Public authorities must register their use of high-risk AI and must not use unregistered systems

Practical action

Check the EU database entry for the provider's system as a procurement acceptance criterion, then register the deployment before go-live.

Who does it apply to?

Public authorities and EU bodies deploying Annex III high-risk AI systems, other than the law-enforcement and migration systems that are registered in the secure non-public section.

Actors

Deployer / user organisationPublic authority / government body

Sectors

Public services and governmentLaw enforcement and justiceMigration, asylum and border control

Use cases

Biometrics and facial recognitionAI in public servicesAI in law enforcement

Applies from: 2 December 2027

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

• satisfiesProcessAgency AI officer · annual
  Public-sector AI use-case register and algorithmic transparency

  Serves 6 recorded duties · evidence: Public AI use-case inventory, Algorithmic transparency statement for one use case, Inventory review and publication sign-off

  Registration of public-authority use with the required Annex VIII information.

• supportsProcessProcurement or vendor risk lead · once per ai system
  Vendor and third-party AI due diligence

  Serves 6 recorded duties · evidence: AI supplier due-diligence assessment, AI supplier and component register, Supplier onboarding decision

  Verifies the provider's registration before purchase.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

• EU AI Act Role and Risk Classifier

  Checklist · XLSX · v4

• EU AI Act Article 50 Transparency Kit

  Kit · DOCX and XLSX · v44

• ISO/IEC 42001 Gap Assessment and Statement of Applicability

  Assessment · XLSX · v3

• NIST AI RMF ↔ EU AI Act ↔ ISO/IEC 42001 Crosswalk

  Crosswalk · XLSX · v5

All 8 templates that cover it →

What evidence would a reviewer expect?

Framework mappings

Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.

See every European Union duty mapped this way →

Frequently asked questions

Cite this record

AIPolicyTracker (2026). “Public authorities must register their use of high-risk AI and must not use unregistered systems (EU AI Act)” [AIPT-OBL-0035, verified 26 September 2026]. https://aipolicytracker.org/id/AIPT-OBL-0035 (accessed 8 November 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0035: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence, Official Journal of the European Union, https://eur-lex.europa.eu/eli/reg/2024/1689/oj.

@misc{aipolicytracker2026_publicauthoritiesmustreg,
  author       = {{AIPolicyTracker}},
  title        = {{Public authorities must register their use of high-risk AI and must not use unregistered systems (EU AI Act)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/eu-ai-act-art-26-8-public-authority-registration-before-use}},
  url          = {https://aipolicytracker.org/obligations/eu-ai-act-art-26-8-public-authority-registration-before-use},
  urldate      = {2026-11-08},
  note         = {Data licensed CC BY 4.0. Accessed 8 November 2026}
}

Change history

Similar obligations in other instruments

• Federal agencies must review and revise actions inconsistent with the new AI policy — EO 14179, United States