EU AI Act Article 3(4): a natural or legal person, public authority, agency or other body using an AI system under its own authority, except where the system is used in a purely personal, non-professional capacity. Deployers of high-risk systems carry distinct obligations from providers, including human oversight and, where applicable, a fundamental rights impact assessment, and a single organisation can be both simultaneously if it builds and uses the same AI system.