{ "name": "The law on keeping and passing on AI agent logs", "title": "The law on keeping and passing on AI agent logs", "kind": "terms-board", "url": "https://sellagentlogstoai.com/datasets/agent-log-law/", "csv": "https://sellagentlogstoai.com/datasets/agent-log-law.csv", "markdown": "https://sellagentlogstoai.com/datasets/agent-log-law/index.md", "computed_at": "2026-10-28", "license": "https://sellagentlogstoai.com/terms", "headline": "8 provisions of EU, UK and US state law and guidance on recording, keeping and disclosing what AI systems do, each quoted from the authority's own page, read 28 October 2026.", "quotes": [ "8 provisions of EU, UK and US state law and guidance on recording, keeping and disclosing what AI systems do, each quoted from the authority's own page, read 28 October 2026.", "Whose law it is, by provision: the European Union 6 of 8, the United Kingdom 1 of 8, California 1 of 8 (8 provisions, read 28 October 2026).", "What the provision settles, by provision: who keeps the logs and for how long 3 of 8, when the provisions start to apply 1 of 8, safeguards on automated decisions and the records kept 1 of 8, what counts as an AI system or a deployer 1 of 8, what must be logged automatically 1 of 8, what people dealing with an AI system must be told 1 of 8 (8 provisions, read 28 October 2026).", "The rule, in its own words, by provision: stated 8 of 8 (8 provisions, read 28 October 2026)." ], "citation": "\"The law on keeping and passing on AI agent logs\", updated 2026-10-28, https://sellagentlogstoai.com/datasets/agent-log-law/.", "national": { "n": 8, "unit": "provisions", "documents": 8, "published_sources": 8, "named_sources": 11 }, "board": { "type": "clauses", "noun": { "one": "provision", "many": "provisions" }, "document": { "one": "page", "many": "pages" }, "fields": [ { "id": "jurisdiction", "label": "Whose law it is", "counts": { "us-ca": 1, "eu": 6, "gb": 1 }, "values": [ { "value": "eu", "text": "the European Union" }, { "value": "gb", "text": "the United Kingdom" }, { "value": "us-ca", "text": "California" }, { "value": "us-co", "text": "Colorado" } ] }, { "id": "topic", "label": "What the provision settles", "counts": { "automated-decisions": 1, "logging": 1, "retention": 3, "definition": 1, "transparency": 1, "application": 1 }, "values": [ { "value": "definition", "text": "what counts as an AI system or a deployer" }, { "value": "logging", "text": "what must be logged automatically" }, { "value": "retention", "text": "who keeps the logs and for how long" }, { "value": "transparency", "text": "what people dealing with an AI system must be told" }, { "value": "automated-decisions", "text": "safeguards on automated decisions and the records kept" }, { "value": "application", "text": "when the provisions start to apply" } ] }, { "id": "rule", "label": "The rule, in its own words", "counts": { "stated": 8 }, "values": [ { "value": "stated", "text": "stated" } ], "clause": true } ], "lead": { "type": "count", "field": null, "value": null, "n": 8, "of": 8, "label": "Provisions read in EU, UK and US law" }, "vendors": [ { "name": "California ADMT regulations", "answers": { "jurisdiction": { "value": "us-ca", "text": "California", "documents": [ { "document": "CPPA: CCPA updates and ADMT regulations", "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "value": "us-ca", "quote": "the California Privacy Protection Agency (Agency) Board adopted regulations" } ] }, "topic": { "value": "automated-decisions", "text": "safeguards on automated decisions and the records kept", "documents": [ { "document": "CPPA: CCPA updates and ADMT regulations", "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "value": "automated-decisions", "quote": "implemented consumers' rights to access and opt–out of businesses' use of ADMT" } ] }, "rule": { "value": "stated", "text": "implemented requirements for certain businesses to conduct risk assessments and complete…", "documents": [ { "document": "CPPA: CCPA updates and ADMT regulations", "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "value": "stated", "quote": "implemented requirements for certain businesses to conduct risk assessments and complete annual cybersecurity audits" } ] } } }, { "name": "EU AI Act, Article 12", "answers": { "jurisdiction": { "value": "eu", "text": "the European Union", "documents": [ { "document": "Article 12, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-12", "value": "eu", "quote": "Article 12: Record-keeping" } ] }, "topic": { "value": "logging", "text": "what must be logged automatically", "documents": [ { "document": "Article 12, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-12", "value": "logging", "quote": "High-risk AI systems shall technically allow for the automatic recording of events (logs) over the lifetime of the system." } ] }, "rule": { "value": "stated", "text": "logging capabilities shall enable the recording of events relevant for:", "documents": [ { "document": "Article 12, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-12", "value": "stated", "quote": "logging capabilities shall enable the recording of events relevant for:" } ] } } }, { "name": "EU AI Act, Article 19", "answers": { "jurisdiction": { "value": "eu", "text": "the European Union", "documents": [ { "document": "Article 19, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-19", "value": "eu", "quote": "Article 19: Automatically generated logs" } ] }, "topic": { "value": "retention", "text": "who keeps the logs and for how long", "documents": [ { "document": "Article 19, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-19", "value": "retention", "quote": "Providers of high-risk AI systems shall keep the logs referred to in Article 12(1), automatically generated by their high-risk AI systems, to the extent such logs are under their control." } ] }, "rule": { "value": "stated", "text": "the logs shall be kept for a period appropriate to the intended purpose of the high-risk…", "documents": [ { "document": "Article 19, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-19", "value": "stated", "quote": "the logs shall be kept for a period appropriate to the intended purpose of the high-risk AI system, of at least six months" } ] } } }, { "name": "EU AI Act, Article 26(6)", "answers": { "jurisdiction": { "value": "eu", "text": "the European Union", "documents": [ { "document": "Article 26, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26", "value": "eu", "quote": "Article 26: Obligations of deployers of high-risk AI systems" } ] }, "topic": { "value": "retention", "text": "who keeps the logs and for how long", "documents": [ { "document": "Article 26, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26", "value": "retention", "quote": "Deployers of high-risk AI systems shall keep the logs automatically generated by that high-risk AI system to the extent such logs are under their control" } ] }, "rule": { "value": "stated", "text": "for a period appropriate to the intended purpose of the high-risk AI system, of at least…", "documents": [ { "document": "Article 26, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26", "value": "stated", "quote": "for a period appropriate to the intended purpose of the high-risk AI system, of at least six months, unless provided otherwise in applicable Union or national law, in particular in Union law on the protection of personal data." } ] } } }, { "name": "EU AI Act, Article 3", "answers": { "jurisdiction": { "value": "eu", "text": "the European Union", "documents": [ { "document": "Article 3, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-3", "value": "eu", "quote": "‘AI system’ means a machine-based system that is designed to operate with varying levels of autonomy" } ] }, "topic": { "value": "definition", "text": "what counts as an AI system or a deployer", "documents": [ { "document": "Article 3, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-3", "value": "definition", "quote": "infers, from the input it receives, how to generate outputs such as predictions, content, recommendations, or decisions that can influence physical or virtual environments" } ] }, "rule": { "value": "stated", "text": "‘deployer’ means a natural or legal person, public authority, agency or other body using…", "documents": [ { "document": "Article 3, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-3", "value": "stated", "quote": "‘deployer’ means a natural or legal person, public authority, agency or other body using an AI system under its authority except where the AI system is used in the course of a personal non-professional activity" } ] } } }, { "name": "EU AI Act, Article 50(1)", "answers": { "jurisdiction": { "value": "eu", "text": "the European Union", "documents": [ { "document": "Article 50, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50", "value": "eu", "quote": "Article 50: Transparency obligations for providers and deployers of certain AI systems" } ] }, "topic": { "value": "transparency", "text": "what people dealing with an AI system must be told", "documents": [ { "document": "Article 50, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50", "value": "transparency", "quote": "the natural persons concerned are informed that they are interacting with an AI system" } ] }, "rule": { "value": "stated", "text": "Providers shall ensure that AI systems intended to interact directly with natural persons…", "documents": [ { "document": "Article 50, AI Act Service Desk", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50", "value": "stated", "quote": "Providers shall ensure that AI systems intended to interact directly with natural persons are designed and developed in such a way that the natural persons concerned are informed that they are interacting with an AI system" } ] } } }, { "name": "Regulation (EU) 2026/1744, Article 113 dates", "answers": { "jurisdiction": { "value": "eu", "text": "the European Union", "documents": [ { "document": "Official Journal text, EUR-Lex", "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "value": "eu", "quote": "Article 113 of Regulation (EU) 2024/1689 establishes the dates of entry into force and application of that Regulation" } ] }, "topic": { "value": "application", "text": "when the provisions start to apply", "documents": [ { "document": "Official Journal text, EUR-Lex", "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "value": "application", "quote": "2 August 2028 as regards AI systems classified as high-risk pursuant to Article 6(1) and Annex I;" } ] }, "rule": { "value": "stated", "text": "2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2)…", "documents": [ { "document": "Official Journal text, EUR-Lex", "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "value": "stated", "quote": "2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2) and Annex III; and" } ] } } }, { "name": "UK GDPR, Article 30", "answers": { "jurisdiction": { "value": "gb", "text": "the United Kingdom", "documents": [ { "document": "UK GDPR Article 30, records of processing activities", "url": "https://www.legislation.gov.uk/eur/2016/679/article/30", "value": "gb", "quote": "There are currently no known outstanding effects by UK legislation for Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 30." } ] }, "topic": { "value": "retention", "text": "who keeps the logs and for how long", "documents": [ { "document": "UK GDPR Article 30, records of processing activities", "url": "https://www.legislation.gov.uk/eur/2016/679/article/30", "value": "retention", "quote": "Each processor and, where applicable, the processor's representative shall maintain a record of all categories of processing activities carried out on behalf of a controller" } ] }, "rule": { "value": "stated", "text": "Each controller and, where applicable, the controller's representative, shall maintain a…", "documents": [ { "document": "UK GDPR Article 30, records of processing activities", "url": "https://www.legislation.gov.uk/eur/2016/679/article/30", "value": "stated", "quote": "Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility." } ] } } } ] }, "subject_kind": "provision", "rows": [ { "subject": "California ADMT regulations", "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "document": "CPPA: CCPA updates and ADMT regulations", "question": "jurisdiction", "answer": "us-ca", "answer_text": "California", "status": "stated", "retrieved_at": "2026-10-08", "quote": "the California Privacy Protection Agency (Agency) Board adopted regulations", "text_sha256": "8ff906cb104c17b579e436a0703ce2488734d524ba05e52699e02d9e194305b8" }, { "subject": "California ADMT regulations", "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "document": "CPPA: CCPA updates and ADMT regulations", "question": "topic", "answer": "automated-decisions", "answer_text": "safeguards on automated decisions and the records kept", "status": "stated", "retrieved_at": "2026-10-08", "quote": "implemented consumers' rights to access and opt–out of businesses' use of ADMT", "text_sha256": "8ff906cb104c17b579e436a0703ce2488734d524ba05e52699e02d9e194305b8" }, { "subject": "California ADMT regulations", "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "document": "CPPA: CCPA updates and ADMT regulations", "question": "rule", "answer": "stated", "answer_text": "implemented requirements for certain businesses to conduct risk assessments and complete…", "status": "stated", "retrieved_at": "2026-10-08", "quote": "implemented requirements for certain businesses to conduct risk assessments and complete annual cybersecurity audits", "text_sha256": "8ff906cb104c17b579e436a0703ce2488734d524ba05e52699e02d9e194305b8" }, { "subject": "EU AI Act, Article 12", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-12", "document": "Article 12, AI Act Service Desk", "question": "jurisdiction", "answer": "eu", "answer_text": "the European Union", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Article 12: Record-keeping", "text_sha256": "b65dc7c32073031732734ec43bf4522e989ae9ea75d7045108900d88c959076f" }, { "subject": "EU AI Act, Article 12", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-12", "document": "Article 12, AI Act Service Desk", "question": "topic", "answer": "logging", "answer_text": "what must be logged automatically", "status": "stated", "retrieved_at": "2026-10-28", "quote": "High-risk AI systems shall technically allow for the automatic recording of events (logs) over the lifetime of the system.", "text_sha256": "b65dc7c32073031732734ec43bf4522e989ae9ea75d7045108900d88c959076f" }, { "subject": "EU AI Act, Article 12", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-12", "document": "Article 12, AI Act Service Desk", "question": "rule", "answer": "stated", "answer_text": "logging capabilities shall enable the recording of events relevant for:", "status": "stated", "retrieved_at": "2026-10-28", "quote": "logging capabilities shall enable the recording of events relevant for:", "text_sha256": "b65dc7c32073031732734ec43bf4522e989ae9ea75d7045108900d88c959076f" }, { "subject": "EU AI Act, Article 19", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-19", "document": "Article 19, AI Act Service Desk", "question": "jurisdiction", "answer": "eu", "answer_text": "the European Union", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Article 19: Automatically generated logs", "text_sha256": "1debead4b690889e7f93c585438d19756519bbd0e1d9dcf257b37f42a81bf843" }, { "subject": "EU AI Act, Article 19", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-19", "document": "Article 19, AI Act Service Desk", "question": "topic", "answer": "retention", "answer_text": "who keeps the logs and for how long", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Providers of high-risk AI systems shall keep the logs referred to in Article 12(1), automatically generated by their high-risk AI systems, to the extent such logs are under their control.", "text_sha256": "1debead4b690889e7f93c585438d19756519bbd0e1d9dcf257b37f42a81bf843" }, { "subject": "EU AI Act, Article 19", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-19", "document": "Article 19, AI Act Service Desk", "question": "rule", "answer": "stated", "answer_text": "the logs shall be kept for a period appropriate to the intended purpose of the high-risk…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "the logs shall be kept for a period appropriate to the intended purpose of the high-risk AI system, of at least six months", "text_sha256": "1debead4b690889e7f93c585438d19756519bbd0e1d9dcf257b37f42a81bf843" }, { "subject": "EU AI Act, Article 26(6)", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26", "document": "Article 26, AI Act Service Desk", "question": "jurisdiction", "answer": "eu", "answer_text": "the European Union", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Article 26: Obligations of deployers of high-risk AI systems", "text_sha256": "6c5dd30188c9e507d36d02739027b50e84925934043b8eb039f2325f836c9b00" }, { "subject": "EU AI Act, Article 26(6)", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26", "document": "Article 26, AI Act Service Desk", "question": "topic", "answer": "retention", "answer_text": "who keeps the logs and for how long", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Deployers of high-risk AI systems shall keep the logs automatically generated by that high-risk AI system to the extent such logs are under their control", "text_sha256": "6c5dd30188c9e507d36d02739027b50e84925934043b8eb039f2325f836c9b00" }, { "subject": "EU AI Act, Article 26(6)", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26", "document": "Article 26, AI Act Service Desk", "question": "rule", "answer": "stated", "answer_text": "for a period appropriate to the intended purpose of the high-risk AI system, of at least…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "for a period appropriate to the intended purpose of the high-risk AI system, of at least six months, unless provided otherwise in applicable Union or national law, in particular in Union law on the protection of personal data.", "text_sha256": "6c5dd30188c9e507d36d02739027b50e84925934043b8eb039f2325f836c9b00" }, { "subject": "EU AI Act, Article 3", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-3", "document": "Article 3, AI Act Service Desk", "question": "jurisdiction", "answer": "eu", "answer_text": "the European Union", "status": "stated", "retrieved_at": "2026-10-28", "quote": "‘AI system’ means a machine-based system that is designed to operate with varying levels of autonomy", "text_sha256": "0cff4e0ae485a815285d420b6c41d505f13128c4a986b5c37e6d2c083a3672b9" }, { "subject": "EU AI Act, Article 3", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-3", "document": "Article 3, AI Act Service Desk", "question": "topic", "answer": "definition", "answer_text": "what counts as an AI system or a deployer", "status": "stated", "retrieved_at": "2026-10-28", "quote": "infers, from the input it receives, how to generate outputs such as predictions, content, recommendations, or decisions that can influence physical or virtual environments", "text_sha256": "0cff4e0ae485a815285d420b6c41d505f13128c4a986b5c37e6d2c083a3672b9" }, { "subject": "EU AI Act, Article 3", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-3", "document": "Article 3, AI Act Service Desk", "question": "rule", "answer": "stated", "answer_text": "‘deployer’ means a natural or legal person, public authority, agency or other body using…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "‘deployer’ means a natural or legal person, public authority, agency or other body using an AI system under its authority except where the AI system is used in the course of a personal non-professional activity", "text_sha256": "0cff4e0ae485a815285d420b6c41d505f13128c4a986b5c37e6d2c083a3672b9" }, { "subject": "EU AI Act, Article 50(1)", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50", "document": "Article 50, AI Act Service Desk", "question": "jurisdiction", "answer": "eu", "answer_text": "the European Union", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Article 50: Transparency obligations for providers and deployers of certain AI systems", "text_sha256": "752d5b41bc5e09681fcc984b52be88e395cbb9e3e4a3ca0dadaf76b6ee001705" }, { "subject": "EU AI Act, Article 50(1)", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50", "document": "Article 50, AI Act Service Desk", "question": "topic", "answer": "transparency", "answer_text": "what people dealing with an AI system must be told", "status": "stated", "retrieved_at": "2026-10-28", "quote": "the natural persons concerned are informed that they are interacting with an AI system", "text_sha256": "752d5b41bc5e09681fcc984b52be88e395cbb9e3e4a3ca0dadaf76b6ee001705" }, { "subject": "EU AI Act, Article 50(1)", "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50", "document": "Article 50, AI Act Service Desk", "question": "rule", "answer": "stated", "answer_text": "Providers shall ensure that AI systems intended to interact directly with natural persons…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Providers shall ensure that AI systems intended to interact directly with natural persons are designed and developed in such a way that the natural persons concerned are informed that they are interacting with an AI system", "text_sha256": "752d5b41bc5e09681fcc984b52be88e395cbb9e3e4a3ca0dadaf76b6ee001705" }, { "subject": "Regulation (EU) 2026/1744, Article 113 dates", "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "document": "Official Journal text, EUR-Lex", "question": "jurisdiction", "answer": "eu", "answer_text": "the European Union", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Article 113 of Regulation (EU) 2024/1689 establishes the dates of entry into force and application of that Regulation", "text_sha256": "c28210858950847399d30db5f319101be6dd9635dd830ec923287d8548e93b6f" }, { "subject": "Regulation (EU) 2026/1744, Article 113 dates", "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "document": "Official Journal text, EUR-Lex", "question": "topic", "answer": "application", "answer_text": "when the provisions start to apply", "status": "stated", "retrieved_at": "2026-10-28", "quote": "2 August 2028 as regards AI systems classified as high-risk pursuant to Article 6(1) and Annex I;", "text_sha256": "c28210858950847399d30db5f319101be6dd9635dd830ec923287d8548e93b6f" }, { "subject": "Regulation (EU) 2026/1744, Article 113 dates", "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "document": "Official Journal text, EUR-Lex", "question": "rule", "answer": "stated", "answer_text": "2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2)…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2) and Annex III; and", "text_sha256": "c28210858950847399d30db5f319101be6dd9635dd830ec923287d8548e93b6f" }, { "subject": "UK GDPR, Article 30", "url": "https://www.legislation.gov.uk/eur/2016/679/article/30", "document": "UK GDPR Article 30, records of processing activities", "question": "jurisdiction", "answer": "gb", "answer_text": "the United Kingdom", "status": "stated", "retrieved_at": "2026-10-28", "quote": "There are currently no known outstanding effects by UK legislation for Regulation (EU) 2016/679 of the European Parliament and of the Council, Article 30.", "text_sha256": "fe95ab582cc6a026657ce11e23f5b26383f14d5553c0fe99e331bd393bb64118" }, { "subject": "UK GDPR, Article 30", "url": "https://www.legislation.gov.uk/eur/2016/679/article/30", "document": "UK GDPR Article 30, records of processing activities", "question": "topic", "answer": "retention", "answer_text": "who keeps the logs and for how long", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Each processor and, where applicable, the processor's representative shall maintain a record of all categories of processing activities carried out on behalf of a controller", "text_sha256": "fe95ab582cc6a026657ce11e23f5b26383f14d5553c0fe99e331bd393bb64118" }, { "subject": "UK GDPR, Article 30", "url": "https://www.legislation.gov.uk/eur/2016/679/article/30", "document": "UK GDPR Article 30, records of processing activities", "question": "rule", "answer": "stated", "answer_text": "Each controller and, where applicable, the controller's representative, shall maintain a…", "status": "stated", "retrieved_at": "2026-10-28", "quote": "Each controller and, where applicable, the controller's representative, shall maintain a record of processing activities under its responsibility.", "text_sha256": "fe95ab582cc6a026657ce11e23f5b26383f14d5553c0fe99e331bd393bb64118" } ], "sources": [ { "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-3", "label": "EU AI Act Article 3: definitions (AI Act Service Desk)", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-12", "label": "EU AI Act Article 12: record-keeping", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-19", "label": "EU AI Act Article 19: automatically generated logs", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-26", "label": "EU AI Act Article 26: obligations of deployers", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50", "label": "EU AI Act Article 50: transparency obligations", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/22", "label": "UK GDPR Article 22: automated individual decision-making", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "the stored page carries no rule text: Article 22 was substituted by Chapter 3 Section 4A (Articles 22A to 22D) by the Data (Use and Access) Act 2025, s80(1), and the page shows only the heading and the amendment note" }, { "url": "https://www.legislation.gov.uk/eur/2016/679/article/30", "label": "UK GDPR Article 30: records of processing activities", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://ico.org.uk/for-organisations/uk-gdpr-guidance-and-resources/artificial-intelligence/guidance-on-ai-and-data-protection/", "label": "ICO guidance on AI and data protection", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "the stored read is the guidance's landing page (navigation and headings, 8,274 characters); no rule is stated in it" }, { "url": "https://cppa.ca.gov/regulations/ccpa_updates.html", "label": "California Privacy Protection Agency: CCPA updates, automated decisionmaking technology regulations", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "read" }, { "url": "https://leg.colorado.gov/bills/sb24-205", "label": "Colorado SB24-205: consumer protections for artificial intelligence", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "not-terms", "why": "repealed and re-enacted by Colorado SB 26-189 (signed 14 May 2026, leg.colorado.gov/bills/sb26-189, read 2026-10-28: 'The act repeals and reenacts those provisions with new requirements regarding the use of automated decision-making technology in consequential decisions'), so this bill page no longer states live law" }, { "url": "https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng", "label": "Regulation (EU) 2026/1744 amending the AI Act (application dates, Article 113)", "license": "from the publisher's own statutes, regulations and regulator guidance; reproduced for comment", "class": "primary-government", "status": "read" } ], "methodology": "Each provision's own statutes, regulations and regulator guidance were read through estate-fetch and stored whole (sha256 on every row). For every page, three questions were answered from its own words: whose law it is, what the provision settles, the rule, in its own words. Every stated answer carries the sentence it rests on, checked against the stored text; 'not stated' means the page read does not address the question. A provision with several pages reads 'varies' where they disagree. 8 provisions, 8 pages.", "embed": "
8 provisions of EU, UK and US state law and guidance on recording, keeping and disclosing what AI systems do, each quoted from the authority's own page, read 28 October 2026.
The law on keeping and passing on AI agent logs, sellagentlogstoai.com
" }