AI Incident: where Article 73 makes incident reporting non-optional

Definition

EU AI Act Article 73 mandates serious incident reporting within 15 days. Zertia integrates workflows under ISO 42001.

Key facts

• EU AI Act Article 73 mandates serious incident reporting by high-risk AI providers to national authorities within 15 days.
• Serious incidents include death, serious injury, critical infrastructure disruption, fundamental rights infringement and serious property damage.
• EU AI Act Article 55(c) imposes parallel incident reporting on systemic-risk GPAI providers to the AI Office.
• OECD AIM database catalogs documented AI incidents internationally for cross-jurisdictional learning.
• Zertia integrates AI incident reporting workflows within ISO 42001 audit scope.

Frequently asked questions

What is an AI incident under EU AI Act?

An event involving a high-risk AI system that causes or could cause serious harm, including death, serious injury, critical infrastructure disruption, fundamental rights infringement or serious property damage. Article 73 mandates reporting to national authorities within 15 days.

What incidents must systemic-risk GPAI report?

Article 55(c) requires GPAI providers with systemic risk to report serious incidents and possible corrective measures to the AI Office. This parallel obligation applies even when no deployer-level incident has been triggered yet.

How is AI incident management audited?

Through ISO 42001 with explicit Articles 73 and 55(c) workflow validation. Zertia integrates incident management assessment within audit scope.