LISTEN NOW: Evolution of Data Controls in the Era of Generative AI

View

Article 45: Information Obligations of Notified Bodies | EU AI Act

Contributors

Anas Baig

Product Marketing Manager at Securiti

Syed Tatheer Kazmi

Associate Data Privacy Analyst, Securiti

CIPP/Europe

Article 45 of the AI Act provides critical guidance related to the information obligations of all notified bodies. Notified bodies are organizations that assess a product's conformity before it is available for sale in the EU.

The notified bodies must inform the notifying authority of the following:

  • Any Union technical documentation assessment certificates, supplements to such certificates, as well as quality management system approvals issued in accordance with Annex VII;
  • Any refusals, restrictions, suspensions, or withdrawals of Union technical documentation assessment certificates, or a quality management system approvals issued in accordance with Annex VII;
  • Any circumstances that affect the scope or conditions for notifications;
  • Any requests for information received from market surveillance authorities related to conformity assessment activities;
  • All information related to conformity assessment activities performed within the scope of the notification and other activities performed, such as cross-border activities and subcontracting, when requested.

Similarly, each notified body must inform the other notified bodies of the following:

  • Any quality management system approvals that it refused, suspended, or withdrew and, upon request, information related to quality management system approvals it issued;
  • Union technical documentation assessment certificates or supplements to such certificates that it has refused, withdrawn, suspended, or restricted. Additionally, upon request, it shall provide details of any certificates and supplements that it issued.

Each notified body must provide all other notified bodies performing similar conformity assessment activities covering the same types of AI systems with the necessary information related to the negative and, on request, positive results of conformity assessment.

Notified bodies must maintain the confidentiality of the information they receive in accordance with Article 78.

Suscríbase a nuestro boletín

Obtenga toda la información más reciente, actualizaciones de leyes y más en su bandeja de entrada


Compartir

Videos

Spotlight Talks

Spotlight 1:10:56

Cómo Prepararse y Actuar Positivamente ante la Ley 81

Cómo Prepararse yActuar Positivamente ante la Ley 81
Ver ahora View

Latest

View More

From Trial to Trusted: Securely Scaling Microsoft Copilot in the Enterprise

AI copilots and agents embedded in SaaS are rapidly reshaping how enterprises work. Business leaders and IT teams see them as a gateway to...

The ROI of Safe Enterprise AI View More

The ROI of Safe Enterprise AI: A Business Leader’s Guide

The fundamental truth of today’s competitive landscape is that businesses harnessing data through AI will outperform those that don’t. Especially with 90% of enterprise...

Data Security Governance View More

Data Security Governance: Key Principles and Best Practices for Protection

Learn about Data Security Governance, its importance in protecting sensitive data, ensuring compliance, and managing risks. Best practices for securing data.

AI TRiSM View More

What is AI TRiSM and Why It’s Essential in the Era of GenAI

The launch of ChatGPT in late 2022 was a watershed moment for AI, introducing the world to the possibilities of GenAI. After OpenAI made...

Managing Privacy Risks in Large Language Models (LLMs) View More

Managing Privacy Risks in Large Language Models (LLMs)

Download the whitepaper to learn how to manage privacy risks in large language models (LLMs). Gain comprehensive insights to avoid violations.

View More

Top 10 Privacy Milestones That Defined 2024

Discover the top 10 privacy milestones that defined 2024. Learn how privacy evolved in 2024, including key legislations enacted, data breaches, and AI milestones.

Comparison of RoPA Field Requirements Across Jurisdictions View More

Comparison of RoPA Field Requirements Across Jurisdictions

Download the infographic to compare Records of Processing Activities (RoPA) field requirements across jurisdictions. Learn its importance, penalties, and how to navigate RoPA.

Navigating Kenya’s Data Protection Act View More

Navigating Kenya’s Data Protection Act: What Organizations Need To Know

Download the infographic to discover key details about navigating Kenya’s Data Protection Act and simplify your compliance journey.

Gencore AI and Amazon Bedrock View More

Building Enterprise-Grade AI with Gencore AI and Amazon Bedrock

Learn how to build secure enterprise AI copilots with Amazon Bedrock models, protect AI interactions with LLM Firewalls, and apply OWASP Top 10 LLM...

DSPM Vendor Due Diligence View More

DSPM Vendor Due Diligence

DSPM’s Buyer Guide ebook is designed to help CISOs and their teams ask the right questions and consider the right capabilities when looking for...

What's
New