---
title: "European Economic Area — Safety & Incident Reporting | Global AI Monitor"
canonical: https://artificial-intelligence.gi/jurisdictions/european-economic-area/safety-and-incident-reporting/
source_html: /jurisdictions/european-economic-area/safety-and-incident-reporting/index.html
description: "European Economic Area — Safety & Incident Reporting: 08 Safety & Incident Reporting Active Under review ▾ # Artificial Intelligence Act (Valid from 2024-08-01): Horizontal EU regulation setting risk-based rules for AI systems and gen"
generated_at: 2026-10-25T22:24:54Z
content_sha256: 2b5b42d2b8a07f8e6b6a4e6b4851df4c167a929d05f064c4e9f6d82e52348dc8
generator: "fe-fleet/md-twin@1.0"
---
# European Economic Area — Safety & Incident Reporting | Global AI Monitor

### 08Safety & Incident ReportingActive Derived: Probable▾#

Artificial Intelligence Act (Valid from 2024-08-01): Horizontal EU regulation setting risk-based rules for AI systems and general-purpose AI models, applying in stages from 2 February 2025 to 2 August 2028 as amended by Regulation (EU) 2026/1744.

4 instruments · 3 obligations · 3 claims · Next: 2 Aug 2027 (Providers of GPAI models placed on the market before 2 August 2025 must comply)

4 instruments (4 current) · 3 obligations · 3 claims · 8 milestones

Instruments

- Artificial Intelligence Act Valid from 2024-08-01Horizontal EU regulation setting risk-based rules for AI systems and general-purpose AI models, applying in stages from 2 February 2025 to 2 August 2028 as amended by Regulation (EU) 2026/1744.Binding · Authority: European AI Office (European Commission), European Data Protection Supervisor · Verified 8 Oct 2026 · [Official text](https://eur-lex.europa.eu/eli/reg/2024/1689/oj)
- Cyber Resilience Act Valid from 2024-12-10Cybersecurity requirements for products with digital elements; the AI Act treats compliance with the CRA's essential requirements as supporting Article 15 cybersecurity compliance for high-risk AI.Binding · Verified 8 Oct 2026 · [Official text](https://eur-lex.europa.eu/eli/reg/2024/2847/oj)
- Draft guidance and reporting template on serious AI incidents Draft, no legal forceDraft Commission guidance and template for Article 73 serious incident reporting.Verified 8 Oct 2026 · [Official text](https://digital-strategy.ec.europa.eu/en/consultations/ai-act-commission-issues-draft-guidance-and-reporting-template-serious-ai-incidents-and-seeks)
- General Scheme of the Regulation of Artificial Intelligence Bill 2026 (Ireland) Draft, no legal forcePre-legislative draft heads of the Irish AI implementing bill, covering the national register, serious incident reporting and contravention notices.Verified 8 Oct 2026 · [Official text](https://enterprise.gov.ie/en/legislation/legislation-files/general-scheme-of-the-regulation-of-artificial-intelligence-bill-2026.pdf)

Obligations

- Article 73(1)-(2)Providers of high-risk AI systems must report serious incidents to the market surveillance authorities of the Member State where it occurred, immediately and in any event within 15 days of awareness.incident reporting · Applies to: provider · Artificial Intelligence Act
- Head 42(1)Providers of high-risk AI systems would report serious incidents to the relevant Irish market surveillance authority (draft head).incident reporting · Applies to: provider · General Scheme of the Regulation of Artificial Intelligence Bill 2026 (Ireland)
- Article 14(1)Manufacturers must notify actively exploited vulnerabilities in products with digital elements to the designated CSIRT and ENISA.incident reporting · Applies to: product manufacturer · Cyber Resilience Act

Milestones

- 1 Aug 2024Entry into force of the AI Act MetArtificial Intelligence Act
- 2 Feb 2025Chapters I and II (definitions, prohibitions) apply MetArtificial Intelligence Act
- 2 Aug 2025Governance, GPAI obligations and penalties apply; Member States designate authorities MetArtificial Intelligence Act
- 11 Jun 2026Cyber Resilience Act Chapter IV (conformity assessment bodies) applies MetCyber Resilience Act
- 2 Aug 2026General application; Article 50 transparency rules and enforcement start MetArtificial Intelligence Act
- 11 Sep 2026Cyber Resilience Act Article 14 reporting of actively exploited vulnerabilities applies MetCyber Resilience Act
- 2 Aug 2027Providers of GPAI models placed on the market before 2 August 2025 must comply UpcomingArtificial Intelligence Act
- 11 Dec 2027Cyber Resilience Act applies generally UpcomingCyber Resilience Act

Claims and evidence (3)
- High-risk AI providers must meet Article 16 duties and report serious incidents under Article 73, and deployers must meet Article 26 duties, from 2 December 2027 for Annex III systems.Confidence: Probable · As of 2 Dec 2027 · evidencedEvidence and sources[Regulation (EU) 2024/1689 (Artificial Intelligence Act), Official Journal text](https://eur-lex.europa.eu/eli/reg/2024/1689/oj) T1 · retrieved · retrieved 8 Oct 2026 · Article 16(a)Providers of high-risk AI systems shall: (a) ensure that their high-risk AI systems are compliant with the requirements set out in Section 2
- [Regulation (EU) 2024/1689 (Artificial Intelligence Act), Official Journal text](https://eur-lex.europa.eu/eli/reg/2024/1689/oj) T1 · retrieved · retrieved 8 Oct 2026 · Article 26(1)Deployers of high-risk AI systems shall take appropriate technical and organisational measures to ensure they use such systems in accordance with the instructions for use
- [Regulation (EU) 2024/1689 (Artificial Intelligence Act), Official Journal text](https://eur-lex.europa.eu/eli/reg/2024/1689/oj) T1 · retrieved · retrieved 8 Oct 2026 · Article 73(1)Providers of high-risk AI systems placed on the Union market shall report any serious incident to the market surveillance authorities of the Member States where that incident occurred.
- [Regulation (EU) 2024/1689 (Artificial Intelligence Act), Official Journal text](https://eur-lex.europa.eu/eli/reg/2024/1689/oj) T1 · retrieved · retrieved 8 Oct 2026 · Article 73(2)not later than 15 days after the provider or, where applicable, the deployer, becomes aware of the serious incident.
- [Regulation (EU) 2026/1744 (Digital Omnibus on AI), Official Journal text](https://publications.europa.eu/resource/cellar/b459c07f-86fb-11f1-bf5e-01aa75ed71a1.0006.01/DOC_1) T1 · retrieved · retrieved 8 Oct 2026 · Recital on application dates for high-risk systems2 December 2027 for AI systems classified as high-risk pursuant to Article 6(2) and Annex III, and to 2 August 2028 for AI systems classified as high-risk pursuant to Article 6(1) and Annex I.

- The Commission issued draft guidance and a reporting template on serious AI incidents on 26 September 2025 with feedback closing on 7 November 2025.Confidence: Probable · As of 26 Sep 2025 · evidencedEvidence and sources[AI Act: Commission issues draft guidance and reporting template on serious AI incidents](https://digital-strategy.ec.europa.eu/en/consultations/ai-act-commission-issues-draft-guidance-and-reporting-template-serious-ai-incidents-and-seeks) T1 · retrieved · retrieved 8 Oct 2026 · Consultation datesClosing: 07 November 2025 Stakeholders are encouraged to provide feedback and examples on the interplay with other reporting regimes in this public consultation.
- [AI Act: Commission issues draft guidance and reporting template on serious AI incidents](https://digital-strategy.ec.europa.eu/en/consultations/ai-act-commission-issues-draft-guidance-and-reporting-template-serious-ai-incidents-and-seeks) T1 · retrieved · retrieved 8 Oct 2026 · LeadUnder the EU AI Act, providers of high-risk AI systems will be required to report serious incidents to national authorities.

- Derived: Probable The General Scheme of the Regulation of Artificial Intelligence Bill 2026, published by Ireland's Department of Enterprise, sets out draft heads for a national AI register, serious-incident reporting and contravention notices.Confidence: Probable · As of 4 Feb 2026 · evidencedEvidence and sources[General Scheme of the Regulation of Artificial Intelligence Bill 2026](https://enterprise.gov.ie/en/legislation/legislation-files/general-scheme-of-the-regulation-of-artificial-intelligence-bill-2026.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Head 37(1)Head 37 - National Register and Reporting Obligations To provide that: (1) The Office shall establish and maintain a national register of: a. all instances of prohibited AI practices under Article 5; b. High-risk AI systems referred to in point 2 of Annex III.
- [General Scheme of the Regulation of Artificial Intelligence Bill 2026](https://enterprise.gov.ie/en/legislation/legislation-files/general-scheme-of-the-regulation-of-artificial-intelligence-bill-2026.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Head 42(1)Head 42 - Serious incidents To provide that: (1) Relevant Market Surveillance Authorities will receive reports of serious incidents from providers of High-Risk AI (HRAI) systems where the incident occurred.
- [General Scheme of the Regulation of Artificial Intelligence Bill 2026](https://enterprise.gov.ie/en/legislation/legislation-files/general-scheme-of-the-regulation-of-artificial-intelligence-bill-2026.pdf) T1 · retrieved · retrieved 8 Oct 2026 · Head 55(1)Head 55 - Contravention notice To provide that: (1) An authorised officer who is of the opinion that a person or entity is contravening or has contravened any provision of this Act or the AI Act may service a notice (in this Act referred to as a 'contravention notice') on the person or entity.

Open evidence