Question 1

What is the definition of a 'provider' according to the EU AI Act?

Accepted Answer

A provider is defined in Article 3 as a natural or legal person who develops or has an AI system developed and places it on the market or puts it into service under their own name or trademark, whether for payment or free of charge.

Question 2

What is the definition of a 'deployer' according to the EU AI Act?

Accepted Answer

Article 3 defines a deployer as any natural or legal person who uses an AI system under their authority, except where the AI system is used in the course of a personal non-professional activity. For example, an employer using AI for recruitment.

Question 3

Under which circumstances does a deployer become a provider according to Article 25?

Accepted Answer

Article 25 states that a deployer becomes a provider (and inherits all provider obligations) when they make substantial modifications to a high-risk AI system or change its intended purpose. This ensures accountability for significant changes.

Question 4

Who is responsible for conducting the conformity assessment of a high-risk AI system?

Accepted Answer

Article 43 states that the provider is responsible for conducting the conformity assessment before the high-risk AI system is placed on the market. This includes preparing technical documentation and affixing the CE marking.

Question 5

What obligations does a deployer have according to Article 26 when using a high-risk AI system?

Accepted Answer

Article 26 imposes several obligations on deployers of high-risk AI: ensure human oversight, monitor the system's operation, inform natural persons that they are subject to the AI system, and conduct a FRIA (public sector).

Question 6

Who is responsible for maintaining the technical documentation according to Article 11?

Accepted Answer

The provider is responsible according to Article 11 for creating and maintaining technical documentation for 10 years after placing on the market. Deployers do have an obligation to keep logs.

Question 7

What must a deployer do when they discover a serious incident with a high-risk AI system?

Accepted Answer

Article 26(7) requires deployers to immediately report serious incidents to the provider and the relevant market surveillance authority. This is crucial for rapid response and risk management.

Question 8

What specific additional obligation do deployers in the public sector have according to Article 26?

Accepted Answer

Article 27 requires that public authorities and services of general interest conduct a Fundamental Rights Impact Assessment (FRIA) before deploying a high-risk AI system. This is in addition to regular deployer obligations.

Provider vs Deployer Quiz