On 5 March 2025, the European Commission published Model Contractual Clauses (MCC-AI-Light) for the public procurement of non-high-risk artificial intelligence (AI), aligning with the AI Act. The MCCs outline supplier obligations related to transparency, risk management, data governance, human oversight, and cybersecurity, recommending risk assessment, mitigation, and ongoing monitoring to promote trustworthy AI procurement. AI suppliers are encouraged to provide technical documentation, user instructions, logging capabilities, and record-keeping practices while ensuring human oversight so that public organisations can monitor, interpret, and, if necessary, override AI systems. Additionally, suppliers define rights to use data sets, including ownership, permitted use, and data retention or transfer conditions, with compliance supported through voluntary audits, reporting mechanisms, and transparency measures.
Original source