The organisation should ensure that its high-risk AI systems are designed to automatically record events (logs) throughout their operational lifetime. These logs are crucial for traceability, monitoring, and identifying potential risks or the need for substantial modifications.
Logging should capture events that facilitate post-market monitoring and ensure the system operates as intended. For certain systems, such as those for biometric identification, logs must also record details like the period of use, the reference database used, the input data causing a match, and the identity of the person who verified the results.