AIGE-OBL-EUAIA-ART26-11 | Deployer Deployer: Only where the system makes, or assists in making, decisions about natural persons: inform them that they are subject to its use (Art. 26(11)). | High-risk through use (Annex III) | 2027-12-02 | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 27 Fundamental Rights Impact Assessment (FRIA) AIGE-OBL-EUAIA-ART27 | Deployer Deployer: Only deployers that are bodies governed by public law or private entities providing public services, and deployers of Annex III point 5(b) and 5(c) systems (credit scoring, life and health insurance pricing); not Annex III point 2 (Art. 27(1)). | High-risk through use (Annex III) | 2027-12-02 | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 43 conformity assessment AIGE-OBL-EUAIA-ART43 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 43(4) new conformity assessment on substantial modification AIGE-OBL-EUAIA-ART43-4 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 47 EU declaration of conformity AIGE-OBL-EUAIA-ART47 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 48 CE marking AIGE-OBL-EUAIA-ART48 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 49/71 registration of high-risk systems in the EU database AIGE-OBL-EUAIA-ART49-71 | Provider, Deployer, Authorised representative Deployer: Only deployers that are public authorities, Union institutions, bodies, offices or agencies, or persons acting on their behalf (Art. 49(3)).Authorised representative: Where applicable, the authorised representative registers instead of the provider (Art. 49(1) and 49(2)). | High-risk through use (Annex III) | 2027-12-02 | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 50 transparency for certain AI systems AIGE-OBL-EUAIA-ART50 | Provider, Deployer Provider: Art. 50(1) and 50(2): tell people they are interacting with an AI system, and mark synthetic output in a machine-readable, detectable way.Deployer: Art. 50(3) and 50(4): inform people exposed to emotion recognition or biometric categorisation, and disclose deep fakes and AI text published to inform the public. | Transparency case (Art. 50) | 2026-08-02 | 2026-12-02: Marking grace for existing systems ends | In force |
| EU AI Act Art. 52 notification of a GPAI model meeting the systemic-risk threshold AIGE-OBL-EUAIA-ART52 | GPAI model provider, Provider of a GPAI model with systemic risk | GPAI model with systemic risk | 2025-08-02 | 2026-08-02: Commission enforcement powers apply; 2027-08-02: GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3)) | In force |
| EU AI Act Art. 53 GPAI provider obligations AIGE-OBL-EUAIA-ART53 | GPAI model provider, Provider of a GPAI model with systemic risk | GPAI model | 2025-08-02 | 2026-08-02: Commission enforcement powers apply; 2027-08-02: GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3)) | In force |
| EU AI Act Art. 53(1)(c) copyright policy honouring text-and-data-mining reservations AIGE-OBL-EUAIA-ART53-1C | GPAI model provider, Provider of a GPAI model with systemic risk | GPAI model | 2025-08-02 | 2026-08-02: Commission enforcement powers apply; 2027-08-02: GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3)) | In force |
| EU AI Act Art. 54 authorised representative of non-EU GPAI providers AIGE-OBL-EUAIA-ART54 | GPAI model provider, Provider of a GPAI model with systemic risk, Authorised representative GPAI model provider: Only if you are established outside the Union: before placing the model on the market, appoint by written mandate an authorised representative established in the Union (Art. 54(1)).Provider of a GPAI model with systemic risk: Only if you are established outside the Union: before placing the model on the market, appoint by written mandate an authorised representative established in the Union (Art. 54(1)).Authorised representative: Only when the mandate comes from a provider of a general-purpose AI model established outside the Union: verify the Annex XI documentation and the Art. 53 (and, where applicable, Art. 55) duties, keep the documentation for 10 years and cooperate with the AI Office. Free and open-source models that publish their parameters are exempt unless they present systemic risks (Art. 54(6)). | GPAI model | 2025-08-02 | 2026-08-02: Commission enforcement powers apply; 2027-08-02: GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3)) | In force |
| EU AI Act Art. 55 GPAI models with systemic risk AIGE-OBL-EUAIA-ART55 | Provider of a GPAI model with systemic risk | GPAI model with systemic risk | 2025-08-02 | 2026-08-02: Commission enforcement powers apply; 2027-08-02: GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3)) | In force |
| EU AI Act Art. 60 testing in real-world conditions outside sandboxes AIGE-OBL-EUAIA-ART60 | Provider Provider: Only if you test a high-risk system in real-world conditions outside an AI regulatory sandbox (Art. 60(1)). | High-risk through use (Annex III) | 2026-08-02 | None | In force |
| EU AI Act Art. 72 post-market monitoring AIGE-OBL-EUAIA-ART72 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 73 serious-incident reporting AIGE-OBL-EUAIA-ART73 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 73(6) incident investigation without altering the system AIGE-OBL-EUAIA-ART73-6 | Provider | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 75(1a) serious incidents reported to the AI Office AIGE-OBL-EUAIA-ART75-1A | Provider Provider: Only for systems under the AI Office’s exclusive competence: systems based on a general-purpose AI model from the same provider or undertaking (with the exceptions of Art. 75(1)(a)), and systems that are or sit in a very large online platform or search engine (Art. 75(1)). | High-risk through use (Annex III), High-risk through products (Annex I) | 2027-12-02 (Annex III)2028-08-02 (Annex I) | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 86 right to explanation of individual decision-making AIGE-OBL-EUAIA-ART86 | Deployer | High-risk through use (Annex III) | 2027-12-02 | 2030-08-02: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)) | Deferred |
| EU AI Act Art. 87 reporting of infringements and protection of reporting persons AIGE-OBL-EUAIA-ART87 | Provider, Deployer, Importer, Distributor, Authorised representative, GPAI model provider, Provider of a GPAI model with systemic risk Provider: Through Directive (EU) 2019/1937 (Art. 87): if you are a legal entity with 50 or more workers, your internal reporting channel also takes reports of AI Act infringements, and the people who report them are protected.Deployer: Through Directive (EU) 2019/1937 (Art. 87): if you are a legal entity with 50 or more workers, your internal reporting channel also takes reports of AI Act infringements, and the people who report them are protected.Importer: Through Directive (EU) 2019/1937 (Art. 87): if you are a legal entity with 50 or more workers, your internal reporting channel also takes reports of AI Act infringements, and the people who report them are protected.Distributor: Through Directive (EU) 2019/1937 (Art. 87): if you are a legal entity with 50 or more workers, your internal reporting channel also takes reports of AI Act infringements, and the people who report them are protected.Authorised representative: Through Directive (EU) 2019/1937 (Art. 87): if you are a legal entity with 50 or more workers, your internal reporting channel also takes reports of AI Act infringements, and the people who report them are protected.GPAI model provider: Through Directive (EU) 2019/1937 (Art. 87): if you are a legal entity with 50 or more workers, your internal reporting channel also takes reports of AI Act infringements, and the people who report them are protected.Provider of a GPAI model with systemic risk: Through Directive (EU) 2019/1937 (Art. 87): if you are a legal entity with 50 or more workers, your internal reporting channel also takes reports of AI Act infringements, and the people who report them are protected. | Every AI system | 2026-08-02 | None | In force |
| Safety and Security (systemic-risk models only) AIGE-OBL-GPAICOP-SAFETY | Provider of a GPAI model with systemic risk | GPAI model with systemic risk | No date | None | Voluntary |
| Transparency AIGE-OBL-GPAICOP-TRANSPARENCY | GPAI model provider, Provider of a GPAI model with systemic risk | GPAI model | No date | None | Voluntary |
| Copyright AIGE-OBL-GPAICOP-COPYRIGHT | GPAI model provider, Provider of a GPAI model with systemic risk | GPAI model | No date | None | Voluntary |
| Safety and Security Commitment 9: serious-incident reporting AIGE-OBL-GPAICOP-SAFETY-C9 | Provider of a GPAI model with systemic risk | GPAI model with systemic risk | No date | None | Voluntary |
| Safety and Security Appendix 1.3 and 1.4: autonomy, tool use and loss of control as systemic risks AIGE-OBL-GPAICOP-SAFETY-APP1 | Provider of a GPAI model with systemic risk | GPAI model with systemic risk | No date | None | Voluntary |
Every date these rows carry
- : Art. 3(1) starts; Art. 4 starts; Art. 5 starts
- : Art. 52 starts; Art. 53 starts; Art. 53(1)(c) starts; Art. 54 starts; Art. 55 starts
- : Art. 4: Omnibus rewording in force: providers and deployers take measures to support AI literacy; Art. 4a starts
- : Art. 50 starts; Art. 52: Commission enforcement powers apply; Art. 53: Commission enforcement powers apply; Art. 53(1)(c): Commission enforcement powers apply; Art. 54: Commission enforcement powers apply; Art. 55: Commission enforcement powers apply; Art. 60 starts; Art. 87 starts
- : Art. 5: New bans on AI-generated NCII and CSAM apply; Art. 50: Marking grace for existing systems ends
- : Art. 52: GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3)); Art. 53: GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3)); Art. 53(1)(c): GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3)); Art. 54: GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3)); Art. 55: GPAI models placed on the market before 2025-08-02 comply by this date (Art. 111(3))
- : Art. 6 starts (Annex III); Art. 6(3)–(4) starts; Art. 9 starts (Annex III); Art. 10 starts (Annex III); Art. 11 starts (Annex III); Art. 12 starts (Annex III); Art. 13 starts (Annex III); Art. 14 starts (Annex III); Art. 15 starts (Annex III); Art. 15(4) starts (Annex III); Art. 16(l) starts (Annex III); Art. 17 starts (Annex III); Art. 17(1)(m) starts (Annex III); Art. 18 starts (Annex III); Art. 19 starts (Annex III); Art. 20 starts (Annex III); Art. 22 starts (Annex III); Art. 23 starts (Annex III); Art. 24 starts (Annex III); Art. 25 starts (Annex III); Art. 26 starts (Annex III); Art. 26(2) starts (Annex III); Art. 26(4) starts (Annex III); Art. 26(5) starts (Annex III); Art. 26(6) starts (Annex III); Art. 26(7) starts (Annex III); Art. 26(11) starts; Art. 27 starts; Art. 43 starts (Annex III); Art. 43(4) starts (Annex III); Art. 47 starts (Annex III); Art. 48 starts (Annex III); Art. 49 / Art. 71 starts; Art. 72 starts (Annex III); Art. 73 starts (Annex III); Art. 73(6) starts (Annex III); Art. 75(1a) starts (Annex III); Art. 86 starts
- : Art. 6 starts (Annex I); Art. 9 starts (Annex I); Art. 10 starts (Annex I); Art. 11 starts (Annex I); Art. 12 starts (Annex I); Art. 13 starts (Annex I); Art. 14 starts (Annex I); Art. 15 starts (Annex I); Art. 15(4) starts (Annex I); Art. 16(l) starts (Annex I); Art. 17 starts (Annex I); Art. 17(1)(m) starts (Annex I); Art. 18 starts (Annex I); Art. 19 starts (Annex I); Art. 20 starts (Annex I); Art. 22 starts (Annex I); Art. 23 starts (Annex I); Art. 24 starts (Annex I); Art. 25 starts (Annex I); Art. 26 starts (Annex I); Art. 26(2) starts (Annex I); Art. 26(4) starts (Annex I); Art. 26(5) starts (Annex I); Art. 26(6) starts (Annex I); Art. 26(7) starts (Annex I); Art. 43 starts (Annex I); Art. 43(4) starts (Annex I); Art. 47 starts (Annex I); Art. 48 starts (Annex I); Art. 72 starts (Annex I); Art. 73 starts (Annex I); Art. 73(6) starts (Annex I); Art. 75(1a) starts (Annex I)
- : Art. 9: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 10: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 11: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 12: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 13: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 14: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 15: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 15(4): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 16(l): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 17: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 17(1)(m): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 18: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 19: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 20: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 22: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 23: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 24: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 25: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 26: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 26(2): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 26(4): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 26(5): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 26(6): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 26(7): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 26(11): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 27: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 43: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 43(4): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 47: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 48: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 49 / Art. 71: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 72: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 73: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 73(6): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 75(1a): Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2)); Art. 86: Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2))
By hand, without JavaScript
- Note the roles you hold and the classes the system carries.
- In the worksheet above, keep the rows whose "Binds" cell names one of your roles and whose "System class" cell names one of your classes (Every AI system and the prohibited-practice screen always count; GPAI classes count for GPAI roles).
- For each row kept, take the date for your class; if it is on or before your reference date, the row applies; otherwise it applies from that date.
- Build the artefact the row's page names, in the layer it names, and file its output as an evidence record against the row's id.
What this is not
The planner is a reading aid over the register, not legal advice and not a conformity assessment. It does not classify a system, check an Annex III exception or read Member State law; it trusts the roles and classes you tick. A later amendment, delegated act or guideline can move a date or reshape a duty after the review date; each row's page says when it was last checked. Mappings are illustrative, not a claim of conformity.
The same ground, the requirements that differ by organisational context (providers, deployers, importers and distributors), is a performance indicator of competency II.C in the AIGP Body of Knowledge v2.1 [6]; this site is not affiliated with or endorsed by IAPP. The calendar export follows RFC 5545 [5].
Sources
- [1] Regulation (EU) 2024/1689 (Artificial Intelligence Act), consolidated text of 27 July 2026 as amended by Regulation (EU) 2026/1744 (Arts. 3(3) to 3(8) operator roles; 22 and 54 authorised representatives; 23 importers; 24 distributors; 25; 27(1); 49(1) to 49(3); 50; 55(1); 60(1); 113(b) and (c) application dates). Publications Office of the EU (EUR-Lex). 2026-07-27. https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng (verified: primary)
- [2] Regulation (EU) 2026/1744 (Digital Omnibus on AI), of 8 July 2026; OJ L, 2026/1744, 24.7.2026 (the high-risk dates of Art. 113(c): Annex III from 2 December 2027, Annex I from 2 August 2028). Publications Office of the EU (EUR-Lex). 2026-07-24. https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng (verified: primary)
- [3] 08. Regulatory map: the EU AI Act and GPAI Code of Practice rows of the obligation register (ids, requirement, artefact, layers, duty holder, application date, status, later dates, system classes, patterns), the data this tool reads. AI Governance Engineering Body of Knowledge. 2026-09-24. https://aigovernanceengineer.com/bok/regulatory-map#eu-ai-act-post-omnibus (verified: primary)
- [4] 18. The EU AI Act: "The EU operator roles", "Article 25: when someone else becomes the provider", "Fundamental rights impact assessment (Article 27)" and "The post-Omnibus timeline". AI Governance Engineering Body of Knowledge. 2026-09-24. https://aigovernanceengineer.com/bok/eu-ai-act#the-eu-operator-roles (verified: primary)
- [5] RFC 5545, Internet Calendaring and Scheduling Core Object Specification (iCalendar) (DATE values for all-day events, an exclusive DTEND, UID and DTSTAMP per event). IETF. 2009-09. https://www.rfc-editor.org/rfc/rfc5545 (verified: primary)
- [6] AIGP Body of Knowledge and Exam Blueprint, version 2.1, competency II.C (the main elements of AI-specific laws), including the performance indicator on requirements that differ by organisational context such as providers, deployers, importers and distributors; effective 2 February 2026; cited by competency code only; this site is not affiliated with or endorsed by IAPP. IAPP. 2025-09-09. https://prod.iapp.org/media/pdf/certification/AIGP_Cert_BOK_2025_FINAL_v2.1.0.pdf (verified: primary)