RMRisk Mandate · the business risk layer for autonomous systemsriskmandate.ai ↗
EU EU AI Act — Current Textv0.1.3
Composed current text — not authentic. COMPOSED TEXT - NOT AUTHENTIC. This is the EU AI Act (Regulation (EU) 2024/1689) with the Digital Omnibus on AI (Regulation (EU) 2026/1744, in force 27 July 2026) applied by a deterministic, gated parser. Only the Official Journal publications are authentic law; no official consolidated version existed when this was generated. Corrigenda R(01)-R(04) do not correct the English text (verified against CELLAR). Every fragment's derivation chain is available in the source graphs (vault: data/graph/). Not legal advice.
Derivation

eu-2026-1744/art_001/pt_013/a

op replace · level paragraph · enacting-terms position (13) (a) · in force 2026-07-27

Context (enacting terms)

Article 27 is amended as follows:

The instruction (quoted official text)

paragraph 4 is replaced by the following:

Quoted payload (official replacement/inserted text)

4.If any of the obligations laid down in this Article is already met through the data protection impact assessment conducted pursuant to Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680, the deployer may, when conducting the fundamental rights impact assessment referred to in paragraph 1 of this Article, include cross-references to the relevant sections of that data protection impact assessment or include relevant parts thereof in the fundamental rights impact assessment.;

Provenance

linkvalue
payload xml sha25635a9d223cb25b5d51edf9479001bf08d4a732a8abdbb53110edf5e6ff87de884
OJ Formex memberL_202601744EN.000101.fmx.xml
CELLAR / CELEX32026R1744
target resolutiongrammar over enacting terms; cross-checked against payload Formex IDENTIFIER attributes where present (parser-derived)

Affected provisions

eu-2024-1689/art_027/par_004 amended

BEFORE (as published)

4. If any of the obligations laid down in this Article is already met through the data protection impact assessment conducted pursuant to Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680, the fundamental rights impact assessment referred to in paragraph 1 of this Article shall complement that data protection impact assessment.

AFTER (composed current text)

4. If any of the obligations laid down in this Article is already met through the data protection impact assessment conducted pursuant to Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680, the deployer may, when conducting the fundamental rights impact assessment referred to in paragraph 1 of this Article, include cross-references to the relevant sections of that data protection impact assessment or include relevant parts thereof in the fundamental rights impact assessment.

WORD-LEVEL DIFF

4. If any of the obligations laid down in this Article is already met through the data protection impact assessment conducted pursuant to Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680, the deployer may, when conducting the fundamental rights impact assessment referred to in paragraph 1 of this ArticleArticle, shallinclude complementcross-references to the relevant sections of that data protection impact assessment or include relevant parts thereof in the fundamental rights impact assessment.

Check this and report · derivation.json

How to check: compare the quoted instruction and payload above (hash-anchored to the OJ Formex bytes) against the BEFORE/AFTER panes. Two minutes, one provision. Then file the result — "checks out" is worth recording too.