MR-078 Regulatory compliance Both scope

Failure to meet AI transparency and disclosure obligations

A deployer does not inform people exposed to emotion-recognition or biometric-categorization systems, or does not disclose AI-generated or manipulated deepfake media and public-interest text as required.

Risk family: Regulatory compliance
MIT domain: n/a (EU-derived)
MIT subdomain: n/a
AI type: GPAI, Agentic
Scope: Both
Source standard: EU AI Act 2024/1689 (gap analysis)

Provenance

Source standard

EU AI Act 2024/1689 (gap analysis)

Source frameworks

EU AI Act 2024/1689

EU AI Act articles

Art. 50(3) | Art. 50(4)

Nearest MIT-derived risk

MR-055 Lack of explainability / MR-031 Deepfakes (neither names the Art. 50 disclosure duties).

Framework crosswalk

Every framework item mapped to this risk. Items marked partial overlap only in part; definitions appear on hover where the source licence permits.

Sourcesframeworks that contributed to the register

EU AI Act2

Art. 50(3)
Art. 50(4)

Cross-checksframeworks mapped in to test coverage

IBM1

ibm-non-disclosure Non-disclosure

More in Regulatory compliance

MR-040 MR-072 MR-073 MR-074 MR-075 MR-076 MR-077 MR-079 MR-080 MR-081 MR-082

Part of the Deployer AI Risk Register, an open-source resource developed by MindXO. Version 1.0, 3 July 2026. Derived from the MIT AI Risk Repository (V4, December 2025) under CC BY 4.0; an independent derivative work, not endorsed by or affiliated with MIT. Sub-risk decomposition references MITRE ATLAS™ v5.6.0 (© 2021-2026 The MITRE Corporation, reproduced and distributed with permission). ISO/IEC and EU AI Act references are by number only. License: CC BY 4.0. Full attribution and licensing.