EU AI Act : contrôles et responsabilités
Comprendre les obligations, contrôles techniques et responsabilités organisationnelles.
EU AI Act : contrôles et responsabilités · En vigueur
Cette page présente les contrôles AI-FW sans remplacer les responsabilités de conformité ou d’audit.
Calendrier d’application
- 2 February 2025: À noter : Prohibited practices and AI literacy duties apply.
- 2 August 2025: À noter : General-purpose AI chapter and GPAI Code of Practice.
- 2 August 2026: À noter : Most transparency duties.
- 2 December 2026: À noter : Further duties for systems already on market.
- 2 December 2027: À noter : Annex III high-risk duties.
- 2 August 2027: À noter : Regulatory sandboxes and GPAI transition.
- 2 August 2028: À noter : Annex I duties for regulated products.
Rôle d’AI-FW
- À noter : AI-FW sits between applications, agents and model providers. It does not classify systems, perform conformity assessment or act as a notified body. It provides inspection, records, approval gates, incident signals and access governance.
Ce que le produit ne fait pas
- À noter : Classifying systems or determining legal roles.
- À noter : Creating provider quality systems or technical documentation.
- À noter : Performing conformity assessment, CE marking or EU registration.
- À noter : Writing fundamental-rights impact assessments.
- À noter : Delivering AI literacy training.
Contrôles associés
- À noter : Prohibited practices: À noter : Some uses, including manipulation and social scoring, are prohibited. AI-FW: À noter : Category-aware inbound/outbound rules and audit entries.
- À noter : Record-keeping: À noter : Maintain records for the required period. AI-FW: À noter : Transaction metadata for identity, model, decision, rule, latency and outcome.
- À noter : Transparency: À noter : Inform people about AI and mark synthetic output. AI-FW: À noter : Rules detect unlabelled synthetic content.
- À noter : Human oversight: À noter : Maintain effective human oversight. AI-FW: À noter : Approval gates linked to identity.
- À noter : Robustness: À noter : Resist manipulation and misuse. AI-FW: À noter : Prompt-injection detection and model resilience.
Éléments de preuve
- À noter : Framework status: À noter : Version assessed.
- À noter : Control status: À noter : Disabled controls shown as gaps.
- À noter : Rule inventory: À noter : State, direction and action.
- À noter : Logging: À noter : Retention compared with policy.
Responsabilités de l’organisation
- À noter : Classify systems and determine legal roles.
- À noter : Maintain quality management and technical documentation.
- À noter : Complete impact assessments where applicable.
- À noter : Register systems where required.
- À noter : Track deadlines; deferral does not pause duties already in force.
Questions fréquentes
À noter : Does AI-FW ensure EU AI Act compliance?
À noter : No. Classification, documentation, conformity assessment and impact reviews remain organisational duties.
À noter : Why does Annex III move to 2 December 2027?
À noter : The 2026 amendment deferred high-risk duties; Annex I moved to August 2028. Verify the applicable timeline.
À noter : Are prompts stored in evidence packs?
À noter : No. Packs contain control and configuration metadata, not prompt/response content.
Informations générales, sans conseil juridique ni audit.