{"slug":"eu-ai-act-art-26-8-public-authority-registration-before-use","id":"AIPT-OBL-0035","permanent_url":"https://aipolicytracker.org/id/AIPT-OBL-0035","title":"Public authorities must register their use of high-risk AI and must not use unregistered systems","short_title":"Registration by public authorities","category":"public_sector_use","summary":"Deployers that are public authorities or Union institutions, bodies, offices or agencies must register their use of an Annex III high-risk AI system in the EU database before putting it into service. If they find that the system they intend to use has not been registered in the database by its provider, they must not use it and must inform the provider or distributor.\n","practical_action":"Check the EU database entry for the provider's system as a procurement acceptance criterion, then register the deployment before go-live.\n","is_binding":true,"applies_from":"2027-12-02","section":"Articles 16–27","source_reference":"Article 26(8); Article 49(3) and 49(4)","official_source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","review_status":"verified","confidence_level":"high","last_verified_at":"2026-09-26","reviewed_by":null,"actors":["deployer","public_authority"],"sectors":["public_services","law_enforcement","migration_border"],"use_cases":["biometrics","public_services","law_enforcement"],"applicability":[{"description":"Public authorities and EU bodies deploying Annex III high-risk AI systems, other than the law-enforcement and migration systems that are registered in the secure non-public section.","actors":["public_authority","deployer"],"conditions":null}],"evidence_examples":[{"title":"EU database deployer registration record","description":null,"artifact_type":"register"},{"title":"Procurement acceptance checklist with registration check","description":null,"artifact_type":"record"}],"framework_mappings":[{"framework":"iso_42001","framework_name":"ISO/IEC 42001:2023","reference":"Annex A.8.2, A.8.5","note":"System documentation and information for interested parties.","confidence_level":"medium","is_original":true},{"framework":"nist_ai_rmf","framework_name":"NIST AI RMF 1.0","reference":"GOVERN 1.6, MAP 1.1","note":"Inventory of deployed systems and context.","confidence_level":"medium","is_original":true}],"controls":[{"slug":"public-sector-ai-use-case-register","title":"Public-sector AI use-case register and algorithmic transparency","kind":"process","relationship":"satisfies","note":"Registration of public-authority use with the required Annex VIII information.","confidence_level":"high","url":"https://aipolicytracker.org/controls/public-sector-ai-use-case-register"},{"slug":"third-party-ai-due-diligence","title":"Vendor and third-party AI due diligence","kind":"process","relationship":"supports","note":"Verifies the provider's registration before purchase.","confidence_level":"medium","url":"https://aipolicytracker.org/controls/third-party-ai-due-diligence"}],"url":"https://aipolicytracker.org/obligations/eu-ai-act-art-26-8-public-authority-registration-before-use","policy":{"slug":"eu-ai-act","title":"Regulation (EU) 2024/1689 — Artificial Intelligence Act","status":"partially_applicable","jurisdiction":"eu","url":"https://aipolicytracker.org/policies/eu-ai-act"}}