Skip to main content
Praxikon
Back to the explorer
ControlEditorialv1.0.0

Review before handing over source code or trade secrets

The control that sends a submission touching source code, training methodology or trade secrets through a fixed review: is the request reasoned, what purpose was stated, which part is strictly necessary, and who inside the organisation signs off on it.

The official source remains authoritative. This is general information about obligations and not legal advice. See this object on the map

Address and citation

This object has an address of its own that is never renamed or reused. Store the identifier in your own file, not the title or the link.

Identifier
praxikon:eu:ai-act:control:article-78-disclosure-review
Payload hash (sha256)
8ecf8b9fd5f0aece19a1cbd0a0187a2921d194f04caa372275204598627b2f92

Citation line

Praxikon, "Review before handing over source code or trade secrets", praxikon:eu:ai-act:control:article-78-disclosure-review@1.0.0, dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.2.0 (schema 1.5.0), effective_at 2026-08-08T00:00:00.000Z, known_at 2026-09-06T00:00:00.000Z, sha256 8ecf8b9fd5f0aece19a1cbd0a0187a2921d194f04caa372275204598627b2f92
Version
1.0.0
Legal time (effective_at)
2 August 2025
Knowledge time (known_at)
6 September 2026
Closed on
Not closed
Topics
control, enforcement, governance

Review status: Editorially reviewed (6 September 2026). Next check due by 5 March 2027. The check date is the knowledge date of this version; no later recheck has been recorded.

What this object links to

Every relation appears below as a path: from the source with its locator, through the conditions and exceptions of the object carrying the relation, to the consequence. A locator belongs to a statement in the data and not to a relation, so the source is the source anchor of the carrying object.

The obligation this hangs off

1 of 1 shown

The object belongs to this obligation. The source line it hangs off sits there.

  1. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 78(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    Via

    No condition or exception recorded on this object.

    Consequence

What this object is about

3 of 3 shown

The object is about this role. Undifferentiated: it does not follow that the duty rests on this role.

  1. Source

    This object carries no official fact of its own. The source line below sits on the obligation it hangs off; the link itself is recorded editorially.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 78(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    Via

    No condition or exception recorded on this object.

    Consequence

What points at this object

Where this control comes from

1 of 1 shown

This is what keeps compliance in place over time, periodic or event-driven.

  1. Source

    Official fact on this object, with its locator.

    • EU Artificial Intelligence Act 2024/1689

      Locator: Article 78(1)-(5)

      praxikon:eu:ai-act:source:reg-eu-2024-1689

      Open official source

    Via

    • Condition | allApplies to all information and data obtained by the Commission, the market surveillance authorities, the notified bodies and any other natural or legal person involved in the application of this Regulation in carrying out their tasks and activities. The protection operates in accordance with Union or national law and not on its own.
    • Condition | allParagraph 2 limits what an authority may request: only data that is strictly necessary for the assessment of the risk posed by AI systems and for the exercise of its powers in accordance with this Regulation and with Regulation (EU) 2019/1020. Two follow-on duties attach to that: adequate and effective cybersecurity measures, and deletion as soon as the data is no longer needed for the purpose for which it was obtained.
    • ExceptionThe protection of intellectual property, confidential business information and trade secrets, including source code, applies except in the cases referred to in Article 5 of Directive (EU) 2016/943. Point (a) of paragraph 1 says so in as many words.
    • ExceptionParagraph 4 provides that paragraphs 1, 2 and 3 do not affect the rights or obligations of the Commission, the Member States and their relevant authorities, or those of notified bodies, with regard to the exchange of information and the dissemination of warnings, including in the context of cross-border cooperation, nor the obligations of the parties concerned to provide information under criminal law of the Member States. Confidentiality under this article is therefore not a duty of silence between authorities.

    As long as this exception is not ruled out, the outcome stays conditional and you have to establish it yourself.

    Relation recorded on: Article 78: confidentiality of what you submit to an authority

    Consequence

When this applies

No condition recorded on this object.

When this does not apply

No exception recorded on this object.

Referring to this object

Citation block

Copy this reference into your advice, article or file. The identifier, the version and the hash keep the statement findable later, even once the dataset has moved on.

Reference

Praxikon, "Review before handing over source code or trade secrets",
praxikon:eu:ai-act:control:article-78-disclosure-review@1.0.0,
dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.2.0 (schema 1.5.0),
effective_at 2025-08-02T00:00:00.000Z, known_at 2026-09-06T00:00:00.000Z,
sha256 8ecf8b9fd5f0aece19a1cbd0a0187a2921d194f04caa372275204598627b2f92,
https://www.praxikon.com/en/verkenner/control/article-78-disclosure-review
(https://www.praxikon.com/api/v1/entities?id=praxikon%3Aeu%3Aai-act%3Acontrol%3Aarticle-78-disclosure-review&effective_at=2025-08-02&known_at=2026-09-06&lang=en, accessed 2026-09-20)

Short form

praxikon:eu:ai-act:control:article-78-disclosure-review@1.0.0 (sha256 8ecf8b9f)

BibTeX

@misc{praxikon-eu-ai-act-control-article-78-disclosure-review-1-0-0,
  author       = {{Praxikon}},
  title        = {Review before handing over source code or trade secrets},
  year         = {2026},
  version      = {1.0.0},
  number       = {praxikon:eu:ai-act:control:article-78-disclosure-review},
  howpublished = {AI Act Change \& Evidence Graph, dataset 2.2.0, schema 1.5.0},
  note         = {effective_at 2025-08-02T00:00:00.000Z; known_at 2026-09-06T00:00:00.000Z; sha256 8ecf8b9fd5f0aece19a1cbd0a0187a2921d194f04caa372275204598627b2f92},
  url          = {https://www.praxikon.com/en/verkenner/control/article-78-disclosure-review},
  urldate      = {2026-09-20},
  language     = {en}
}

CSL JSON

[
  {
    "id": "praxikon:eu:ai-act:control:article-78-disclosure-review@1.0.0",
    "type": "dataset",
    "title": "Review before handing over source code or trade secrets",
    "container-title": "AI Act Change & Evidence Graph",
    "publisher": "Praxikon",
    "version": "1.0.0",
    "number": "praxikon:eu:ai-act:control:article-78-disclosure-review",
    "URL": "https://www.praxikon.com/en/verkenner/control/article-78-disclosure-review",
    "language": "en",
    "issued": {
      "date-parts": [
        [
          2026,
          9,
          6
        ]
      ]
    },
    "accessed": {
      "date-parts": [
        [
          2026,
          9,
          20
        ]
      ]
    },
    "note": "dataset praxikon:sys:registry:dataset:ai-act-implementation-graph 2.2.0; schema 1.5.0; effective_at 2025-08-02T00:00:00.000Z; known_at 2026-09-06T00:00:00.000Z; sha256 8ecf8b9fd5f0aece19a1cbd0a0187a2921d194f04caa372275204598627b2f92; retrieved_from https://www.praxikon.com/api/v1/entities?id=praxikon%3Aeu%3Aai-act%3Acontrol%3Aarticle-78-disclosure-review&effective_at=2025-08-02&known_at=2026-09-06&lang=en; licence https://www.praxikon.com/nl/legal/terms"
  }
]

How to verify a reference later is set out in the methodology. Terms

For agents and integrations

This page and the machine output come from the same object and the same two time axes.

Open as JSONOpen as JSON-LDHuman explanationRead the methodology