Quiz: When Modifying a Bought System Turns You Into a Provider

When does a deployer become a provider under the EU AI Act?

A retail company buys a customer recommendation AI system and retrains it on its own customer data. Who bears provider responsibility for the retrained system?

What should a deployer do before modifying an AI system they bought?

A healthcare provider adds its own clinical rules on top of a diagnostic AI system it bought from a vendor. The vendor’s system recommends a diagnosis; the healthcare provider’s rules then exclude certain diagnoses based on clinical protocols. What is the provider status of the combined system?

A deployer wants to modify an AI system but is unsure whether the modification is significant enough to trigger provider status. What should the deployer do?