EU AI Act - High Risk Provisions

international — EU
Effective: August 2, 2026 56 platforms tracked 2363 provisions indexed Enforced by: EU AI Office, National Market Surveillance Authorities

Overview

The EU AI Act High Risk Provisions establish obligations for AI systems classified as high-risk under Article 6. These systems include AI used in critical infrastructure, education, employment, essential services, law enforcement, migration, and democratic processes. Providers of high-risk AI systems must implement risk management systems, ensure data governance, maintain technical documentation, enable human oversight, and achieve appropriate levels of accuracy, robustness, and cybersecurity. Deployers must use systems according to instructions, monitor operations, and conduct fundamental rights impact assessments. General-purpose AI models with systemic risk face additional transparency obligations including technical documentation, copyright compliance, and content provenance marking.

Penalties

Up to EUR 35 million or 7% of global annual turnover for prohibited AI practices. Up to EUR 15 million or 3% for other violations.

Key Articles & Sections

Platforms We Track Subject to

Recent Changes Related to

ConductAtlas maps governance language to potentially relevant regulatory frameworks. Regulatory applicability and enforceability may vary by jurisdiction, enforcement context, and individual circumstances. This page is informational and does not constitute legal advice. Methodology

Provisions Governed by (2363 across 56 platforms)

Aggregation and De-identification of Personal Data AI21 Labs
Medium
ZoomInfo Used for B2B Contact Enrichment AI21 Labs
Medium
AI21 Not Liable for Internet or Network Failures AI21 Labs
Medium
Use of Personal Data to Comply with Legal Obligations AI21 Labs
Medium
Marketing Email Opt-Out Right AI21 Labs
Medium
CCPA Appeal Process by Email AI21 Labs
Medium
No Warranty Arising from Oral or Written Advice AI21 Labs
Medium
Disclaimer of Warranty of Uninterrupted or Secure Service AI21 Labs
Medium
Privacy Policy Incorporated Into Agreement AI21 Labs
Medium
Use of Personal Data for Security and Fraud Prevention AI21 Labs
Medium
Right to Data Portability AI21 Labs
Medium
Requests Adversely Affecting Others May Be Limited AI21 Labs
Medium
Stripe Used for Payment and Fraud Detection AI21 Labs
Medium
HubSpot Data Used Only for Marketing and CRM AI21 Labs
Medium
Google Analytics Data Not Combined with Personal Data AI21 Labs
Medium
AI21 Disclaims Liability for Third Party Content AI21 Labs
Medium
Disclaimer of Warranty Regarding Effectiveness and Accuracy AI21 Labs
Medium
Disclaimer of Warranty That Materials Meet User Requirements AI21 Labs
Medium
California Civil Code 1542 Waiver by California Residents AI21 Labs
Medium
Claims Enforceable Only Against AI21 Entity AI21 Labs
Medium
User Right to Opt Out of Targeted Advertising and Data Sale AI21 Labs
Medium
Use of Personal Data for Marketing and Development AI21 Labs
Medium
Use of Personal Data to Provide Services AI21 Labs
Medium
Right to Lodge Complaint with Supervisory Authority AI21 Labs
Medium
Identity Verification Before Fulfilling Data Requests AI21 Labs
Medium
Fee Permitted for Manifestly Unfounded Requests AI21 Labs
Medium
YouTube API Usage for Caption Processing Only AI21 Labs
Medium
Facebook Ad Targeting Opt-Out Available AI21 Labs
Medium
Right to know about personal data processing Anthropic
Medium
Right to access and data portability Anthropic
Medium

Showing 30 of 2363 provisions. View all →

Official Source

View official regulation text →

Get alerted when platforms change their policies — including -relevant provisions.

Subscribe to Monitor — $19/mo

Frequently Asked Questions

What does require?

Which platforms does apply to?

ConductAtlas tracks -relevant provisions across 56 platforms. Each platform's specific provisions are classified by severity and mapped to requirements.

How does ConductAtlas monitor compliance?

ConductAtlas captures policy documents daily, classifies provisions by regulatory framework, and flags changes that affect obligations. Every change is archived with cryptographic verification.