Law / Frameworks / ETSI EN 304 223 / 5.1
ETSI EN 304 223, 5.15.1.2-7
Due diligence on external providers, including whether they follow this standard. Our summary; European Telecommunications Standards Institute (ETSI)'s text is not ours to print.
We read each law below as bearing on this provision. That does not mean the provision, done well, meets the law: what each law asks is on its own page. Law library as of .
The kinds of duty that reach it: contract terms.
- 2
- laws
- 2
- jurisdictions
- 0
- with court rulings behind them
- 1
- not yet in force
Related controls in other frameworks the same duties, in at least two laws we track, reach both
- NIST AI RMFGOVERN 6.1 Policies and procedures are in place that address AI risks associated with..., 2 laws
- NIST AI 600-1GAI-RISK-12 Value Chain and Component Integration, 2 laws
- MIT mitigations3.3 Access Management, 2 laws
- FINOS AIGFAIR-PREV-007 Legal and Contractual Frameworks for AI Systems, 2 laws
A law in force is unmarked; the rest wear their state: not yet in force
AI risk obligations
1 law, 1 jurisdiction| Jurisdiction | Law | How it reaches this provision |
|---|---|---|
 European Union |
AI Act, Article 25 (responsibilities along the AI value chain) from , in 13 months |
Through its contract terms duty. What it requires |
AI sector rules
1 law, 1 jurisdiction| Jurisdiction | Law | How it reaches this provision |
|---|---|---|
 Mexico |
Reform to the Federal Labor Law and the Federal Copyright Law, AI Voice and Image Consent Regime for Performing Artists |
Through its contract terms duty. What it requires |
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI. Every provision of the framework.