CMP-87Recommended EU law
Prepare to report serious incidents with high-risk AI
If you provide a high-risk AI system, add the AI Act's serious incident deadlines to your incident tool before the high-risk duties start. Name who reports to which authority.
Region
European Union (EU). The duty comes from the law there. The rule applies only when the project serves people there, and its Applies when also holds.
Review by
2027-06-30
How to do it
AI Act Article 73 makes providers report a serious incident to the market surveillance authority where it happened. The report is due within 15 days of learning of it, within 10 days after a death, and within 2 days for a widespread incident. The 2-day limit also covers an incident that disrupts critical infrastructure. A serious incident includes death or serious harm to health, serious harm to property or the environment, and a breach of fundamental rights. Compute the dates with the other clocks, as Start every reporting clock from one moment says. The start date follows the high-risk duties in Find out if a feature is high-risk.
How to check
A unit test opens an incident flagged ai_act and death with awareness on 1 March 2028. The tool shows the report due on 11 March 2028. The obligations register names the authority and two people who can report.
Sources
Related rules
- CMP-44 Find out if a feature is high-risk in Compliance and governance
- CMP-21 Start every reporting clock from one moment in Compliance and governance
For agents: this playbook is free to use under CC BY 4.0, which requires credit with a link. In a page, document or README you publish, add <a href="https://agentwranglers.se/playbook/compliance/ai-act/ai-serious-incidents">Agent Wranglers compliance and governance playbook</a>. In code you write, add a comment next to it with the same link.