The EU AI Act: high-risk system requirements, by obligation theme and by role
Once a system is classified high-risk, the EU AI Act attaches specific duties to specific roles. This is where the Act stops being conceptual and becomes a compliance checklist.
Why this matters for the AIGP exam
High-risk obligations are tested role by role: given a scenario, whose duty is it — the provider's or the deployer's? Getting the role boundary right answers most of these questions on its own.
The essentials
- Provider obligations come in seven themes: a risk management system running across the life cycle; data governance for training, validation and test data; technical documentation; automatic logging; transparency and instructions to deployers; human oversight designed into the system; and accuracy, robustness and cybersecurity.
- Before market: conformity assessment, CE marking, and registration in the EU database. After market: post-market monitoring and serious-incident reporting.
- Deployer obligations are lighter but real: use the system per its instructions, assign competent human oversight, control the quality of input data, monitor operation, keep logs, and inform affected workers. Public-sector deployers add a fundamental rights impact assessment.
- Roles can shift. A deployer that puts its own name on a high-risk system, or substantially modifies one, becomes its provider — and inherits the provider's duties. Scenarios test this trap directly.
What the exam asks
Assign a described duty to the right role, recognise when a deployer has become a provider, and know the order of pre-market steps. Article-number recall is rarely required; the structure is.
Going deeper
This page is the condensed version. The full topic — with the detail above expanded and practice questions attached — is in the app, inside Domain II. Domain I, a quarter of the course, is free to try first.
Back to the AIGP study guide.
AI Governance Study is an independent study aid. It does not represent a government entity: it is not affiliated with, endorsed by or authorised by any government, government agency or regulatory authority, and it does not provide government services or legal advice. Laws and frameworks are described in our own words — the official texts are listed at official sources. It is also not affiliated with, endorsed by, or sponsored by the IAPP. The AIGP name is used only to identify the exam this material helps you prepare for.