EU AI Act — A CHRO Cheatsheet

The Act distinguishes between providers (who build the system) and operators (who put it to work). Most CHROs are operators.

What you owe, as operator

• Use the system as documented; do not exceed its intended purpose.
• Maintain logs for the periods required by the Act.
• Ensure human oversight is meaningful, not ceremonial.
• Inform affected workers and their representatives in good time.

What you do not owe

• You are not the provider, so you do not certify the model.
• You are not exempt either: misuse falls on you.

This is a cheatsheet, not advice. Talk to counsel before you sign anything.