Skip to content

Market Surveillance and Control of AI Systems

This new topic is needed to comprehensively cover the specific procedures, mechanisms, and authorities involved in market surveillance and control of AI systems under the AI Act, which is a distinct regulatory domain not fully captured by existing topics.

market surveillance market control market monitoring market oversight market enforcement surveillance procedures control mechanisms market compliance verification

Overview

Legal Framework

The market surveillance and control of AI systems is governed by Chapter IX of the AI Act, which establishes a comprehensive post-market monitoring and enforcement regime. Article 63 AI Act mandates that each Member State designate at least one market surveillance authority as a national competent authority. These authorities are responsible for supervising the application of the Regulation, including conducting evaluations, inspections, and taking corrective actions against non-compliant AI systems placed on the Union market.

Practical Application

The designated market surveillance authorities are the primary enforcers of the AI Act's requirements. Their powers, detailed in Articles 68 to 72, include the right to request information and technical documentation from providers, perform on-site inspections and physical product checks, and require corrective actions such as the withdrawal or recall of non-compliant systems. The framework is built on the existing market surveillance architecture of Regulation (EU) 2019/1020, which provides authorities with a robust toolkit for enforcement. While specific case law is still emerging, the system is designed for proactive intervention, meaning authorities can act based on risk assessments and reports of serious incidents, not merely in response to formal complaints.

Key Considerations

  • Know Your Supervisory Authority: Providers must identify the relevant national market surveillance authority for each Member State where their high-risk or general-purpose AI system is placed on the market, as enforcement is decentralized.
  • Prepare for Proactive Scrutiny: Compliance documentation must be complete, up-to-date, and readily available for inspection, as authorities have broad powers to request evidence and access premises.
  • Integrate with Incident Reporting: The market surveillance process is directly linked to the post-market monitoring and serious incident reporting obligations under Articles 72 and 73. A reported incident will likely trigger immediate market surveillance scrutiny.

Laws (42)

View all 42

Case Law (1)

Guidance (7)

Guidelines 02/2021 on virtual voice assistants

Guidelines on virtual voice assistants

A virtual voice assistant (VVA) is a service that understands voice commands and executes them or mediates with other IT systems if needed. VVAs are currently available on most smartphones and tablets, traditional computers, and, in the latest years, even standalone devices like smart speakers. VVAs act as interface between users and their computing devices and online services such as search engines or online shops. Due to their role, VVAs have access to a huge amount of personal...

Versiegeschiedenis

guidelines accreditatie

Richtsnoeren 3/2018 over het territoriale toepassingsgebied van de AVG (artikel 3)

guidelines territoriaal toepassingsgebied AVG

Richtsnoeren 1/2019 voor gedragscodes en toezichthoudende organen in de zin van Verordening 2016/679

guidelines gedragscodes en toezichthoudende organen

Guidelines 01/2021

Guidelines on Examples regarding Personal Data Breach Notification

Version history

Guidelines on the accreditation of certification bodies

Richtsnoeren 07/2020 over de begrippen 'verwerkingsverantwoordelijke' en 'verwerker' in de AVG

guidelines over de begrippen 'verwerkingsverantwoordelijke' en 'verwerker' in de AVG

De begrippen 'verwerkingsverantwoordelijke', 'gezamenlijke verwerkingsverantwoordelijke' en 'verwerker' spelen een cruciale rol bij de toepassing van de algemene verordening gegevensbescherming (AVG, Verordening (EU) 2016/679), aangezien ermee wordt bepaald wie verantwoordelijk is voor de naleving van verschillende gegevensbeschermingsregels en op welke wijze betrokkenen hun rechten in de praktijk kunnen uitoefenen. De precieze betekenis van deze begrippen en de criteria voor de jui...

Enforcement (1)