European UnionAI Act, Article 26(8) (public-authority deployer registration)
Regulation (EU) 2024/1689, Article 26(8)
A citation is an address, not a summary. The first part names the law; what follows narrows it to the exact section, article or paragraph.
What follows is LexLint's own research summary of this law, not legal advice.
An AI governance rule binding government bodies.
As of 24 September 2026.
What it requires
- This duty does not yet apply. It takes effect on 2 December 2027 for a high-risk AI system classified under Article 6(2) and Annex III, and on 2 August 2028 for one classified under Article 6(1) and Annex I.
- If you are a public authority, or a Union institution, body, office or agency, deploying a high-risk AI system, comply with the Article 49 registration obligations.
- If you find that the high-risk AI system you plan to use has not been registered in the EU database, do not use it, and inform the provider or the distributor.
If you get it wrong
Private right of actionNo
Penalty structure
Article 99(4)(e): non-compliance with the obligations of deployers under Article 26 is fined up to EUR 15,000,000 or 3% of worldwide annual turnover, whichever is higher. Article 99(6) requires the lower of the two amounts for an SME, including a start-up; Article 99(6a), inserted by Regulation (EU) 2026/1744, gives the same lower-of treatment to a small mid-cap enterprise, since both apply to paragraph 4 fines. Article 99(8) leaves it to each Member State to decide the extent to which an administrative fine may be imposed on a public authority or body established in that Member State, so this ceiling does not apply uniformly to a public-authority deployer the way it does to a private one.
- Rule
- Lower of for SME
- As of
- 24 September 2026
- Currency
- EUR
- Fixed cap
- 15,000,000
- Turnover percentage cap
- 3
What it reaches
How the hook was established
express
What makes it apply
Operator establishment, Place of effect
Obligation class
Licensing
What it makes you log
Logging duty
Article 26(8) is a registration duty: a public-authority deployer must register in the EU database under Article 49, and must not use an unregistered system. It names no separate log or record duty; the EU database entry itself is the registration record, and the profile's registered vocabulary does not carry a distinct 'registration' recordkeeping key.
- Kind
- None
- As of
- 24 September 2026
Who checks it
Audit expectation
none
Also on the record
EEA status
- Status
- Pending
- Source link
- https://www.efta.int/eea-lex/32024r1689
What this law does
Drafted with AI from the cited sources under the direction of UnGovr staff. UnGovr holds editorial responsibility for this page.
A deployer of a high-risk AI system that is a public authority, or a Union institution, body, office or agency, must comply with the Article 49 registration obligations. Where such a deployer finds that the high-risk AI system it plans to use has not been registered in the EU database, it must not use the system, and must inform the provider or the distributor.
Article 26 sits in Chapter III, Section 3, so it takes effect on the schedule the Digital Omnibus on AI (Regulation (EU) 2026/1744, in force since 27 July 2026) wrote into Article 113: 2 December 2027 for a system classified as high-risk under Article 6(2) and Annex III, and 2 August 2028 for one classified under Article 6(1) and Annex I.
When LexLint raises it
high_risk_decisions
Read the law
official consolidated Official Journal text, EUR-Lex
Every line above is drawn from the primary source linked here, read on the date shown. This is a research summary, not legal advice.