Your Privacy
English

Places to contact

EU AI Act Article 73 — serious incident reporting

Type
Public reporting channel
Place
European Union — EU
Last checked
2026-09-22
Next check due
2027-03-21

Ways to reach them

  • Submission page · Incident reporting
    Open contact route · 2026-09-22

    Who may use it: public

    Evidence that this route accepts contact · 2026-09-22

    Serious incidents as defined in Article 3(49), reported by the provider. Deadlines: immediately after establishing a causal link and in any case not later than 15 days after awareness; 2 days for widespread infringement or certain serious incidents; and for a death, immediately after establishing or suspecting a causal relationship and within 10 days maximum. Incomplete initial reports are permitted, followed by a complete report.

    Indirect only, and this is the practically important point: a member of the public cannot trigger Article 73 directly, but can (a) notify the provider, which starts the provider's own awareness clock and creates evidence of when they knew, and (b) file an Article 85 complaint with the market surveillance authority alleging a serious incident went unreported — failure to report is itself an infringement the authority can act on.

  • Homepage · Homepage
    Verification expired

    Evidence that this route accepts contact

What it does

Serious incidents as defined in Article 3(49), reported by the provider. Deadlines: immediately after establishing a causal link and in any case not later than 15 days after awareness; 2 days for widespread infringement or certain serious incidents; and for a death, immediately after establishing or suspecting a causal relationship and within 10 days maximum. Incomplete initial reports are permitted, followed by a complete report.

Honest assessment

Real legal force but a closed circuit for outsiders. The leverage for an ordinary person is asymmetric and underused: putting a provider on written notice of a serious incident converts their silence into a reportable regulatory breach. That is a stronger move than the complaint itself.

How to file

Indirect only, and this is the practically important point: a member of the public cannot trigger Article 73 directly, but can (a) notify the provider, which starts the provider's own awareness clock and creates evidence of when they knew, and (b) file an Article 85 complaint with the market surveillance authority alleging a serious incident went unreported — failure to report is itself an infringement the authority can act on.

Format

Commission draft guidance and a reporting template were consulted on (responses due 7 November 2025) ahead of the August 2026 application date.

Timing

Obligations for high-risk AI apply from 2 August 2026.

What happens after

National competent authorities immediately notify the Commission.

What it accepts

Serious incidents as defined in Article 3(49), reported by the provider. Deadlines: immediately after establishing a causal link and in any case not later than 15 days after awareness; 2 days for widespread infringement or certain serious incidents; and for a death, immediately after establishing or suspecting a causal relationship and within 10 days maximum. Incomplete initial reports are permitted, followed by a complete report.

What it does not accept

Reports from members of the public. The duty sits on providers and deployers only. A member of the public cannot file an Article 73 report and cannot directly compel one.

Operated by

Providers (and in some cases deployers) of high-risk AI systems, reporting to national market surveillance authorities; Commission draft guidance and template consulted in late 2025

Sources

Something wrong here?