# The EU AI Act requires a deployer that controls a high-risk system's input data to ensure it is relevant and sufficiently representative (Article 26(4)), from 2 December 2027

Page: https://flyvolo.ai/en/changes/ev-20260802-business-systems-owner-1
Date: 2024-08-01 · Stage: Policy mandate
Can this record move a task judgement? only together with another independent record
Occupation: https://flyvolo.ai/en/careers/business-systems-owner

## Scope

The EU, and only for deployers of high-risk AI systems. What it establishes is that on the input side of these systems, clean data moves from an internal good habit to a legal obligation — and in most companies the party controlling that input data is the person who owns the system. Article 26(1) additionally requires deployers to use such systems in accordance with their instructions for use. Regulation (EU) 2026/1744 (the Digital Omnibus on AI, published 24 July 2026) moved the application of these obligations from 2 August 2026 to 2 December 2027 for systems that are high-risk under Annex III, and to 2 August 2028 for those that are high-risk under Article 6(1) and Annex I; so this is a rule on the books that does not yet apply. The law names no job title and does not require a dedicated data owner, so attaching the duty to this occupation is our inference; it covers only systems classified as high-risk.

## Source

- Regulation (EU) 2024/1689 (Artificial Intelligence Act), Article 26(1) and 26(4) and Article 113, as amended by Regulation (EU) 2026/1744 — EUR-Lex consolidated text of 27 July 2026 — https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:02024R1689-20260727 (primary source)

## What this means

A duty that used to be nobody's is written into law and attached to the deployer: where your organisation controls what goes into a high-risk system, it must ensure that input data is relevant and sufficiently representative. The person who knows what goes in is usually whoever owns the system's configuration — this job. The duty is enacted, and applies from December 2027.

## What it does not show yet

It does not yet apply, and nothing here shows an inspection, a penalty or a company changing what it does. It binds the deployer as an entity; which desk it lands on is an internal decision. Outside the EU market it does not apply at all.

## How to verify it yourself

Open EUR-Lex's consolidated text of Regulation (EU) 2024/1689 (version of 27 July 2026) and find Article 26(4), "sufficiently representative in view of the intended purpose", then Article 113, point (c).


More: https://flyvolo.ai/llms.txt