How this was checked

Cooperation after the provider role changes

Verified · last checked Settled, with the evidence a claim at this level needs.

Under the EU AI Act as amended in 2026, where a deployer or other third party becomes the provider of a high-risk AI system, the provider that initially placed the system on the market stops being its provider and must cooperate closely with the new provider, making available technical documentation sufficient to assess compliance with Article 16, informing the new provider about known limitations and failure modes, and giving targeted technical access including for testing and validation. That duty to cooperate does not apply where the initial provider has clearly specified that its system is not to be changed into a high-risk AI system.

At a glance

The statement laid out, in its own words. The statement above and its sources are what count.

When it applies

  • A deployer or other third party becomes the provider of a high-risk AI system

The provider that first placed it on the market

  • stops being its provider
  • and must cooperate closely with the new provider

What the cooperation includes

  • Technical documentation sufficient to assess compliance with Article 16
  • Information about known limitations and failure modes
  • Targeted technical access, including for testing and validation

When it does not apply

  • Where the initial provider has clearly specified that its system is not to be changed into a high-risk AI system

Where the book relies on it

Kind of evidence
documentarySettled by a first-hand source, quoted below with the day it was read.

The evidence

Where the circumstances referred to in paragraph 1 occur, the provider that initially placed the AI system on the market or put it into service shall no longer be considered to be a provider of that specific AI system for the purposes of this Regulation. That initial provider shall closely cooperate with new providers and shall make available the necessary information and provide the reasonably expected technical access and other assistance that are required for the fulfilment of the obligations set out in this Regulation, in particular with regard to compliance with the conformity assessment of high-risk AI systems. In particular, the obligation laid down in the second subparagraph shall include, where relevant for the purposes specified therein, the following: (a) making available of technical documentation sufficient to assess compliance with the requirements laid down in Article 16; (b) informing the new providers about known limitations and failure modes; and (c) providing the new providers with targeted technical access, including for testing and validation. ... This paragraph shall not apply in cases where the initial provider has clearly specified that its AI system is not to be changed into a high-risk AI system and therefore does not fall under the obligation to cooperate with the new providers and hand over the documentation.

Regulation (EU) 2024/1689, Article 25(2), in the consolidated text CELEX 02024R1689 as consolidated on 27 July 2026 (English). Read from sources/eu-ai-act/02024R1689-20260727-consolidated-EN.html, downloaded from EUR-Lex on 2026-10-08. The whole paragraph carries the M1 marker: it was REPLACED by Regulation (EU) 2026/1744, point (12)(a). The text as published on 12 July 2024 is not among our sources, so which parts of the paragraph that replacement changed is not stated here. Article 99(4), point (da), inserted by the same regulation, attaches a fine band to breaches of Article 25(2)., read

Open the official source

Every sentence in our books that makes a claim about the world points at a page like this one.