EU AI Act: controles y responsabilidades
Conozca obligaciones, controles técnicos y responsabilidades organizativas.
EU AI Act: controles y responsabilidades · En vigor
Esta página explica controles AI-FW sin reemplazar las responsabilidades de cumplimiento o auditoría.
Calendario de aplicación
- 2 February 2025: Nota: Prohibited practices and AI literacy duties apply.
- 2 August 2025: Nota: General-purpose AI chapter and GPAI Code of Practice.
- 2 August 2026: Nota: Most transparency duties.
- 2 December 2026: Nota: Further duties for systems already on market.
- 2 December 2027: Nota: Annex III high-risk duties.
- 2 August 2027: Nota: Regulatory sandboxes and GPAI transition.
- 2 August 2028: Nota: Annex I duties for regulated products.
Dónde encaja AI-FW
- Nota: AI-FW sits between applications, agents and model providers. It does not classify systems, perform conformity assessment or act as a notified body. It provides inspection, records, approval gates, incident signals and access governance.
Lo que el producto no hace
- Nota: Classifying systems or determining legal roles.
- Nota: Creating provider quality systems or technical documentation.
- Nota: Performing conformity assessment, CE marking or EU registration.
- Nota: Writing fundamental-rights impact assessments.
- Nota: Delivering AI literacy training.
Controles relacionados
- Nota: Prohibited practices: Nota: Some uses, including manipulation and social scoring, are prohibited. AI-FW: Nota: Category-aware inbound/outbound rules and audit entries.
- Nota: Record-keeping: Nota: Maintain records for the required period. AI-FW: Nota: Transaction metadata for identity, model, decision, rule, latency and outcome.
- Nota: Transparency: Nota: Inform people about AI and mark synthetic output. AI-FW: Nota: Rules detect unlabelled synthetic content.
- Nota: Human oversight: Nota: Maintain effective human oversight. AI-FW: Nota: Approval gates linked to identity.
- Nota: Robustness: Nota: Resist manipulation and misuse. AI-FW: Nota: Prompt-injection detection and model resilience.
Evidencias
- Nota: Framework status: Nota: Version assessed.
- Nota: Control status: Nota: Disabled controls shown as gaps.
- Nota: Rule inventory: Nota: State, direction and action.
- Nota: Logging: Nota: Retention compared with policy.
Responsabilidades de la organización
- Nota: Classify systems and determine legal roles.
- Nota: Maintain quality management and technical documentation.
- Nota: Complete impact assessments where applicable.
- Nota: Register systems where required.
- Nota: Track deadlines; deferral does not pause duties already in force.
Preguntas frecuentes
Nota: Does AI-FW ensure EU AI Act compliance?
Nota: No. Classification, documentation, conformity assessment and impact reviews remain organisational duties.
Nota: Why does Annex III move to 2 December 2027?
Nota: The 2026 amendment deferred high-risk duties; Annex I moved to August 2028. Verify the applicable timeline.
Nota: Are prompts stored in evidence packs?
Nota: No. Packs contain control and configuration metadata, not prompt/response content.
Información general, no es asesoramiento legal ni de auditoría.