MR-073 Regulatory compliance Organization scope

Failure to inform workers before workplace deployment

A deployer that is an employer puts a high-risk system into use at work without first informing affected workers and their representatives that they will be subject to it.

Risk family: Regulatory compliance
MIT domain: n/a (EU-derived)
MIT subdomain: n/a
AI type: GPAI, Agentic, Classical_ML
Scope: Organization
Source standard: EU AI Act 2024/1689 (gap analysis)

Provenance

Source standard

EU AI Act 2024/1689 (gap analysis)

Source frameworks

EU AI Act 2024/1689

EU AI Act articles

Art. 26(7)

Nearest MIT-derived risk

MR-040 Regulatory non-compliance (generic; the worker-information duty is not otherwise named).

Framework crosswalk

Every framework item mapped to this risk. Items marked partial overlap only in part; definitions appear on hover where the source licence permits.

Sourcesframeworks that contributed to the register

EU AI Act1

Art. 26(7)

More in Regulatory compliance

MR-040 MR-072 MR-074 MR-075 MR-076 MR-077 MR-078 MR-079 MR-080 MR-081 MR-082

Part of the Deployer AI Risk Register, an open-source resource developed by MindXO. Version 1.0, 3 July 2026. Derived from the MIT AI Risk Repository (V4, December 2025) under CC BY 4.0; an independent derivative work, not endorsed by or affiliated with MIT. Sub-risk decomposition references MITRE ATLAS™ v5.6.0 (© 2021-2026 The MITRE Corporation, reproduced and distributed with permission). ISO/IEC and EU AI Act references are by number only. License: CC BY 4.0. Full attribution and licensing.