Regulation and data
Deployer (AI Act)
Under the AI Act, the deployer is whoever uses an artificial intelligence system under its own authority in a professional activity (art. 3.4). A residence that contracts an assistant to deal with its residents is one; the company that develops and sells the assistant is the provider.
Also known asdeployer · AI system user · responsable del despliegue
What falls to it and what does not
The AI Act places the bulk of the obligations on the provider. It leaves less to whoever deploys the system, and what it leaves depends on what the system does:
| If the system… | The deployer must | Article |
|---|---|---|
| Is any system | Take measures to support the AI literacy of its staff | Art. 4 |
| Talks with people | Check that it says it is an AI: that design is owed by the provider | Art. 50.1 |
| Generates text published to inform the public on matters of public interest | Disclose that it is AI-generated, unless a person reviews it and someone holds editorial responsibility | Art. 50.4 |
| Recognises emotions or categorises people biometrically | Inform those exposed to it | Art. 50.3 |
| Is high-risk | Use it according to its instructions, assign human oversight to people with the training and authority, monitor it and keep its logs for at least six months; for Annex III systems, from 2 December 2027 | Art. 26 |
Worth knowing
What people take for granted: that the centre is never the provider. The definition of provider includes anyone for whom a system is developed and who puts it into service under its own name or trademark (art. 3.3): a custom-built assistant launched as the centre's own may change the role. And art. 25.1 treats as provider anyone who changes the purpose of a system until it becomes high-risk, such as using an assistant to score applications for a place. It is not the same figure as the GDPR controller, although in a residence they tend to coincide.
Sources
Related terms
- AI ActThe AI Act is Regulation (EU) 2024/1689, the European rule on artificial intelligence systems: it bans some uses, sets requirements for high-risk ones and transparency duties for others. It applies directly in Spain, and in July 2026 it was amended by Regulation (EU) 2026/1744.
- AI literacyAI literacy is the skills, knowledge and understanding that allow people to use artificial intelligence systems in an informed way and to see their opportunities, their risks and the harm they can cause (art. 3.56 of Regulation (EU) 2024/1689, the AI Act).