Home / The Act / Chapter III / Article 19

Article 19 — Automatically generated logs

APPLIES DEC 2, 2027 WAS 2026-08-02 AMENDED BY OMNIBUS

Chapter III · High-risk tier
Source: EUR-Lex · CELEX 32024R1689
Verified 2026-07-16

PLAIN-LANGUAGE SUMMARY — ORIGINAL INTERPRETATION, NOT THE OFFICIAL TEXT

Providers must retain the logs their high-risk systems generate automatically, so far as those logs stay under their control. Retention should suit the system's purpose and run for at least six months, unless other Union or national law, particularly data-protection rules, sets a different period. Financial institutions may keep these logs as part of the records their sectoral law already demands.

AMENDED BY THE DIGITAL OMNIBUS ON AI

This provision's application date moved under the Omnibus. It now applies from 2027-12-02 (originally 2026-08-02). Source: Omnibus final text (OJ pending) · verified 2026-07-16

OFFICIAL TEXT Read verbatim on EUR-Lex ↗

The authoritative wording lives on EUR-Lex, quoted there in all 24 languages. We deep-link to the paragraph level rather than reproducing the full text. The consolidated post-Omnibus version will be linked the day its CELEX publishes.

AT A GLANCE

Chapter: III — High-risk AI systems

Applies: Dec 2, 2027

Tier: High-risk tier

Provider obligations →Compliance guidance →

PENALTY EXPOSURE

€15M or 3%

of worldwide turnover — see Art. 99 penalties framework.

← PREVIOUS · ART. 18 Documentation keeping NEXT · ART. 20 → Corrective actions and duty of information

ELSEWHERE IN CHAPTER III — High-risk AI systems

Art. 6 Classification rules for high-risk AI systems Art. 7 Amendments to Annex III Art. 8 Compliance with the requirements Art. 9 Risk management system Art. 10 Data and data governance Art. 11 Technical documentation Art. 12 Record-keeping Art. 13 Transparency and provision of information to d