# Notices

## Licences in this directory

- `SPEC.md`, `GOVERNANCE.md` and `NOTICES.md`: Community Specification License 1.0, reproduced in `LICENSE-SPEC.md`. `NOTICES.md` is the register of notices filed under that licence.
- `schema/`, `conformance/` (vectors, generator and reference verifier) and `README.md`: Apache License 2.0, reproduced in `LICENSE-CODE.txt`. Each Python file carries `SPDX-License-Identifier: Apache-2.0`.

## Attribution for material quoted in the specification

The specification quotes short passages from the following public documents for the purpose of identifying the requirement each rule rests on. Each is the work of its author and is not relicensed by this directory.

- Regulation (EU) 2024/1689 (the AI Act), Regulation (EU) 2016/679 (the GDPR), Regulation (EU) No 910/2014 (eIDAS) as amended, Regulation (EU) 2026/1744, Directive (EU) 2023/2225, Directive (EU) 2024/2831, Regulation (EU) 2024/2847, Directive (EU) 2024/2853, Directive 2014/65/EU (MiFID II), Commission Delegated Regulation (EU) 2017/589, Commission Delegated Regulation (EU) 2024/1774 (the DORA RTS), and the other implementing and delegated acts cited: Publications Office of the European Union, reuse permitted under Commission Decision 2011/833/EU.
- Judgments of the Court of Justice of the European Union in cases C-203/22 and C-634/21: under the Court's copyright notice, case-law may be reproduced provided the source is acknowledged (source: Court of Justice of the European Union).
- Guides published by the Agencia Española de Supervisión de la Inteligencia Artificial (AESIA), version of 17 July 2026: Guía 06 (supervisión humana), Guía 12 (registros), Guía 13 (vigilancia poscomercialización) and Guía 15 (documentación técnica), at https://aesia.digital.gob.es/es/guias. Each is © 2026 Ministerio para la Transformación Digital y de la Función Pública, licensed under the Creative Commons Attribution 4.0 International licence (https://creativecommons.org/licenses/by/4.0/). The specification cites them by guide number and paraphrases them; any wording taken from them is the Ministry's, not relicensed by this directory.
- Guidelines of the European Data Protection Board and the Article 29 Working Party (WP251rev.01): European Union, reuse with acknowledgement.
- "Betekenisvolle Menselijke Tussenkomst", Autoriteit Persoonsgegevens (2025): reuse with acknowledgement.
- BSI AIC4 criteria catalogue: Bundesamt für Sicherheit in der Informationstechnik.
- European Commission, Model Contractual Clauses for AI procurement (high-risk), February 2025 version.
- Logius, Logboek Dataverwerkingen 1.0.
- Digitaliseringsstyrelsen (Denmark), eID gateway logging policy 1.1 and Digital Post log data rules 1.0.
- KI-MIG (BGBl. 2026 I Nr. 223), German federal law: an official work, not subject to copyright (section 5 UrhG). Cited by section.
- ISAE 3000 (Revised) and ISAE 3402 are published by the IAASB; NIST SP 800-53 and the NIST AI RMF by NIST; ETSI EN 319 421 and TS 119 511 by ETSI; RFC 2119, 3161, 3339, 3986, 4998, 5816, 6283, 8174, 8785, 9562 and 9943 by the IETF Trust. These are cited by clause, not reproduced.
- ISO/IEC and CEN standards are cited by title and clause only; no text from a paid standard is reproduced.

## Trade marks

ADCR is the working name of this rulebook. OpenADR is a mark of the OpenADR Alliance. Other names are the property of their holders and are mentioned only to identify a document or a project.