art_9__para_2

2. The risk management system shall be understood as a continuous iterative process planned and run throughout the entire lifecycle of a high-risk AI system, requiring regular systematic review and updating. It shall comprise the following steps: the identification and analysis of the known and the reasonably foreseeable risks that the high-risk AI system can pose to health, safety or fundamental rights when the high-risk AI system is used in accordance with its intended purpose; the estimation and evaluation of the risks that may emerge when the high-risk AI system is used in accordance with its intended purpose, and under conditions of reasonably foreseeable misuse; the evaluation of other risks possibly arising, based on the analysis of data gathered from the post-market monitoring system referred to in Article 72; the adoption of appropriate and targeted risk management measures designed to address the risks identified pursuant to point (a).

← art_9__para_1 · All articles · (a) →

Source: EUR-Lex CELLAR · retrieved 2026-08-26 · Text as adopted (Official Journal); later amendments are not incorporated in this text.