Governance

Operator/Deployer

Entity that operates, deploys, or uses an AI system.

How the laws define this

Regulators consistently view an operator or deployer as the person or entity that puts an artificial intelligence system into service, operation, or practical use, taking responsibility for safe deployment, incident reporting, and meeting regulatory oversight obligations. They diverge primarily on the specific compliance mechanisms required of this entity. Human oversight is explicitly mandated under Senado Expediente 1747/23, Proyecto 200/23, and the Bill on Establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission, but it is omitted from the Draft Code of Practice for Artificial Intelligence (NITDA) and Propunere legislativă privind Inteligența Artificială — B.154/2024. Conversely, Propunere legislativă privind Inteligența Artificială — B.154/2024 uniquely requires initial risk screenings and fundamental rights impact assessments while explicitly distinguishing deployers from developers, whereas Proyecto 200/23 focuses on registering high-risk uses, and the Draft Code of Practice for Artificial Intelligence (NITDA) focuses on making systems available and applying risk mitigations to end users within Nigeria.

Synthesised from the 5 statutory definitions below. Each one is quoted in full, with its source.

How jurisdictions differ

What is distinctive in each definition, binding law in force first. Showing 4 of the 5 instruments that define this term; all are listed under Definitions below.

JurisdictionInstrumentStatusWhat is distinctive
NigeriaDraft Code of Practice for Artificial Intelligence (NITDA)DraftAdds responsibility for applying risk mitigations and ensuring transparency to users within Nigeria.
ColombiaBill to define and regulate AIStalledAdds responsibilities for providing user notice, registering high-risk uses, and reporting incidents or breaches to the oversight authority.
ArgentinaSenate Project 1747/23 – Bill to Regulate the Development, Implementation, and Use of AI SystemsWithdrawnSpecifies responsibility for implementing operational controls and complying with deployment conditions imposed by the authority.
NigeriaBill on Establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation CommissionUnder ReviewAdds responsibilities for maintaining operational logs, complying with sectoral restrictions, and cooperating with inspections and post-market surveillance.

What it triggers

  • In the Draft Code of Practice for Artificial Intelligence (NITDA), would require applying risk mitigations, ensuring transparency to users, and complying with oversight and reporting obligations.source
  • Under the Bill on Establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission, would require implementing human oversight, maintaining operational logs, reporting incidents, complying with sectoral restrictions, and cooperating with inspections and post-market surveillance.source
  • In the Bill to define and regulate AI, would require providing user notice, ensuring human oversight, registering high-risk uses where required, and reporting incidents or breaches to the oversight authority.source
  • In Senate Project 1747/23 – Bill to Regulate the Development, Implementation, and Use of AI Systems, would have required implementing human oversight and operational controls, and complying with deployment conditions imposed by the authority.source

Definitions (5)

The entity that deploys, operates or uses an AI system in practice and is responsible for implementing human oversight, operational controls, and complying with deployment conditions imposed by the authority.

The entity that deploys or operates an AI system in service and is responsible for implementing human oversight, maintaining operational logs, reporting incidents, complying with sectoral restrictions, and cooperating with inspections and post-market surveillance.

An entity that deploys, operates, or makes an AI system available to end users within Nigeria and is responsible for operational deployment, applying risk mitigations, ensuring transparency to users, and complying with oversight and reporting obligations.

The entity that puts an AI system into operation or uses it in a given context, distinct from the developer; deployers/operators are required to perform initial risk screenings, conduct or cooperate on FRIAs, provide transparency notices to users, implement cybersecurity measures, and report incidents as required by the draft law.

The person or entity that places an AI system into service or uses it in operational contexts, responsible for safe deployment, providing user notice, ensuring human oversight, registering high-risk uses where required, and reporting incidents or breaches to the oversight authority.

Not to be confused with

Deployer / Operator

Deployer/Operator focuses on the act of placing AI systems into production or use, while Operator/Deployer emphasizes the entity responsible for operational duties like oversight and reporting.

Deployer/Operational User

Deployer/Operational User specifies organisations implementing AI into products or services, whereas Operator/Deployer covers broader operational responsibilities including compliance and incident reporting.

Questions and answers

What duties does an operator or deployer have under Nigerian AI draft rules?

Under the Draft Code of Practice for Artificial Intelligence (NITDA), an operator or deployer is responsible for operational deployment, applying risk mitigations, ensuring transparency to users, and complying with oversight and reporting obligations. The Bill on Establishment of the National Institute for Artificial Intelligence and Robotic Studies Regulation Commission adds duties like implementing human oversight, maintaining logs, and cooperating with inspections.

Does deploying AI in Colombia trigger registration or reporting?

In the Bill to define and regulate AI, deployers must register high-risk uses where required and report incidents or breaches to the oversight authority.

What compliance steps are required for AI operators in Argentina's withdrawn bill?

Senate Project 1747/23 would have required operators to implement human oversight, operational controls, and comply with deployment conditions imposed by the authority.