214 éléments sous ce dossier.

  • small mid-cap enterprise

    Omnibus addition EnglishFrançaisa small mid-cap enterprise as defined in point (2) of the Annex to Recommendation (EU) 2025/1099Art. 3(14b).

  • turnover

    (x) ‘’ means .

  • commercial communication

    EnglishFrançais‘commercial communication’ as defined in Article 2, point (f), of Directive 2000/31/ECi.e.any form of communication designed to promote, directly or indirectly, the goods, services or image of a company, organisation or person pursuing a commercial, industrial or craft activity or ex...

  • persons with disabilities

    EnglishFrançais‘persons with disabilities’ as referred to in Article 3, point (1), of Directive (EU) 2019/882 of the European Parliamenti.e.persons who have long-term physical, mental, intellectual or sensory impairments which in interaction with various barriers may hinder their full and effective...

  • terms and conditions

    EnglishFrançaisall clauses, irrespective of their name or form, which govern the contractual relationship between the provider of intermediary services and the recipients of the servicetoutes les clauses, quelle que soit leur dénomination ou leur forme, qui régissent la relation contractuelle entre...

  • content moderation

    EnglishFrançaisthe activities, whether automated or not, undertaken by providers of intermediary services, that are aimed, in particular, at detecting, identifying and addressing illegal content or information incompatible with their terms and conditions, provided by recipients of the service, incl...

  • recommender system

    EnglishFrançaisa fully or partially automated system used by an online platform to suggest in its online interface specific information to recipients of the service or prioritise that information, including as a result of a search initiated by the recipient of the service or otherwise determining t...

  • advertisement

    EnglishFrançaisinformation designed to promote the message of a legal or natural person, irrespective of whether to achieve commercial or non-commercial purposes, and presented by an online platform on its online interface against remuneration specifically for promoting that informationles informat...

  • active recipient of an online search engine

    EnglishFrançaisa recipient of the service that has submitted a query to an online search engine and been exposed to information indexed and presented on its online interfaceun destinataire du service qui a soumis une requête à un moteur de recherche en ligne en ligne et a été exposé aux information...

  • active recipient of an online platform

    EnglishFrançaisa recipient of the service that has engaged with an online platform by either requesting the online platform to host information or being exposed to information hosted by the online platform and disseminated through its online interfacedestinataire du service qui a été en contact ave...

  • Digital Services Coordinator of destination

    EnglishFrançaisthe Digital Services Coordinator of a Member State where the intermediary service is providedle coordinateur pour les services numériques d’un État membre dans lequel le service intermédiaire est fourniArt.

  • Digital Services Coordinator of establishment

    EnglishFrançaisthe Digital Services Coordinator of the Member State where the main establishment of a provider of an intermediary service is located or its legal representative resides or is establishedle coordinateur pour les services numériques de l’État membre dans lequel l’établissement princip...

  • online interface

    EnglishFrançaisany software, including a website or a part thereof, and applications, including mobile applicationstout logiciel, y compris un site internet ou une section de site internet, et des applications, notamment des applications mobilesArt.

  • distance contract

    EnglishFrançais‘distance contract’ as defined in Article 2, point (7), of Directive 2011/83/EUi.e.‘distance contract’ means any contract concluded between the trader and the consumer under an organised distance sales or service-provision scheme without the simultaneous physical presence of the trad...

  • dissemination to the public

    EnglishFrançaismaking information available, at the request of the recipient of the service who provided the information, to a potentially unlimited number of third partiesle fait de mettre des informations à la disposition d’un nombre potentiellement illimité de tiers, à la demande du destinataire...

  • online platform

    EnglishFrançaisa hosting service that, at the request of a recipient of the service, stores and disseminates information to the public, unless that activity is a minor and purely ancillary feature of another service or a minor functionality of the principal service and, for objective and technical ...

  • illegal content

    EnglishFrançaisany information that, in itself or in relation to an activity, including the sale of products or the provision of services, is not in compliance with Union law or the law of any Member State which is in compliance with Union law, irrespective of the precise subject matter or nature o...

  • feedback loops

    EnglishFrançaispossibly biased outputs influencing input for future operationssorties éventuellement biaisées qui influencent les entrées pour les opérations futuresArt.

  • online search engine

    EnglishFrançaisan intermediary service that allows users to input queries in order to perform searches of, in principle, all websites, or all websites in a particular language, on the basis of a query on any subject in the form of a keyword, voice request, phrase or other input, and returns results...

  • hosting

    EnglishFrançaisservice, consisting of the storage of information provided by, and at the request of, a recipient of the serviceservice consistant à stocker des informations fournies par un destinataire du service à sa demandeArt.

  • caching

    EnglishFrançaisservice, consisting of the transmission in a communication network of information provided by a recipient of the service, involving the automatic, intermediate and temporary storage of that information, performed for the sole purpose of making more efficient the information’s onward ...

  • _Definition List

    const pages = dv.pages('"SiteMap/Definitions"') .where(p => p.file.path !== dv.current().file.path && p.Text != null && p.Text[0] != null) .sort(p => p.file.name, "asc"); const getKey = (p) => { const t = Array.isArray(p.Text) ? p.Text[0] : p.T...

    • reasonably foreseeable use

      EnglishFrançaisuse that is not necessarily the intended purpose supplied by the manufacturer in the instructions for use, promotional or sales materials and statements, as well as in the technical documentation, but which is likely to result from reasonably foreseeable human behaviour or technical ...

    • support period

      EnglishFrançaisthe period during which a manufacturer is required to ensure that vulnerabilities of a product with digital elements are handled effectively and in accordance with the essential cybersecurity requirements set out in Part II of Annex Ila période au cours de laquelle un fabricant est t...

    • withdrawal of an AI system

      EnglishFrançaisany measure aiming to prevent an AI system in the supply chain being made available on the market toute mesure visant à empêcher qu’un système d’IA se trouvant dans la chaîne d’approvisionnement ne soit mis à disposition sur le marché héArt.

    • widespread infringement

      any act or omission contrary to Union law protecting the interest of individuals, which: (a) has harmed or is likely to harm the collective interests of individuals residing in at least two Member States other than the Member State in which: (i) the act or omission originated or took place; (ii) the...

    • wellness application

      EnglishFrançaisany software, or any combination of hardware and software, intended by the manufacturer to be used by a natural person, for the processing of electronic health data, specifically for providing information on the health of natural persons, or the delivery of care for purposes other th...

    • virtual assistants

      EnglishFrançaissoftware that can process demands, tasks or questions including those based on audio, written input, gestures or motions, and that, based on those demands, tasks or questions, provides access to other services or controls the functions of connected productsdes logiciels capables de t...

    • validation data

      data used for providing an evaluation of the trained ai-system and for tuning its non-learnable parameters and its learning process in order, inter alia, to prevent underfitting or overfitting Art.

    • validation data set

      a separate data set or part of the training data set, either as a fixed or variable split Art. 3(31) EU AI Act.

    • user

      EnglishFrançaisa natural or legal person that owns a connected product or to whom temporary rights to use that connected product have been contractually transferred, or that receives related servicesune personne physique ou morale à laquelle appartient un produit connecté ou à laquelle des droits t...

    • Union bodies

      EnglishFrançaisthe Union bodies, offices and agencies set up by or pursuant to acts adopted on the basis of the Treaty on European Union, the TFEU or the Treaty establishing the European Atomic Energy Communityles organes et organismes de l’Union mis en place par ou en vertu des actes adoptés sur l...

    • training data

      data used for training an ai system through fitting its learnable parameters Art. 3(29) EU AI Act.

      • trader

        EnglishFrançaisany natural person, or any legal person irrespective of whether it is privately or publicly owned, who is acting, including through any person acting in his or her name or on his or her behalf, for purposes relating to his or her trade, business, craft or professiontoute personne phy...

      • trade secret

        EnglishFrançaistrade secret as defined in Article 2, point (1), of Directive (EU) 2016/943i.e.

      • trade secret holder

        EnglishFrançaisa trade secret holder as defined in Article 2, point (2), of Directive (EU) 2016/943i.e.

      • third party

        EnglishFrançaisa natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons who, under the direct authority of the controller or processor, are authorised to process personal dataune personne physique ou morale, une autorité publique, un...

      • testing in real-world conditions

        the temporary testing of an AI system for its intended purpose in real-world conditions outside a laboratory or otherwise simulated environment, with a view to gathering reliable and robust data and to assessing and verifying the conformity of the AI system with the requirements of this Regulation a...

        • testing data

          data used for providing an independent evaluation of the ai system in order to confirm the expected performance of that system before its placing on the market or putting into service Art.

          • systemic risk

            a risk that is specific to the high-impact capabilities of general-purpose AI models, having a significant impact on the Union market due to their reach, or due to actual or reasonably foreseeable negative effects on public health, safety, public security, fundamental rights, or the society as a who...

          • switching

            EnglishFrançaisthe process involving a source provider of data processing services, a customer of a data processing service and, where relevant, a destination provider of data processing services, whereby the customer of a data processing service changes from using one data processing service to us...

          • switching charges

            charges, other than standard service fees or early termination penalties, imposed by a provider of data processing services on a customer for the actions mandated by this Regulation for switching to the system of a different provider or to on-premises ICT infrastructure, including data egress charge...

          • supervisory authority

            EnglishFrançaisan independent public authority which is established by a Member State pursuant to Article 51 GDPR.une autorité publique indépendante qui est instituée par un État membre en vertu de l’Article 51 RGPDArt.

          • supervisory authority concerned

            EnglishFrançaisa supervisory authority which is concerned by the processing of personal data because:(a) the controller or processor is established on the territory of the Member State of that supervisory authority; (b) data subjects residing in the Member State of that supervisory authority are su...

          • substantial modification

            a change to an AI system after its placing on the market or putting into service which is not foreseen or planned in the initial conformity assessment carried out by the provider and as a result of which the compliance of the AI system with the requirements set out in Chapter III, Section 2 is affec...

            • substantial connection to the Union

              EnglishFrançaisa connection of a provider of intermediary services with the Union resulting either from its establishment in the Union or from specific factual criteria, such as:- a significant number of recipients of the service in one or more Member States in relation to its or their population; ...

            • subject

              for the purpose of real-world testing, means a natural person who participates in testing in real world conditions Art. 3(58) EU AI Act.

              • special categories of personal data

                EnglishFrançaisthe categories of personal data referred to in Article 9 of Directive (EU) 2016/680 and Article 10(1) of Regulation (EU) 2018/1725i.e.- personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, - the processing...

              • software

                the part of an electronic information system which consists of computer code Art. 3(4) Cyber Resilience Act.

              • software component

                EnglishFrançaisa discrete part of software which provides a specific functionality or performs specific functions or procedures and which can operate independently or in conjunction with other componentsune partie distincte d’un logiciel qui propose une fonctionnalité spécifique ou exécute des fonc...

              • software bill of materials

                EnglishFrançaisa formal record containing details and supply chain relationships of components included in the software elements of a product with digital elementsun document officiel contenant les détails et les relations avec la chaîne d’approvisionnement des différents composants utilisés dans l...

              • smart contract

                a computer program used for the automated execution of an agreement or part thereof, using a sequence of electronic data records and ensuring their integrity and the accuracy of their chronological ordering Art.

              • small enterprise

                EnglishFrançaisa small enterprise as defined in Article 2(2) of the Annex to Recommendation 2003/361/ECi.e.

              • serious incident

                EnglishFrançaisan incident or malfunctioning of an AI system that directly or indirectly leads to any of the following:---- (a) the death of a person, or serious harm to a person’s health;---- (b) a serious and irreversible disruption of the management or operation of critical infrastructure;---- (...

              • sensitive operational data

                operational data related to activities of prevention, detection, investigation or prosecution of criminal offences, the disclosure of which could jeopardise the integrity of criminal proceedings Art.

                • security of network and information systems

                  EnglishFrançaisthe ability of network and information systems to resist, at a given level of confidence, any event that may compromise the availability, authenticity, integrity or confidentiality of stored, transmitted or processed data or of the services offered by, or accessible via, those networ...

                • secondary use

                  the processing of electronic health data for the purposes set out in Chapter IV of this Regulation, other than the initial purposes for which they were collected or produced Art.

                • sandbox plan

                  EnglishFrançaisa document agreed between the participating provider and the competent authority describing the objectives, conditions, timeframe, methodology and requirements for the activities carried out within the sandboxun document adopté conjointement entre le fournisseur participant et l’auto...

                • same service type

                  a set of data processing services that share the same primary objective, data processing service model and main functionalities Art. 2(9) EU Data Act.

                • safety component

                  Post-omnibus definition EnglishFrançaisa component of a product or of an AI System which fulfils a safety function for that product or AI System, or the failure or malfunctioning of which endangers the health and safety of persons or property; for the purposes of this definition, a component fulfils...

                • risk

                  EnglishFrançaisthe combination of the probability of an occurrence of harm and the severity of that harmla combinaison de la probabilité d’un préjudice et de la sévérité de celui-ciArt.

                • restriction of processing

                  EnglishFrançaisthe marking of stored personal data with the aim of limiting their processing in the futurele marquage de données à caractère personnel conservées, en vue de limiter leur traitement futur Art.

                • representative

                  EnglishFrançaisa natural or legal person established in the Union who, designated by the controller or processor in writing pursuant to Article 27 GDPR, represents the controller or processor with regard to their respective obligations under this Regulationune personne physique ou morale établie da...

                • remote data processing

                  data processing at a distance for which the software is designed and developed by the manufacturer, or under the responsibility of the manufacturer, and the absence of which would prevent the product with digital elements from performing one of its functions Art.

                • remote biometric identification system

                  an AI System for the purpose of identifying natural persons, without their active involvement, typically at a distance through the comparison of a person’s biometric data with the biometric data contained in a reference database Art.

                  • relevant and reasoned objection

                    EnglishFrançaisan objection to a draft decision as to whether there is an infringement of this Regulation, or whether envisaged action in relation to the controller or processor complies with this Regulation, which clearly demonstrates the significance of the risks posed by the draft decision as re...

                  • related service

                    a digital service, other than an electronic communications service, including software, which is connected with the product at the time of the purchase, rent or lease in such a way that its absence would prevent the connected product from performing one or more of its functions, or which is subseque...

                  • related service data

                    data representing the digitisation of user actions or of events related to the connected product recorded intentionally by the user or generated as a by-product of the user’s action during the provision of a related service by the provider Art.

                  • registration electronic health data

                    the recording of health data in an electronic format, through the manual entry of such data, through the collection of such data by a device, or through the conversion of non-electronic health data into an electronic format, to be processed in an EHR system or a wellness application Art.

                  • recipient

                    EnglishFrançaisa natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not.However, public authorities which may receive personal data in the framework of a particular inquiry in accordance with Union or Member State la...

                  • recipient of the service

                    EnglishFrançaisany natural or legal person who uses an intermediary service, in particular for the purposes of seeking information or making it accessibletoute personne physique ou morale utilisant un service intermédiaire, notamment pour rechercher une information ou la rendre accessibleArt.

                  • recall of an AI system

                    EnglishFrançaisany measure aiming to achieve the return to the provider or taking out of service or disabling the use of an AI system made available to deployertoute mesure visant à assurer le retour au fournisseur d’un système d’IA mis à la disposition de déployeurs ou à le mettre hors service ou ...

                  • reasonably foreseeable misuse

                    EnglishFrançaisthe use of an AI system in a way that is not in accordance with its intended purpose, but which may result from reasonably foreseeable human behaviour or interaction with other systems, including other AI systemsl’utilisation d’un système d’IA d’une manière qui n’est pas conforme à s...

                  • real-world testing plan

                    a document that describes the objectives, methodology, geographical, population and temporal scope, monitoring, organisation and conduct of testing in real-world conditions Art.

                    • real-time remote biometric identification system

                      a remote biometric identification system whereby the capturing of biometric data, the comparison and the identification all occur without a significant delay, comprising not only instant identification, but also limited short delays in order to avoid circumvention Art.

                      • readily available data

                        product data and related service data that a data holder lawfully obtains or can lawfully obtain from the connected product or related service, without disproportionate effort going beyond a simple operation Art.

                      • putting into service

                        EnglishFrançaisthe supply of an AI system for first use directly to the deployer or for own use in the Union for its intended purpose la fourniture d’un système d’IA en vue d’une première utilisation directement au déployeur ou pour usage propre dans l’Union, conformément à la destination du systèm...

                      • publicly accessible space

                        any publicly or privately owned physical place accessible to an undetermined number of natural persons, regardless of whether certain conditions for access may apply, and regardless of the potential capacity restrictions; Art.

                        • public sector body

                          national, regional or local authorities of the Member States and bodies governed by public law of the Member States, or associations formed by one or more such authorities or one or more such bodies Art.

                        • public emergency

                          an exceptional situation, limited in time, such as a public health emergency, an emergency resulting from natural disasters, a human-induced major disaster, including a major cybersecurity incident, negatively affecting the population of the Union or the whole or part of a Member State, with a risk ...

                        • pseudonymisation

                          EnglishFrançaisthe processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measur...

                        • provider

                          EnglishFrançaisa natural or legal person, public authority, agency or other body that develops an AI system or a general-purpose AI model or that has an AI system or a general-purpose AI model developed and places it on the market or puts the AI system into service under its own name or trademark, ...

                        • profiling

                          EnglishFrançaisany form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning that natural person’s performance at work, economic situation, health, pe...

                        • product with digital elements

                          a software or hardware product and its remote data processing solutions, including software or hardware components being placed on the market separately.

                        • product data

                          data generated by the use of a connected product that the manufacturer designed to be retrievable, via an electronic communications service, physical connection or on-device access, by a user, data holder or a third party, including, where relevant, the manufacturer Art.

                        • processor

                          EnglishFrançaisa natural or legal person, public authority, agency or other body which processes personal data data on behalf of the controllerla personne physique ou morale, l’autorité publique, le service ou un autre organisme qui traite des données à caractère personnel pour le compte du respons...

                        • processing

                          EnglishFrançaisany operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission...

                        • primary use

                          the processing of electronic health data for the provision of healthcare, in order to assess, maintain or restore the state of health of the natural person to whom those data relate, including the prescription, dispensation and provision of medicinal products and medical devices, as well as for rele...

                        • post-remote biometric identification system

                          a remote biometric identification system other than a real time remote biometric identification system Art. 3(43) EU AI Act.

                          • post-market monitoring system

                            all activities carried out by provider of ai system to collect and review experience gained from the use of ai system they placing on the market or putting into service for the purpose of identifying any need to immediately apply any necessary corrective or preventive actions Art.

                            • placing on the market

                              EnglishFrançaisthe first making available of an AI system or a general-purpose AI model on the Union market la première mise à disposition d’un système d’IA ou d’un modèle d’IA à usage général sur le marché de l’Union Art.

                            • physical connection

                              a connection between electronic information systems or components implemented using physical means, including through electrical, optical or mechanical interfaces, wires or radio waves Art.

                            • personal electronic health data

                              data concerning health and genetic data, processed in an electronic form Art. 2(2)(a) EHDS.

                            • personal data

                              EnglishFrançaisany information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an onli...

                            • personal data breach

                              EnglishFrançaisa breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to, personal data transmitted, stored or otherwise processedune violation de la sécurité entraînant, de manière accidentelle ou illicite, la destruction, la...

                            • performance of an AI system

                              EnglishFrançaisthe ability of an AI system to achieve its intended purpose la capacité d’un système d’IA à remplir sa destinationArt.

                            • operator

                              EnglishFrançaisa provider, product manufacturer, deployer, authorised representative, importer or distributorun fournisseur, fabricant de produits, déployeur, mandataire, importateur ou distributeurArt.

                            • operational or security payment-related incident

                              EnglishFrançaisa single event or a series of linked events unplanned by the financial entities referred to in Article 2(1), points (a) to (d), whether ICT-related or not, that has an adverse impact on the availability, authenticity, integrity or confidentiality of payment-related data, or on the pa...

                            • open-source software steward

                              a legal person, other than a manufacturer, that has the purpose or objective of systematically providing support on a sustained basis for the development of specific products with digital elements, qualifying as free and open-source software and intended for commercial activities, and that ensures t...

                            • open interoperability specification

                              a technical specification in the field of information and communication technologies which is performance oriented towards achieving interoperability between data processing services Art.

                            • on-premises ICT infrastructure

                              ICT infrastructure and computing resources owned, rented or leased by the customer, located in the data centre of the customer itself and operated by the customer or by a third-party Art.

                            • offer services in the Union

                              EnglishFrançaisenabling natural or legal persons in one or more Member States to use the services of a provider of intermediary services that has a substantial connection to the Unionpermettre aux personnes physiques ou morales dans un ou plusieurs États membres d’utiliser les services d’un fournis...

                            • notifying authority

                              the national authority responsible for setting up and carrying out the necessary procedures for the assessment, designation and notification of conformity assessment bodies and for their monitoring Art.

                            • notified body

                              EnglishFrançaisa conformity assessment body notified in accordance with this Regulation and other relevant Union harmonisation legislation Art.

                              • non-personal electronic health data

                                electronic health data other than personal electronic health data, including both data that have been anonymised so that they no longer relate to an identified or identifiable natural person (the ‘data subject’) and data that have never related to a data subject Art.

                              • non-personal data

                                data other than personal data as defined in Article 4, point (1), of Regulation (EU) 2016/679 Art. 2(4) EU Data Act Art. 3(51) EU AI Act.

                              • network and information system

                                EnglishFrançais(a) an electronic communications network as defined in Article 2, point (1), of Directive (EU) 2018/1972;(b) any device or group of interconnected or related devices, one or more of which, pursuant to a programme, carry out automatic processing of digital data; or(c) digital data sto...

                              • national competent authority

                                means a notifying authority or a market surveillance authority; as regards ai system put into service or used by Union institutions, agencies, offices and bodies, references to national competent authority or market surveillance authority in this Regulation shall be construed as references to the Eu...

                                • microenterprise

                                  Within the SME category, a microenterprise is defined as an enterprise which employs fewer than 10 persons and whose annual turnover and/or annual balance sheet total does not exceed EUR 2 million.

                                • metadata

                                  a structured description of the contents or the use of data facilitating the discovery or use of that data Art. 2(2) EU Data Act.

                                • mere conduit

                                  EnglishFrançaisservice consisting of the transmission in a communication network of information provided by a 📒recipient of the service, or the provision of access to a communication networkservice consistant à transmettre, sur un réseau de communication, des informations fournies par un destinata...

                                • market surveillance authority

                                  the national authority carrying out the activities and taking the measures pursuant to Regulation (EU) 2019/1020 Art. 3(26) EU AI Act.

                                • manufacturer

                                  EnglishFrançaisa natural or legal person who develops or manufactures products with digital elements or has products with digital elements designed, developed or manufactured, and markets them under its name or trademark, whether for payment, monetisation or free of chargeune personne physique ou m...

                                • manager of alternative investment funds

                                  EnglishFrançaisa manager of alternative investment funds as defined in Article 4(1), point (b), of Directive 2011/61/EUun gestionnaire de fonds d’investissement alternatifs au sens de l’article 4, paragraphe 1, point b), de la directive 2011/61/UEArt.

                                • making available on the market

                                  EnglishFrançaisthe supply of an AI system or a general-purpose AI model for distribution or use on the Union market in the course of a commercial activity, whether in return for payment or free of charge Art.

                                • major ICT-related incident

                                  |English|Français| an ICT-related incident that has a high adverse impact on the network and information systems that support critical or important functions of the financial entityun incident lié aux TIC qui a une incidence négative élevée sur les réseaux et les systèmes d’information qui soutienne...

                                • main establishment

                                  EnglishFrançais- (a) as regards a controller with establishments in more than one Member State, the place of its central administration in the Union, unless the decisions on the purposes and means of the processing of personal data are taken in another establishment of the controller in the Union a...

                                • logical connection

                                  a virtual representation of a data connection implemented through a software interface Art. 3(8) CRA.

                                • legacy ICT system

                                  EnglishFrançaisan ICT system that has reached the end of its lifecycle (end-of-life), that is not suitable for upgrades or fixes, for technological or commercial reasons, or is no longer supported by its supplier or by an ICT third-party service provider, but that is still in use and supports the f...

                                • law enforcement

                                  activities carried out by law enforcement authorities or on their behalf for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including safeguarding against and preventing threats to public security Art.

                                  • law enforcement authority

                                    (a) any public authority competent for the prevention, investigation, detection or prosecution of criminal offences or the execution of criminal penalties, including the safeguarding against and the prevention of threats to public security; or (b) any other body or entity entrusted by Member State ...

                                    • interoperability

                                      EnglishFrançaisthe ability of two or more data spaces or communication networks, systems, connected products, applications, data processing services or components to exchange and use data in order to perform their functions Art.

                                    • international organisation

                                      EnglishFrançaisan organisation and its subordinate bodies governed by public international law, or any other body which is set up by, or on the basis of, an agreement between two or more countries.une organisation internationale et les organismes de droit public international qui en relèvent, ou to...

                                    • intermediary service

                                      EnglishFrançaisone of the following information society services: - (i) a ‘mere conduit’ service, consisting of the transmission in a communication network of information provided by a recipient of the service, or the provision of access to a communication network; - (ii) a ‘caching’ service, consi...

                                    • intended purpose

                                      EnglishFrançaisthe use for which an AI system is intended by the provider, including the specific context and conditions of use, as specified in the information supplied by the provider in the instructions for use, promotional or sales materials and statements, as well as in the technical documenta...

                                    • instructions for use

                                      EnglishFrançaisthe information provided by the provider to inform the deployer of in particular an AI system’s intended purpose and proper use les indications communiquées par le fournisseur pour informer le déployeur, en particulier, de la destination et de l’utilisation correcte d’un système d’IA...

                                    • input data

                                      data provided to or directly acquired by an AI system on the basis of which the system produces an output Art. 3(33) EU AI Act.

                                      • informed consent

                                        means a subject’s freely given, specific, unambiguous and voluntary expression of his or her willingness to participate in a particular testing in real-world conditions, after having been informed of all aspects of the testing that are relevant to the subject’s decision to participate Art.

                                        • information society service

                                          EnglishFrançaisInformation Society service, that is to say, any service normally provided for remuneration, at a distance, by electronic means and at the individual request of a recipient of services.For the purposes of this definition:(i) ‘at a distance’ means that the service is provided without ...

                                        • information asset

                                          EnglishFrançaisa collection of information, either tangible or intangible, that is worth protectingun ensemble d’informations, matérielles ou immatérielles, qui justifie une protectionArt.

                                        • indirect connection

                                          a connection to a device or network, which does not take place directly but rather as part of a larger system that is directly connectable to such device or network Art.

                                        • incident having an impact on the security of the product with digital elements

                                          EnglishFrançaisan incident that negatively affects or is capable of negatively affecting the ability of a product with digital elements to protect the availability, authenticity, integrity or confidentiality of data or functionsun incident qui entache ou est susceptible d’entacher la capacité d’un ...

                                        • importer

                                          EnglishFrançaisa natural or legal person located or established in the Union that places on the market an AI system that bears the name or trademark of a natural or legal person established in a third countryune personne physique ou morale située ou établie dans l’Union qui met sur le marché un sys...

                                          • ICT-related incident

                                            EnglishFrançaisa single event or a series of linked events unplanned by the financial entity that compromises the security of the network and information systems, and have an adverse impact on the availability, authenticity, integrity or confidentiality of data, or on the services provided by the f...

                                          • ICT services

                                            EnglishFrançaisdigital and data services provided through ICT systems to one or more internal or external users on an ongoing basis, including hardware as a service and hardware services which includes the provision of technical support via software or firmware updates by the hardware provider, exc...

                                          • ICT risk

                                            EnglishFrançaisany reasonably identifiable circumstance in relation to the use of network and information systems which, if materialised, may compromise the security of the network and information systems, of any technology dependent tool or process, of operations and processes, or of the provision...

                                          • ICT intra-group service provider

                                            EnglishFrançaisan undertaking that is part of a financial group and that provides predominantly ICT services to financial entities within the same group or to financial entities belonging to the same institutional protection scheme, including to their parent undertakings, subsidiaries, branches or ...

                                          • ICT asset

                                            EnglishFrançaisa software or hardware asset in the network and information systems used by the financial entityun actif logiciel ou matériel dans les réseaux et les systèmes d’information utilisés par l’entité financièreArt.

                                          • high-impact capabilities

                                            capabilities that match or exceed the capabilities recorded in the most advanced general-purpose AI models Art. 3(64) EU AI Act.

                                            • health professional access service

                                              EnglishFrançaisa service, supported by an EHR system, that enables health professionals to access data of natural persons under their treatment (Art.

                                            • health data user

                                              EnglishFrançaisa natural or legal person, including Union institutions, bodies, offices or agencies, which has been granted lawful access to electronic health data for secondary use pursuant to a data permit, a health data request approval or an access approval by an authorised participant in Healt...

                                            • health data holder

                                              |---|---| |English|Français| any natural or legal person, public authority, agency or other body in the healthcare or the care sectors, including reimbursement services where necessary, as well as any natural or legal person developing products or services intended for the health, healthcare or care...

                                            • harmonised standard

                                              EnglishFrançaisa European standard adopted on the basis of a request made by the Commission for the application of Union harmonisation legislationArt.

                                            • hardware

                                              a physical electronic information system, or parts thereof capable of processing, storing or transmitting digital data Art. 3(5) Cyber Resilience Act.

                                            • group of undertakings

                                              EnglishFrançaisa controlling undertaking and its controlled undertakingsune entreprise qui exerce le contrôle et les entreprises qu’elle contrôleArt.

                                            • genetic data

                                              EnglishFrançaispersonal data relating to the inherited or acquired genetic characteristics of a natural person which give unique information about the physiology or the health of that natural person and which result, in particular, from an analysis of a biological sample from the natural person in ...

                                            • general-purpose AI system

                                              an AI system which is based on a general-purpose AI model, and which has the capability to serve a variety of purposes, both for direct use as well as for integration in other AI systems Art.

                                              • general-purpose AI model

                                                EnglishFrançaisan AI model, including where such an AI model is trained with a large amount of data using self-supervision at scale, that displays significant generality and is capable of competently performing a wide range of distinct tasks regardless of the way the model is placed on the market a...

                                              • functional equivalence

                                                re-establishing on the basis of the customer’s exportable data and digital assets, a minimum level of functionality in the environment of a new data processing service of the same service type after the switching process, where the destination data processing service delivers a materially comparable...

                                              • free and open-source software

                                                EnglishFrançaissoftware the source code of which is openly shared and which is made available under a free and open-source licence which provides for all rights to make it freely accessible, usable, modifiable and redistributableun logiciel dont le code source est partagé de manière ouverte et qui ...

                                              • floating-point operation

                                                any mathematical operation or assignment involving floating-point numbers, which are a subset of the real numbers typically represented on computers by an integer of fixed precision scaled by an integer exponent of a fixed base Art.

                                                • filing system

                                                  EnglishFrançaisany structured set of personal data which are accessible according to specific criteria, whether centralised, decentralised or dispersed on a functional or geographical basistout ensemble structuré de données à caractère personnel accessibles selon des critères déterminés, que cet en...

                                                • exportable data

                                                  the input and output data, including metadata, directly or indirectly generated, or cogenerated, by the customer’s use of the data processing service, excluding any assets or data protected by intellectual property rights, or constituting a trade secret, of providers of data processing services or t...

                                                • exploitable vulnerability

                                                  EnglishFrançaisa vulnerability that has the potential to be effectively used by an adversary under practical operational conditions une vulnérabilité susceptible d’être utilisée efficacement par un adversaire en conditions de fonctionnement effective **Art.

                                                • European logging software component for EHR systems

                                                  EnglishFrançaisa software component of the EHR system which provides logging information related to access by health professionals or other individuals to priority categories of personal electronic health data established under this Regulation, in the format defined in point 3.2.

                                                • European interoperability software component for EHR systems

                                                  EnglishFrançaisa software component of the EHR system which provides and receives personal electronic health data under a priority category for primary use established under this Regulation in the European electronic health record exchange format provided for in this Regulation and which is indepen...

                                                • enterprise

                                                  EnglishFrançaisa natural or legal person engaged in an economic activity, irrespective of its legal form, including partnerships or associations regularly engaged in an economic activityune personne physique ou morale exerçant une activité économique, quelle que soit sa forme juridique, y compris l...

                                                • end-point

                                                  any device that is connected to a network and serves as an entry point to that network Art. 3(11) CRA.

                                                • emotion recognition system

                                                  EnglishFrançaisan AI System for the purpose of identifying or inferring emotions or intentions of natural persons on the basis of their biometric dataun système d’IA permettant la reconnaissance ou la déduction des émotions ou des intentions de personnes physiques sur la base de leurs données biomé...

                                                • electronic information system

                                                  a system, including electrical or electronic equipment, capable of processing, storing or transmitting digital data Art. 3(7) CRA.

                                                • electronic health record

                                                  a collection of electronic health data related to a natural person and collected in the health system, processed for the purpose of the provision of healthcare Art.

                                                • electronic health record system

                                                  any system whereby the software, or a combination of the hardware and the software of that system, allows personal electronic health data that belong to the priority categories of personal electronic health data established under this Regulation to be stored, intermediated, exported, imported, conve...

                                                • electronic health data

                                                  personal or non-personal electronic health data Art. 2(2)(c) EHDS.

                                                • electronic health data access service

                                                  an online service, such as a portal or an application or mobile devices, that enables natural persons not acting in a professional capacity to access their own electronic health data or the electronic health data of those natural persons whose electronic health data they are legally authorised to ac...

                                                • economic operator

                                                  the manufacturer, the authorised representative, the importer, the distributor, or other natural or legal person who is subject to obligations in relation to the manufacture of products with digital elements or to the making available of products with digital elements on the market in accordance wit...

                                                • downstream provider

                                                  a provider of an AI system, including a general-purpose AI system, which integrates an AI model, regardless of whether the AI model is provided by themselves and vertically integrated or provided by another entity based on contractual relations Art.

                                                • distributor

                                                  EnglishFrançaisa natural or legal person in the supply chain, other than the provider or the importer, that makes an AI system available on the Union market une personne physique ou morale faisant partie de la chaîne d’approvisionnement, autre que le fournisseur ou l’importateur, qui met un système...

                                                • digital operational resilience

                                                  EnglishFrançaisthe ability of a financial entity to build, assure and review its operational integrity and reliability by ensuring, either directly or indirectly through the use of services provided by ICT third-party service providers, the full range of ICT-related capabilities needed to address t...

                                                • digital assets

                                                  elements in digital form, including applications, for which the customer has the right of use, independently from the contractual relationship with the data processing service it intends to switch from Art.

                                                • deployer

                                                  EnglishFrançaisa natural or legal person, public authority, agency or other body using an AI system under its authority except where the AI system is used in the course of a personal non-professional activityune personne physique ou morale, une autorité publique, une agence ou un autre organisme ut...

                                                • deep fake

                                                  AI-generated or manipulated image, audio or video content that resembles existing persons, objects, places, entities or events and would falsely appear to a person to be authentic or truthful Art.

                                                • dataset

                                                  a structured collection of electronic health data Art. 2(2)(w) EHDS.

                                                • dataset of high impact for secondary use

                                                  a dataset the re-use of which is associated with significant benefits due to its relevance for health research Art. 2(2)(x) EHDS.

                                                • dataset catalogue

                                                  a collection of dataset descriptions, arranged in a systematic manner and including a user-oriented public part, in which information concerning individual dataset parameters is accessible by electronic means through an online portal Art.

                                                • data

                                                  any digital representation of acts, facts or information and any compilation of such acts, facts or information, including in the form of sound, visual or audio-visual recording Art.

                                                • data subject

                                                  EnglishFrançaisan identified or identifiable natural personune personne physique identifiée ou identifiableArt. 4(1) GDPR.

                                                • data recipient

                                                  a natural or legal person, acting for purposes which are related to that person’s trade, business, craft or profession, other than the user of a connected product or related service, to whom the data holder makes data available, including a third party following a request by the user to the data hol...

                                                • data quality

                                                  the degree to which the elements of electronic health data are suitable for their intended primary use and secondary use Art. 2(2)(z) EHDS.

                                                • data quality and utility label

                                                  a graphic diagram, including a scale, describing the data quality and conditions of use of a dataset Art. 2(2)(aa) EHDS.

                                                • data protection impact assessment

                                                  EnglishFrançaisan assessment of the impact of the envisaged processing operations on the protection of personal dataune analyse de l’impact des opérations de traitement envisagées sur la protection des données à caractère personnel Art.

                                                • data processing service

                                                  a digital service that is provided to a customer and that enables ubiquitous and on-demand network access to a shared pool of configurable, scalable and elastic computing resources of a centralised, distributed or highly distributed nature that can be rapidly provisioned and released with minimal ma...

                                                • data permit

                                                  an administrative decision issued to a health data user by a health data access body to process certain electronic health data specified in the data permit for specific secondary use purposes, based on conditions laid down in Chapter IV of this Regulation Art.

                                                • data intermediation service

                                                  data intermediation service as defined in Article 2, point (11), of Regulation (EU) 2022/868 Art.

                                                • data holder

                                                  a natural or legal person that has the right or obligation, in accordance with this Regulation, applicable Union law or national legislation adopted in accordance with Union law, to use and make available data, including, where contractually agreed, product data or related service data which it has ...

                                                • data egress charges

                                                  data transfer fees charged to customers for extracting their data through the network from the ICT infrastructure of a provider of data processing services to the system of a different provider or to on-premises ICT infrastructure Art.

                                                • data concerning health

                                                  EnglishFrançaispersonal data related to the physical or mental health of a natural person, including the provision of health care services, which reveal information about his or her health statusles données à caractère personnel relatives à la santé physique ou mentale d’une personne physique, y co...

                                                • cybersecurity

                                                  the activities necessary to protect network and information systems, the users of such systems, and other persons affected by cyber threats Article 2, point (1), of Regulation (EU) 2019/881 cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881 Art.

                                                • customer

                                                  a natural or legal person that has entered into a contractual relationship with a provider of data processing services with the objective of using one or more data processing services Art.

                                                • cross-border processing

                                                  EnglishFrançaiseither:(a) processing of personal data which takes place in the context of the activities of establishments in more than one Member State of a controller or processor in the Union where the controller or processor is established in more than one Member State;or(b) processing of perso...

                                                • critical infrastructure

                                                  an asset, a facility, equipment, a network or a system, or a part of an asset, a facility, equipment, a network or a system, which is necessary for the provision of an essential service Article 2, point (4), of Directive (EU) 2022/2557 critical infrastructure as defined in Article 2, point (4), of D...

                                                  • controller

                                                    EnglishFrançaisthe natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal datawhere the purposes and means of such processing are determined by Union or Member State law, the controller or ...

                                                  • consumer

                                                    EnglishFrançaisany natural person who is acting for purposes which are outside that person’s trade, business, craft or professiontoute personne physique qui agit à des fins qui n’entrent pas dans le cadre de son activité commerciale, industrielle, artisanale ou libéraleArt.

                                                  • consent

                                                    EnglishFrançaisany freely given, specific, informed and unambiguous indication of the data subject’s wishes by which he or she, by a statement or by a clear affirmative action, signifies agreement to the processing of personal data relating to him or hertoute manifestation de volonté, libre, spécif...

                                                  • connected product

                                                    an item that obtains, generates or collects data concerning its use or environment and that is able to communicate product data via an electronic communications service, physical connection or on-device access, and whose primary function is not the storing, processing or transmission of data on beha...

                                                  • conformity assessment

                                                    the process of demonstrating whether the requirements set out in Chapter III, Section 2 relating to a high-risk AI system have been fulfilled Art.

                                                  • conformity assessment body

                                                    a body that performs third-party conformity assessment activities, including testing, certification and inspection Art. 3(21) EU AI Act.

                                                  • component

                                                    software or hardware intended for integration into an electronic information system Art. 3(6) CRA.

                                                  • common specification

                                                    EnglishFrançaisa document, other than a standard, containing technical solutions providing a means to comply with certain requirements and obligations established under this Regulation---Art.

                                                  • CE marking

                                                    EnglishFrançaisa marking by which a provider indicates that an AI system is in conformity with the requirements set out in Chapter III, Section 2 and other applicable Union harmonisation legislation, providing for its affixingArt.

                                                  • care

                                                    a professional service the purpose of which is to address the specific needs of a natural person who, on account of impairment or other physical or mental conditions, requires assistance, including preventive and supportive measures, to carry out essential activities of daily living in order to supp...

                                                  • biometric verification

                                                    the automated, one-to-one verification, including authentication, of the identity of natural persons by comparing their biometric data to previously provided biometric data Art.

                                                  • biometric identification

                                                    the automated recognition of physical, physiological, behavioural, or psychological human features for the purpose of establishing the identity of a natural person by comparing biometric data of that individual to biometric data of individuals stored in a database Art.

                                                  • biometric data

                                                    EnglishFrançaispersonal data resulting from specific technical processing relating to the physical, physiological or behavioural characteristics of a natural person, which allow or confirm the unique identification of that natural person, such as facial images or dactyloscopic datales données à car...

                                                  • biometric categorisation system

                                                    EnglishFrançaisan AI System for the purpose of assigning natural persons to specific categories on the basis of their biometric data, unless it is ancillary to another commercial service and strictly necessary for objective technical reasonsun système d’IA destiné à affecter des personnes physiques...

                                                  • binding corporate rules

                                                    EnglishFrançaispersonal data protection policies which are adhered to by a controller or processor established on the territory of a Member State for transfers or a set of transfers of personal data to a controller or processor in one or more third countries within a group of undertakings, or group...

                                                  • authorised representative

                                                    EnglishFrançaisa natural or legal person located or established in the Union who has received and accepted a written mandate from a provider of an AI System or a general-purpose AI model to, respectively, perform and carry out on its behalf the obligations and procedures established by this Regulat...

                                                  • AI System

                                                    EnglishFrançaisa machine-based system that is designed to operate with varying levels of autonomy, and that may exhibit adaptiveness after deployment and that, for explicit or implicit objectives, infers, from the input it receives, how to generate outputs such as predictions, content, recommendati...

                                                  • AI regulatory sandbox

                                                    EnglishFrançaisa controlled framework set up by a competent authority which offers providers or prospective providers of AI systems the possibility to develop, train, validate and test, where appropriate in real-world conditions, an innovative AI System, pursuant to a sandbox plan for a limited tim...

                                                  • AI Office

                                                    EnglishFrançaisthe Commission’s function of contributing to the implementation, monitoring and supervision of AI systems and general-purpose AI models, and AI governance, provided for in Commission Decision of 24 January 2024; references in this Regulation to the AI Office shall be construed as ref...

                                                  • AI literacy

                                                    EnglishFrançaisskills, knowledge and understanding that allow providers, deployers and affected persons, taking into account their respective rights and obligations in the context of this Regulation, to make an informed deployment of AI systems, as well as to gain awareness about the opportunities ...

                                                  • account information service provider

                                                    EnglishFrançaisan account information service provider as referred to in Article 33(1) of Directive (EU) 2015/2366un prestataire de services d’information sur les comptes visé à l’article 33, paragraphe 1, de la directive (UE) 2015/2366Art.

                                                  • actively exploited vulnerability

                                                    EnglishFrançaisa vulnerability for which there is reliable evidence that a malicious actor has exploited it in a system without permission of the system ownerune vulnérabilité pour laquelle il existe des preuves fiables qu’elle a été exploitée par un acteur malveillant dans un système sans l’autori...