# Derivation — eu-2026-1744/art_001/pt_013/a

> COMPOSED TEXT - NOT AUTHENTIC. This is the EU AI Act (Regulation (EU) 2024/1689) with the Digital Omnibus on AI (Regulation (EU) 2026/1744, in force 27 July 2026) applied by a deterministic, gated parser. Only the Official Journal publications are authentic law; no official consolidated version existed when this was generated. Corrigenda R(01)-R(04) do not correct the English text (verified against CELLAR). Every fragment's derivation chain is available in the source graphs (vault: data/graph/). Not legal advice.

- Page: https://eu-ai-act.standards.riskmandate.ai/derivations/art_001__pt_013__a.html
- Structured: https://eu-ai-act.standards.riskmandate.ai/derivations/art_001__pt_013__a.llm.json
- Text version: 2026-07-27 (generated 2026-07-31)
- Site version: v0.1.4
- Provisions root hash: `77c4ca7c208d73adc24b9a41eb29724bee29a41df98b786b85c57852fa3ae6bd`
- Instruction id: `eu-2026-1744/art_001/pt_013/a`
- Operation: replace · level: paragraph
- In force: 2026-07-27
- Payload sha256: `35a9d223cb25b5d51edf9479001bf08d4a732a8abdbb53110edf5e6ff87de884`
- OJ Formex member: `L_202601744EN.000101.fmx.xml` (CELEX 32026R1744)

## Context (enacting terms)

> Article 27 is amended as follows:

## Instruction (quoted official text)

> paragraph 4 is replaced by the following:

## Quoted payload (official replacement/inserted text)

4.If any of the obligations laid down in this Article is already met through the data protection impact assessment conducted pursuant to Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680, the deployer may, when conducting the fundamental rights impact assessment referred to in paragraph 1 of this Article, include cross-references to the relevant sections of that data protection impact assessment or include relevant parts thereof in the fundamental rights impact assessment.;

## Affected provisions

### `eu-2024-1689/art_027/par_004` — amended

**Before (as published):**

4. If any of the obligations laid down in this Article is already met through the data protection impact assessment conducted pursuant to Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680, the fundamental rights impact assessment referred to in paragraph 1 of this Article shall complement that data protection impact assessment.

**After (composed current text):**

4. If any of the obligations laid down in this Article is already met through the data protection impact assessment conducted pursuant to Article 35 of Regulation (EU) 2016/679 or Article 27 of Directive (EU) 2016/680, the deployer may, when conducting the fundamental rights impact assessment referred to in paragraph 1 of this Article, include cross-references to the relevant sections of that data protection impact assessment or include relevant parts thereof in the fundamental rights impact assessment.

- sha256 of composed text: `8167b057ba2435b2d840030cc54f7a97dca1939a65db212b289ea113b37165f5`
- derivation.json: https://eu-ai-act.standards.riskmandate.ai/provisions/eu-2024-1689/art_027/par_004/derivation.json

## How to check this

Compare the quoted instruction and payload above (hash-anchored to the OJ Formex bytes of CELEX 32026R1744) against the before/after text. That is the whole verification for this provision — about two minutes. Report the result, including the root hash above: https://github.com/Risk-Mandate/Risk-Mandate__EU-AI-Act__Current-Text/issues/new?template=provision-check.yml