How fast must serious AI incidents be reported under the EU AI Act?

Article 73 requires providers of high-risk AI to report serious incidents to the market surveillance authority immediately after establishing a causal link (or the reasonable likelihood of one), and no later than 15 days after becoming aware. The limit is 2 days for a widespread infringement or a serious and irreversible disruption of critical infrastructure, and 10 days if a person has died.

How it works

1. Define what counts as a serious incident for your system.
2. Set up a way for staff and deployers to report problems fast.
3. Keep a timeline: when you became aware, what you found, when you reported.
4. Seal that timeline so you can prove you met the deadline.