According to BornCity, the log retention obligation mainly concerns high-risk systems. Under Article 12 of the EU AI Act, logs must be kept for at least six months for most of these systems.
Background
BornCity notes that standard logs from external providers are often deleted after 30 days. Organisations therefore need to adjust their own processes and retention periods so the retention obligation can be met.
The same article lists further deadlines: according to BornCity, the transparency obligations under Article 50 have applied since 2 August 2026. The transition period for machine-readable labelling of synthetic content ends on 2 December 2026. For high-risk systems under Annex III, the deadline was reportedly postponed to 2 December 2027, and for Annex I to 2 August 2028.
Assessment
Organisations using AI systems that fall under the high-risk rules could check whether the provider's logs are sufficient for six months. If not, their own storage would be necessary. Which systems are concretely affected cannot be conclusively determined from the source.
Sources
Editorially owned by Ideal Syka. Sources and method: Newsroom & method. Tips and corrections: ai@i6eal.de.
