In brief
- Regulation: AI Act.
- Traffic management authorities and operators deploying regulatory AI are concerned, as providers or deployers depending on the case.
- Qualifying the security role.
- Manage risks and data.
- Ensure oversight.
- Up to €35M or 7% for prohibited practices and €15M or 3% for high-risk infringements.
Regulatory deadlines
The key dates of this regulation.
August 2024
Entry into force
In forceFebruary 2025
Ban on prohibited practices
In forceAugust 2025
General-purpose AI models (GPAI) & governance
In forceAugust 2026
High-risk system obligations (Annex III)
In forceAugust 2027
High-risk embedded in products (Annex I)
UpcomingWhat does the AI Act cover?
Annex III of the AI Act targets AI systems used as safety components in road traffic management and operation. These systems are subject to high-risk obligations.
Passenger information or optimisation use cases with no safety role fall under the limited-risk category.
Is the 'Transport & mobility' sector concerned?
Traffic management authorities and operators deploying regulatory AI are concerned, as providers or deployers depending on the case.
Passenger information systems are generally subject to lighter regulatory regimes.
Detailed obligations
Qualify the security role
Determine whether AI regulates traffic as a safety component.
Manage risks and data
Implementing risk management and data quality.
Ensure supervision
Ensuring effective human oversight.
Document and assess
Building compliance documentation and assessment.
Monitor
Organising post-market surveillance.
Sanctions & risks
Up to €35M or 7% for prohibited practices and €15M or 3% for high-risk breaches. A defective traffic AI can affect road safety.
Application timeline
- 1Entry into force. 1 August 2024.
- 2High risk. From 2026–2027 for traffic management.
Common mistakes in the sector
- 1Underestimated security role. Treating a regulatory AI as an optimisation tool.
- 2Neglected robustness. Underestimating requirements relating to road safety.
- 3Superficial oversight. Human oversight without real means.
- 4Missing documentation. Failing to build the documentation.
Practical case
An authority deploys an AI system for traffic light and lane management. As a safety component, it falls under the high-risk category: documentation, robustness and human oversight are required, with manual override in the event of failure.
Compliance roadmap
- 1
Inventory. Mapping traffic and information AI systems.
- 2
Qualify. Isolate security components.
- 3
Strengthen reliability. Addressing data quality and robustness.
- 4
Document. Producing documentation and assessment.
- 5
Supervise. Human oversight and post-market.
Frequently asked questions
No: only the AI component acting as a safety feature of traffic management is.
Take action on AI Act
Free assessment or a chat with an expert dedicated to transport & mobility.
They already trust us
See how organisations in the transport & mobility sector secured their compliance with DCO.