[{"data":1,"prerenderedAt":29},["ShallowReactive",2],{"nr-en-eu-ai-act-keep-ai-logs-six-months":3},{"slug":4,"title":5,"dek":6,"date":7,"time":8,"publishedAt":9,"updated":10,"updatedAt":10,"dateFmt":11,"updatedFmt":10,"kind":12,"tier":13,"author":14,"authorName":15,"topics":16,"tracker":21,"trackerLabel":22,"headlineStat":23,"image":24,"ogImage":25,"imageAlt":5,"csv":10,"minutes":26,"words":27,"html":28},"eu-ai-act-keep-ai-logs-six-months","EU AI Act: AI logs should be kept for six months instead of 30 days","According to BornCity, organisations must keep logs for at least six months for most high-risk systems, while external providers often delete them after 30 days.","2026-11-03","08:03","2026-11-03T08:03:00+01:00","","November 3, 2026","news","standard","ideal-syka","Ideal Syka",[17,18,19,20],"EU AI Act","Logging","Compliance","High-risk AI","\u002Feu-ai-act-fahrplan","EU AI Act timeline","6 months of log retention","\u002Fnewsroom\u002Fimg\u002Feu-ai-act-keep-ai-logs-six-months.webp","\u002Fog-nr\u002Feu-ai-act-keep-ai-logs-six-months.en.png",1,188,"\u003Cp>According to BornCity, the log retention obligation mainly concerns high-risk systems. Under Article 12 of the EU AI Act, logs must be kept for at least six months for most of these systems.\u003C\u002Fp>\n\u003Ch2>Background\u003C\u002Fh2>\n\u003Cp>BornCity notes that standard logs from external providers are often deleted after 30 days. Organisations therefore need to adjust their own processes and retention periods so the retention obligation can be met.\u003C\u002Fp>\n\u003Cp>The same article lists further deadlines: according to BornCity, the transparency obligations under Article 50 have applied since 2 August 2026. The transition period for machine-readable labelling of synthetic content ends on 2 December 2026. For high-risk systems under Annex III, the deadline was reportedly postponed to 2 December 2027, and for Annex I to 2 August 2028.\u003C\u002Fp>\n\u003Ch2>Assessment\u003C\u002Fh2>\n\u003Cp>Organisations using AI systems that fall under the high-risk rules could check whether the provider's logs are sufficient for six months. If not, their own storage would be necessary. Which systems are concretely affected cannot be conclusively determined from the source.\u003C\u002Fp>\n\u003Ch2>Sources\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Ca href=\"https:\u002F\u002Fborncity.com\u002Fnews\u002Feu-ai-act-ki-protokolle-sechs-monate-speichern-statt-nach-30-tagen-loeschen\u002F\">BornCity\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cem>Editorially owned by \u003Ca href=\"\u002Fen\u002Fautor\u002Fideal-syka\">Ideal Syka\u003C\u002Fa>. Sources and method: \u003Ca href=\"\u002Fen\u002Fredaktion\">Newsroom & method\u003C\u002Fa>. Tips and corrections: \u003Ca href=\"mailto:ai@i6eal.de\">ai@i6eal.de\u003C\u002Fa>.\u003C\u002Fem>\u003C\u002Fp>\n",1793697692091]