Announcing Agent Commander - The First Integrated solution from Veeam + Securiti.ai enabling the scaling of safe AI agents

View

Veeamon Tour'26 - Data & AI Trust CONVERGE for the Agentic Era

View

Article 24: Obligations of Distributors | EU AI Act

Contributors

Anas Baig

Product Marketing Manager at Securiti

Semra Islam

Sr. Data Privacy Analyst

CIPM, CIPP/Europe

Article 24 of the AI Act elaborates on the duties and obligations of distributors of high-risk AI systems.

Distributors must ensure the high-risk AI system bears the appropriate CE marking and is accompanied by a copy of the EU declaration of conformity and the instructions for use, before making it available on the market. They must also verify that the system's provider and importer have complied with their obligations per Articles 16 and 23.

If a distributor considers or has reasons to believe the high-risk AI system is not compliant with the requirements stated in the AI Act based on the information in its possession, it must only make the system available in the market once it is in conformity with the relevant requirements. Distributors must ensure that while they are responsible for a high-risk AI system, its storage or transport conditions do not compromise the system's compliance with the AI Act’s requirements.

If a distributor considers or has reasons to believe the high-risk AI system is not compliant with the requirements stated in the AI Act, on the basis of the information in its possession, it must take corrective actions to bring the system into compliance, withdraw it from the market, or recall it. Alternatively, they must ensure that the provider, importer, or any relevant operator (as appropriate) takes these corrective actions. In cases the system poses a risk within the meaning of Article 79(1), the distributor must inform the provider or importer of such as well as the competent authorities, specifying details of the non-compliance and any corrective measures taken.

If a competent authority makes a reasoned request, distributors of a high-risk AI system must provide all the information and documentation related to their actions necessary to demonstrate the compliance of the high-risk AI system with the AI Act. Distributors must cooperate with the competent authorities in any actions they take concerning a high-risk AI system that the distributors have made available on the market, particularly to reduce or mitigate any risks posed by the system.

Join Our Newsletter

Get all the latest information, law updates and more delivered to your inbox


Share

More Stories that May Interest You
Videos
View More
Rehan Jalil, Veeam on Agent Commander : theCUBE + NYSE Wired: Cyber Security Leaders
Following Veeam’s acquisition of Securiti, the launch of Agent Commander marks an important step toward helping enterprises adopt AI agents with greater confidence. In...
View More
Mitigating OWASP Top 10 for LLM Applications 2025
Generative AI (GenAI) has transformed how enterprises operate, scale, and grow. There’s an AI application for every purpose, from increasing employee productivity to streamlining...
View More
Top 6 DSPM Use Cases
With the advent of Generative AI (GenAI), data has become more dynamic. New data is generated faster than ever, transmitted to various systems, applications,...
View More
Colorado Privacy Act (CPA)
What is the Colorado Privacy Act? The CPA is a comprehensive privacy law signed on July 7, 2021. It established new standards for personal...
View More
Securiti for Copilot in SaaS
Accelerate Copilot Adoption Securely & Confidently Organizations are eager to adopt Microsoft 365 Copilot for increased productivity and efficiency. However, security concerns like data...
View More
Top 10 Considerations for Safely Using Unstructured Data with GenAI
A staggering 90% of an organization's data is unstructured. This data is rapidly being used to fuel GenAI applications like chatbots and AI search....
View More
Gencore AI: Building Safe, Enterprise-grade AI Systems in Minutes
As enterprises adopt generative AI, data and AI teams face numerous hurdles: securely connecting unstructured and structured data sources, maintaining proper controls and governance,...
View More
Navigating CPRA: Key Insights for Businesses
What is CPRA? The California Privacy Rights Act (CPRA) is California's state legislation aimed at protecting residents' digital privacy. It became effective on January...
View More
Navigating the Shift: Transitioning to PCI DSS v4.0
What is PCI DSS? PCI DSS (Payment Card Industry Data Security Standard) is a set of security standards to ensure safe processing, storage, and...
View More
Securing Data+AI : Playbook for Trust, Risk, and Security Management (TRiSM)
AI's growing security risks have 48% of global CISOs alarmed. Join this keynote to learn about a practical playbook for enabling AI Trust, Risk,...

Spotlight Talks

Spotlight
Consent by proxy: When AI agents start deciding for us
Watch Now View
Spotlight
Future-Proofing for the Privacy Professional
Watch Now View
Spotlight 50:52
From Data to Deployment: Safeguarding Enterprise AI with Security and Governance
Watch Now View
Spotlight 11:29
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Not Hype — Dye & Durham’s Analytics Head Shows What AI at Work Really Looks Like
Watch Now View
Spotlight 11:18
Rewiring Real Estate Finance — How Walker & Dunlop Is Giving Its $135B Portfolio a Data-First Refresh
Watch Now View
Spotlight 13:38
Accelerating Miracles — How Sanofi is Embedding AI to Significantly Reduce Drug Development Timelines
Sanofi Thumbnail
Watch Now View
Spotlight 10:35
There’s Been a Material Shift in the Data Center of Gravity
Watch Now View
Spotlight 14:21
AI Governance Is Much More than Technology Risk Mitigation
AI Governance Is Much More than Technology Risk Mitigation
Watch Now View
Spotlight 12:!3
You Can’t Build Pipelines, Warehouses, or AI Platforms Without Business Knowledge
Watch Now View
Spotlight 47:42
Cybersecurity – Where Leaders are Buying, Building, and Partnering
Rehan Jalil
Watch Now View
Latest
What Anthropic’s Zero Trust for AI Agents Means for the Data Layer View More
What Anthropic’s Zero Trust for AI Agents Means for the Data Layer
Agentic security requires a layered approach. The data layer is the highest leverage control point for security and governance teams.   Enterprises are deploying autonomous AI agents into production faster...
DSPM in 2026: Why It Matters More Than Ever View More
DSPM in 2026: Why It Matters More Than Ever
In 2026, the convergence of cloud expansion, SaaS proliferation, and agentic AI adoption has fundamentally changed the data security challenge, making Data Security Posture...
View More
An Overview of Bangladesh’s Personal Data Protection Act, 2026
Explore Bangladesh’s Personal Data Protection Act, 2026, including its key provisions, data subject rights, compliance requirements, and business impact.
[Knowledge Center] Enterprise Readiness Checklist View More
Enterprise Readiness Checklist: A Practical Guide to Scaling Secure, Compliant Operations
Discover what enterprise readiness is, its purpose, and ensure enterprise readiness with a practical enterprise readiness checklist.
Operationalizing AI Governance View More
Operationalizing AI Governance: A DPIA + LLM Toolkit
Learn how to operationalize AI governance with a practical DPIA and LLM toolkit. Assess privacy risks, implement controls, and ensure compliant AI deployment at...
Data Minimization Is the Obligation. Over-Retention Is the Symptom View More
Data Minimization Is the Obligation. Over-Retention Is the Symptom
Learn how continuous data minimization helps reduce security, compliance, and AI risks. Discover why 30% of enterprise data is ROT, how to automate remediation,...
Agentic AI Security: OWASP Top 10 with Enterprise Controls View More
Agentic AI Security: OWASP Top 10 with Enterprise Controls
Map the OWASP Top 10 risks for agentic AI to enterprise-grade controls, identity, data security, guardrails, monitoring, and governance to stop autonomous AI abuse.
You Can’t Protect What You Can’t See View More
You Can’t Protect What You Can’t See
Discover why disconnected security findings create hidden breach paths, why 57% of organizations can't prove data flows, and how to identify toxic risk combinations...
View More
Take the Data Risk Out of AI
Learn how to prepare enterprise data for safe Gemini Enterprise adoption with upstream governance, sensitive data discovery, and pre-index policy controls.
View More
Navigating HITRUST: A Guide to Certification
Securiti's eBook is a practical guide to HITRUST certification, covering everything from choosing i1 vs r2 and scope systems to managing CAPs & planning...
What's
New