Assess provider responsibilities: Which missing control is most direct?
Own-brand distribution can change the retailer’s statutory role, making provider-responsibility assessment the direct missing control.
The question
Under the EU AI Act, assume all relevant duties apply. A retailer licenses a vendor’s demand-planning model, changes no code, and uses it internally. The retailer then markets the system to other retailers under its own brand. All high-risk technical, data, oversight, transparency, and monitoring controls are otherwise satisfied. Which missing control is most direct?
Preparing for AIGP? Take the free 5-min readiness quiz →
- Repeat internal model validationValidation may support assurance, but the identified gap is legal role allocation created by own-brand distribution.
- Assess provider responsibilities ✓Marketing the system under its own name requires assessing the retailer’s provider responsibilities under the stated role-changing facts.
- Apply only deployer instructionsDeployer instructions remain relevant internally, but they do not address additional responsibilities arising from placing the system under the retailer’s name.
- Issue a customer interaction noticeAn interaction notice addresses people communicating with AI, not the retailer’s changed market-facing actor role.
The trap
Check whether the organization markets the system under its own name before assuming it remains only a deployer. How to remember it
Own-brand distribution can change the retailer’s statutory role, making provider-responsibility assessment the direct missing control.
How many of these would you get right?
One of 1581 AIGP questions on Certsqill. Take a free five-minute check and see your score per domain — not one number, but which section to open tonight.
Test your AIGP readiness — freeMore Understanding How Laws, Standards and Frameworks Apply to AI questions
- Define deployer oversight: Which missing control is most direct? →
- Assess substantial modification: Before distribution, which missing control is most direct? →
- Document risk management: Which missing control is most direct? →
- All 394 Understanding How Laws, Standards and Frameworks Apply to AI questions →
Part of the Certsqill AIGP question bank · Understanding How Laws, Standards and Frameworks Apply to AI ·
Every answer, right and wrong, comes with its own explanation.