Article 71 — EU Database — Requirements and Obligations

Article 71

EU database for high-risk AI systems listed in Annex III

1. The Commission shall, in collaboration with the Member States, set up and maintain an EU database containing
information referred to in paragraphs 2 and 3 of this Article concerning high-risk AI systems referred to in Article 6(2)
which are registered in accordance with Articles 49 and 60 and AI systems that are not considered as high-risk pursuant to
Article 6(3) and which are registered in accordance with Article 6(4) and Article 49. When setting the functional
specifications of such database, the Commission shall consult the relevant experts, and when updating the functional
specifications of such database, the Commission shall consult the Board.

2. The data listed in Sections A and B of Annex VIII shall be entered into the EU database by the provider or, where
applicable, by the authorised representative.

3. The data listed in Section C of Annex VIII shall be entered into the EU database by the deployer who is, or who acts on
behalf of, a public authority, agency or body, in accordance with Article 49(3) and (4).

4. With the exception of the section referred to in Article 49(4) and Article 60(4), point (c), the information contained in
the EU database registered in accordance with Article 49 shall be accessible and publicly available in a user-friendly manner.
The information should be easily navigable and machine-readable. The information registered in accordance with Article 60
shall be accessible only to market surveillance authorities and the Commission, unless the prospective provider or provider
has given consent for also making the information accessible the public.

5. The EU database shall contain personal data only in so far as necessary for collecting and processing information in
accordance with this Regulation. That information shall include the names and contact details of natural persons who are
responsible for registering the system and have the legal authority to represent the provider or the deployer, as applicable.

100/144 ELI: http://data.europa.eu/eli/reg/2024/1689/oj
OJ L, 12.7.2024 EN

6. The Commission shall be the controller of the EU database. It shall make available to providers, prospective providers
and deployers adequate technical and administrative support. The EU database shall comply with the applicable accessibility
requirements.

CHAPTER IX

POST-MARKET MONITORING, INFORMATION SHARING AND MARKET SURVEILLANCE

SECTION 1
Post-market monitoring