Article 25: Responsibilities along the AI value chain
Praxikon tracks Article 25 (Responsibilities along the AI value chain) under the EU AI Act, citing the source for every statement.
Article 25 states that a distributor, importer, deployer or third party is considered a provider if they place the AI system on the market under their own name, modify the intended purpose, or make a substantial modification.
Official text
Source: EUR-Lex, Regulation (EU) 2024/1689. Text reproduced verbatim.
Download AI Act (PDF) →Related enforcement
No enforcement actions for this article yet. Follow developments via the Enforcement Tracker.
Related blog posts
Related articles
Frequently asked questions
When is someone considered a provider under Article 25 AI Act?+
What are the consequences of a role change in the AI value chain?+
What documentation does Article 25 of the AI Act require?+
Connections
What connects to Article 25 AI Act
Themes where this returns
The counterpart in the other law
GDPR interpretation that also applies here6 of 10
- Guidelines 07/2020 on the concepts of controller and processor in the GDPR
2021-07-07 · final, European Data Protection Board (EDPB) · via Who is responsible: roles in both laws
- IAB Europe: the TC String is personal data and the industry body is a joint controller
2024-03-07 · final, Hof van Justitie van de EU (Vierde kamer), IAB Europe tegen Gegevensbeschermingsautoriteit (België) · via Who is responsible: roles in both laws
- Council of State: 600,000 euro fine for wifi tracking in Enschede stays annulled
2026-07-29 · final, Raad van State, Afdeling bestuursrechtspraak · via Who is responsible: roles in both laws
- Guidelines 02/2026 on Anonymisation
2026-07-07 · under consultation, European Data Protection Board (EDPB) · via Who is responsible: roles in both laws
- EDPS v SRB: pseudonymised data are not always personal data for everyone, but the information duty applies from collection
2025-09-04 · final, Hof van Justitie van de EU (Eerste kamer), Europese Toezichthouder voor gegevensbescherming (EDPS) tegen Gemeenschappelijke Afwikkelingsraad (SRB) · via Who is responsible: roles in both laws
- Gelderland District Court: bankruptcy trustee is controller, DPA fine for unsecured hard drive cut to 58,125 euros
2025-08-07 · status not established, Rechtbank Gelderland · via Who is responsible: roles in both laws