Article 31

printed pages 62–63 · source locator: Article 31 occurrence 1; printed pages 62–63

Official source: COM(2026) 502 final — Proposal for a Cloud and AI Development Act

Article 31

Impact assessments
     1.   Entities referred to in Annex I of Directive (EU) 2022/2555 who are not public sector
          bodies may carry out similar assessments as those set out in Article 29.
     2.   The Commission may issue guidance on the methodology for carrying out the impact
          assessments under this Article and possible mitigation measures to be adopted by
          private sector entities operating in sectors of high criticality.
     3.   Where, because of specific circumstances, and where duly justified and in
          consultation with the Member States, the Commission concludes that entities who
          are not public sector bodies operating in sectors of high criticality require an impact
          assessment, the Commission may adopt delegated acts to supplement this Regulation
          in accordance with Article 45 specifying the need for such impact assessment and the

          risk mitigation measures that those entities who are not public sector bodies shall
          take.
                                   SECTION 3
                      OTHER PROCUREMENT-RELATED MEASURES

Qualifications

• Text is a faithful source slice; PDF page furniture and form-feed separators are removed.