How this was checked

Keeping deployer logs

Verified · last checked Settled, with the evidence a claim at this level needs.

Under the EU AI Act, deployers of high-risk AI systems must keep the logs the system generates automatically, to the extent those logs are under their control, for a period appropriate to the intended purpose of the system and in any case for at least six months, unless other Union or national law provides otherwise, in particular data protection law.

At a glance

The statement laid out, in its own words. The statement above and its sources are what count.

The duty

QuestionAnswer
WhoDeployers of high-risk AI systems
WhatThe logs the system generates automatically, to the extent those logs are under their control
How longA period appropriate to the intended purpose of the system, and in any case at least six months
UnlessOther Union or national law provides otherwise, in particular data protection law

Where the book relies on it

Kind of evidence
documentarySettled by a first-hand source, quoted below with the day it was read.

The evidence

Deployers of high-risk AI systems shall keep the logs automatically generated by that high-risk AI system to the extent such logs are under their control, for a period appropriate to the intended purpose of the high-risk AI system, of at least six months, unless provided otherwise in applicable Union or national law, in particular in Union law on the protection of personal data.

Regulation (EU) 2024/1689, Article 26(6), first subparagraph, in the consolidated text CELEX 02024R1689 as consolidated on 27 July 2026 (English). Read from sources/eu-ai-act/02024R1689-20260727-consolidated-EN.html, downloaded from EUR-Lex on 2026-10-08. The paragraph carries the base marker and was not amended by Regulation (EU) 2026/1744., read

Open the official source

Every sentence in our books that makes a claim about the world points at a page like this one.