{"answer_id":"praxikon:eu:ai-act:answer:artikel-44-ai-act","canonical_page":"https://www.praxikon.com/en/antwoord/artikel-44-ai-act","query":"What does Article 44 of the AI Act say about certificates of notified bodies?","lang":"en","view":"full","mode":"obligation","question":"What does Article 44 of the AI Act say about certificates of notified bodies?","situation":"Article 44 of the AI Act covers certificates of notified bodies. A certificate issued by a notified body is valid for at most five years for AI systems covered by Annex I and at most four years for AI systems covered by Annex III, and may be extended at the request of the provider after a re-assessment. Where the system no longer meets the requirements of Section 2, the body shall, taking account of the principle of proportionality, suspend or withdraw the certificate or impose restrictions on it, unless the provider takes corrective action within an appropriate deadline it sets so as to ensure compliance with those requirements. An appeal procedure against that decision is available. This provision concerns the provider of an AI system. This provision has applied since 2 August 2026.","likely_role":null,"note":null,"matched_terms":[],"dataset":{"id":"praxikon:sys:registry:dataset:ai-act-implementation-graph","version":"2.2.0","schema_version":"1.5.0","effective_at":"2026-08-08T00:00:00.000Z","known_at":"2026-09-06T00:00:00.000Z","last_reviewed_at":"2026-08-08T00:00:00.000Z","licence":"https://www.praxikon.com/nl/legal/terms","canonical_url":"https://www.praxikon.com/api/v1/entities"},"obligations":[{"slug":"article-44-notified-body-certificates","label":"Article 44: certificates of notified bodies","summary":"A certificate issued by a notified body is valid for at most five years for AI systems covered by Annex I and at most four years for AI systems covered by Annex III, and may be extended at the request of the provider after a re-assessment. Where the system no longer meets the requirements of Section 2, the body shall, taking account of the principle of proportionality, suspend or withdraw the certificate or impose restrictions on it, unless the provider takes corrective action within an appropriate deadline it sets so as to ensure compliance with those requirements. An appeal procedure against that decision is available.","legal_status":"applicable","deadline_at":"2026-08-02T00:00:00.000Z","high_risk_regime_from":null,"human_page":"https://www.praxikon.com/en/verplichtingen/article-44-notified-body-certificates","api":"https://www.praxikon.com/api/v1/obligations?lang=en","official_source":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","citations":[{"kind":"official_fact","statement":"Paragraph 1 provides that certificates issued by notified bodies in accordance with Annex VII shall be drawn up in a language which can be easily understood by the relevant authorities in the Member State in which the notified body is established. Paragraph 2 provides that certificates shall be valid for the period they indicate, which shall not exceed five years for AI systems covered by Annex I and four years for AI systems covered by Annex III, that at the request of the provider the validity may be extended for further periods, each not exceeding five years and four years respectively, based on a re-assessment in accordance with the applicable conformity assessment procedures, and that any supplement to a certificate shall remain valid provided that the certificate which it supplements is valid. Paragraph 3 provides that where a notified body finds that an AI system no longer meets the requirements set out in Section 2, it shall, taking account of the principle of proportionality, suspend or withdraw the certificate issued or impose restrictions on it, unless compliance with those requirements is ensured by appropriate corrective action taken by the provider of the system within an appropriate deadline set by the notified body, that the notified body shall give reasons for its decision, and that an appeal procedure against decisions of the notified bodies, including on conformity certificates issued, shall be available.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 44(1)-(3)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"official_fact","statement":"Article 43 sets out along which route a certificate arises and when it must be earned again. Paragraph 1 lets the provider of the systems listed in point 1 of Annex III choose between the internal control of Annex VI and the procedure involving a notified body of Annex VII where he has applied harmonised standards or common specifications, and makes the Annex VII procedure mandatory in four cases: the harmonised standards referred to in Article 40 do not exist and the common specifications referred to in Article 41 are not available; the provider has not applied, or has applied only part of, the harmonised standard; the common specifications referred to in point (a) exist but the provider has not applied them; or one or more of the harmonised standards referred to in point (a) has been published with a restriction, and then only on the part of the standard that was restricted. Paragraph 2 provides that for the systems of points 2 to 8 of Annex III providers follow the internal control of Annex VI, for which the involvement of a notified body is not required. Paragraph 4 provides that high-risk AI systems that have already been subject to a conformity assessment procedure shall undergo a new procedure whenever they are substantially modified, regardless of whether the modified system is intended to be further distributed or continues to be used by the current deployer, and that for systems that continue to learn, changes predetermined by the provider at the moment of the initial conformity assessment and part of the technical documentation referred to in point 2(f) of Annex IV do not constitute a substantial modification.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 43(1), (2) and (4)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"official_fact","statement":"Paragraph 3 of Article 43 was replaced with effect from 27 July 2026. Under the text in force, the provider of a high-risk AI system covered by the Union harmonisation legislation listed in Section A of Annex I follows the relevant conformity assessment procedure as required in accordance with that harmonisation legislation, the requirements set out in Section 2 of this Chapter apply to those systems and form part of that assessment, an assessment of the quality management system set out in Article 17 is also undertaken, and points 3, 4.3, 4.4 and 4.5, the fifth paragraph of point 4.6 and point 5 of Annex VII apply. The second subparagraph gives notified bodies notified under that harmonisation legislation the power to assess the conformity of those systems with the requirements of Section 2, provided that their compliance with the requirements laid down in Article 31(4), (5), (10) and (11) has been assessed in the context of the notification procedure under that harmonisation legislation, which is evidenced through the assessment as part of the existing notification, and requires those same bodies, without prejudice to Article 28, to apply for designation in accordance with Section 4 of this Chapter by 28 January 2028. The third subparagraph provides that a manufacturer entitled under that harmonisation legislation to rely on a conformity assessment not involving a third party may use that option only if it has also applied harmonised standards or, where applicable, common specifications referred to in Article 41 covering all requirements of Section 2, that the classification of a product as a high-risk AI system in accordance with Article 6(1) does not affect the choice of conformity assessment procedure provided to those manufacturers, and that those manufacturers are not required to choose a procedure involving third-party conformity assessment only because the product includes a high-risk AI system as a safety component, if that harmonisation legislation does not require it. The fourth subparagraph provides that the provider of a system both covered by that harmonisation legislation and falling within one of the categories listed in Annex III follows the relevant conformity assessment procedure as required pursuant to the relevant Union harmonisation legislation listed in Section A of Annex I.","source_id":"praxikon:eu:ai-act:source:reg-eu-2026-1744","source_locator":"Article 1, point (19), replacing Article 43(3)","source_url":"https://eur-lex.europa.eu/eli/reg/2026/1744/oj","eli":"http://data.europa.eu/eli/reg/2026/1744/oj"},{"kind":"official_fact","statement":"Annex I was amended with effect from 27 July 2026: in Section A, point 1 was deleted, and in Section B, point 21 was added, referring to Regulation (EU) 2023/1230 on machinery. Article 2(2), likewise replaced, provides that for AI systems classified as high-risk in accordance with Article 6(1) related to products covered by the Union harmonisation legislation listed in Section B of Annex I, only Article 6(1), Article 60a and Articles 102 to 112 apply, and that Articles 57, 58 and 59 apply only in so far as the requirements for high-risk AI systems under this Regulation have been integrated in that harmonisation legislation.","source_id":"praxikon:eu:ai-act:source:reg-eu-2026-1744","source_locator":"Article 1, point (2)(a), replacing Article 2(2), and point (41), amending Annex I","source_url":"https://eur-lex.europa.eu/eli/reg/2026/1744/oj","eli":"http://data.europa.eu/eli/reg/2026/1744/oj"},{"kind":"official_fact","statement":"Article 36 governs what happens to certificates already issued where the notified body itself is concerned. Paragraph 3 provides that a body deciding to cease its conformity assessment activities shall inform the notifying authority and the providers concerned as soon as possible, and in the case of a planned cessation at least one year beforehand, and that its certificates may remain valid for nine months after the cessation on condition that another notified body has confirmed in writing that it will assume responsibility, that other body carrying out a full assessment before the end of those nine months before issuing new certificates. Paragraph 5 provides that a notified body whose designation is suspended, restricted or withdrawn in whole or in part shall inform the providers concerned within ten days. Paragraph 7 provides that in that case the notifying authority shall assess the impact on the certificates issued, shall require the body to suspend or withdraw within a reasonable period any certificates unduly issued, and shall provide the national competent authorities of the Member State in which the provider has its registered place of business with all relevant information on the certificates whose suspension or withdrawal it has ordered. Paragraph 8, point (b), provides that where the notifying authority establishes that the body is not capable of supporting existing certificates issued, the provider of the system covered by the certificate shall confirm in writing to the national competent authorities of the Member State of its registered place of business, within three months of the suspension or restriction, that another qualified notified body will temporarily assume the monitoring of and responsibility for the certificates. Paragraph 9 provides that upon withdrawal of a designation certificates, with the exception of those unduly issued, remain valid for nine months where the national competent authority has confirmed that there is no risk and another notified body has confirmed in writing that it assumes immediate responsibility and will complete its assessment within twelve months of the withdrawal.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 36(3), (5), (7), (8) and (9)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"official_fact","statement":"Article 45(2), point (b), provides that each notified body shall inform the other notified bodies of Union technical documentation assessment certificates or any supplements thereto which it has refused, withdrawn, suspended or otherwise restricted, and, upon request, of the certificates and supplements which it has issued.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 45(2), point (b)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"official_fact","statement":"Point (c) of the third paragraph of Article 113 was replaced with effect from 27 July 2026 and now provides that Chapter III, Sections 1, 2 and 3, with the exception of Article 6(5), applies from 2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2) and Annex III, and from 2 August 2028 as regards AI systems classified as high-risk pursuant to Article 6(1) and Annex I. That deferral concerns those three Sections alone. Article 44 sits in Section 5 of Chapter III and therefore falls under the general application date given in the second paragraph of Article 113: 2 August 2026.","source_id":"praxikon:eu:ai-act:source:reg-eu-2026-1744","source_locator":"Article 1, point (40)(b), replacing Article 113, third paragraph, point (c)","source_url":"https://eur-lex.europa.eu/eli/reg/2026/1744/oj","eli":"http://data.europa.eu/eli/reg/2026/1744/oj"},{"kind":"official_fact","statement":"Point (c) of the third paragraph of Article 113 was replaced with effect from 27 July 2026 and now provides that Chapter III, Sections 1, 2 and 3, with the exception of Article 6(5), applies from 2 December 2027 as regards AI systems classified as high-risk pursuant to Article 6(2) and Annex III, and from 2 August 2028 as regards AI systems classified as high-risk pursuant to Article 6(1) and Annex I. That deferral concerns those three Sections alone. Article 44 sits in Section 5 of Chapter III and therefore falls under the general application date given in the second paragraph of Article 113: 2 August 2026.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Chapter III, Section 5, and Article 113, second paragraph","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"editorial_interpretation","statement":"Start with the question whether this Article touches you at all, because for most high-risk systems the answer is no. Of Annex III only the biometrics of point 1 pass through a notified body, and there only where you choose that route yourself or where one of the four cases in the second subparagraph of Article 43(1) arises; points 2 to 8 follow the internal control of Annex VI and produce no certificate whatsoever. Whoever does hold a certificate usually holds it through the regulated products of Annex I, Section A, and that certificate comes out of the sectoral conformity assessment of Article 43(3) rather than out of Annex VII. Check first which Section carries your product, because that shifted on 27 July 2026: machinery was taken out of Section A and placed in Section B as Regulation (EU) 2023/1230, and for Section B products the amended Article 2(2) makes only Article 6(1), Article 60a and Articles 102 to 112 applicable. Article 44 is not among them, so for AI in machinery this Article no longer bears, while it applies in full to the remaining products of Section A. On that Section A route the assessment is moreover wider than it was: since 27 July 2026 the quality management system of Article 17 is assessed as well, and point 3, points 4.3, 4.4 and 4.5, the fifth paragraph of point 4.6 and point 5 of Annex VII apply. That difference is practical: the language requirement of paragraph 1 is tied to the Annex VII certificate and does not carry over unchanged to that sectoral route, whereas the five years of paragraph 2 simply apply. The mistake the Article exposes is the idea that conformity assessment is a project that ends. The certificate has an end date, at most four years for an Annex III system and at most five for an Annex I product, and the re-assessment that carries the extension itself takes time. Whoever knocks on the door only in the final month stands on the expiry date without valid paper while the system simply runs in production. The clock is moreover not the most frequent reason to go back. Article 43(4) sends a system through the assessment again whenever it is substantially modified, including where you only keep using it internally; only changes you predetermined and recorded in the technical documentation do not count. In practice that trigger arrives years before the expiry date. Where things do go wrong, the response of the body is not binary: the principle of proportionality in paragraph 3 allows it to confine itself to restrictions instead of withdrawal, correcting within the deadline it sets holds off the measure, and an appeal procedure against its decision is available. Count on none of the three as a matter of course, but know that they exist. Nor should you count on starting afresh elsewhere after a refusal: Article 45(2), point (b), obliges the body to inform its peer bodies of certificates refused, withdrawn, suspended or restricted. Also put 28 January 2028 in your diary, even though that date is not addressed to you. The second subparagraph of the new Article 43(3) lets bodies notified only under the sectoral legislation of Annex I, Section A, assess conformity with Section 2, but only where their compliance with Article 31(4), (5), (10) and (11) has already been assessed in their existing notification, and requires those same bodies to apply for designation under Section 4 by that date. The recital accompanying the amendment describes that power as an arrangement for eighteen months from 27 July 2026. So ask your body what its status is and whether it is applying, because who can carry out your assessment after that date depends on it. Finally, watch the side that has nothing to do with your system. A notified body can cease its activities or lose its designation. Article 36 then gives you nine months, but only where another body assumes responsibility in writing, and the body must inform you within ten days. In a suspension where the authority establishes that your body can no longer support the existing certificates, there is even a genuine duty on you: to confirm in writing to your national competent authority, within three months, which other qualified body will temporarily take over the monitoring. That is the only hard deadline in this whole block that lands on your desk.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 44(1)-(3)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"editorial_interpretation","statement":"Start with the question whether this Article touches you at all, because for most high-risk systems the answer is no. Of Annex III only the biometrics of point 1 pass through a notified body, and there only where you choose that route yourself or where one of the four cases in the second subparagraph of Article 43(1) arises; points 2 to 8 follow the internal control of Annex VI and produce no certificate whatsoever. Whoever does hold a certificate usually holds it through the regulated products of Annex I, Section A, and that certificate comes out of the sectoral conformity assessment of Article 43(3) rather than out of Annex VII. Check first which Section carries your product, because that shifted on 27 July 2026: machinery was taken out of Section A and placed in Section B as Regulation (EU) 2023/1230, and for Section B products the amended Article 2(2) makes only Article 6(1), Article 60a and Articles 102 to 112 applicable. Article 44 is not among them, so for AI in machinery this Article no longer bears, while it applies in full to the remaining products of Section A. On that Section A route the assessment is moreover wider than it was: since 27 July 2026 the quality management system of Article 17 is assessed as well, and point 3, points 4.3, 4.4 and 4.5, the fifth paragraph of point 4.6 and point 5 of Annex VII apply. That difference is practical: the language requirement of paragraph 1 is tied to the Annex VII certificate and does not carry over unchanged to that sectoral route, whereas the five years of paragraph 2 simply apply. The mistake the Article exposes is the idea that conformity assessment is a project that ends. The certificate has an end date, at most four years for an Annex III system and at most five for an Annex I product, and the re-assessment that carries the extension itself takes time. Whoever knocks on the door only in the final month stands on the expiry date without valid paper while the system simply runs in production. The clock is moreover not the most frequent reason to go back. Article 43(4) sends a system through the assessment again whenever it is substantially modified, including where you only keep using it internally; only changes you predetermined and recorded in the technical documentation do not count. In practice that trigger arrives years before the expiry date. Where things do go wrong, the response of the body is not binary: the principle of proportionality in paragraph 3 allows it to confine itself to restrictions instead of withdrawal, correcting within the deadline it sets holds off the measure, and an appeal procedure against its decision is available. Count on none of the three as a matter of course, but know that they exist. Nor should you count on starting afresh elsewhere after a refusal: Article 45(2), point (b), obliges the body to inform its peer bodies of certificates refused, withdrawn, suspended or restricted. Also put 28 January 2028 in your diary, even though that date is not addressed to you. The second subparagraph of the new Article 43(3) lets bodies notified only under the sectoral legislation of Annex I, Section A, assess conformity with Section 2, but only where their compliance with Article 31(4), (5), (10) and (11) has already been assessed in their existing notification, and requires those same bodies to apply for designation under Section 4 by that date. The recital accompanying the amendment describes that power as an arrangement for eighteen months from 27 July 2026. So ask your body what its status is and whether it is applying, because who can carry out your assessment after that date depends on it. Finally, watch the side that has nothing to do with your system. A notified body can cease its activities or lose its designation. Article 36 then gives you nine months, but only where another body assumes responsibility in writing, and the body must inform you within ten days. In a suspension where the authority establishes that your body can no longer support the existing certificates, there is even a genuine duty on you: to confirm in writing to your national competent authority, within three months, which other qualified body will temporarily take over the monitoring. That is the only hard deadline in this whole block that lands on your desk.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 43(1), (2) and (4)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"editorial_interpretation","statement":"Start with the question whether this Article touches you at all, because for most high-risk systems the answer is no. Of Annex III only the biometrics of point 1 pass through a notified body, and there only where you choose that route yourself or where one of the four cases in the second subparagraph of Article 43(1) arises; points 2 to 8 follow the internal control of Annex VI and produce no certificate whatsoever. Whoever does hold a certificate usually holds it through the regulated products of Annex I, Section A, and that certificate comes out of the sectoral conformity assessment of Article 43(3) rather than out of Annex VII. Check first which Section carries your product, because that shifted on 27 July 2026: machinery was taken out of Section A and placed in Section B as Regulation (EU) 2023/1230, and for Section B products the amended Article 2(2) makes only Article 6(1), Article 60a and Articles 102 to 112 applicable. Article 44 is not among them, so for AI in machinery this Article no longer bears, while it applies in full to the remaining products of Section A. On that Section A route the assessment is moreover wider than it was: since 27 July 2026 the quality management system of Article 17 is assessed as well, and point 3, points 4.3, 4.4 and 4.5, the fifth paragraph of point 4.6 and point 5 of Annex VII apply. That difference is practical: the language requirement of paragraph 1 is tied to the Annex VII certificate and does not carry over unchanged to that sectoral route, whereas the five years of paragraph 2 simply apply. The mistake the Article exposes is the idea that conformity assessment is a project that ends. The certificate has an end date, at most four years for an Annex III system and at most five for an Annex I product, and the re-assessment that carries the extension itself takes time. Whoever knocks on the door only in the final month stands on the expiry date without valid paper while the system simply runs in production. The clock is moreover not the most frequent reason to go back. Article 43(4) sends a system through the assessment again whenever it is substantially modified, including where you only keep using it internally; only changes you predetermined and recorded in the technical documentation do not count. In practice that trigger arrives years before the expiry date. Where things do go wrong, the response of the body is not binary: the principle of proportionality in paragraph 3 allows it to confine itself to restrictions instead of withdrawal, correcting within the deadline it sets holds off the measure, and an appeal procedure against its decision is available. Count on none of the three as a matter of course, but know that they exist. Nor should you count on starting afresh elsewhere after a refusal: Article 45(2), point (b), obliges the body to inform its peer bodies of certificates refused, withdrawn, suspended or restricted. Also put 28 January 2028 in your diary, even though that date is not addressed to you. The second subparagraph of the new Article 43(3) lets bodies notified only under the sectoral legislation of Annex I, Section A, assess conformity with Section 2, but only where their compliance with Article 31(4), (5), (10) and (11) has already been assessed in their existing notification, and requires those same bodies to apply for designation under Section 4 by that date. The recital accompanying the amendment describes that power as an arrangement for eighteen months from 27 July 2026. So ask your body what its status is and whether it is applying, because who can carry out your assessment after that date depends on it. Finally, watch the side that has nothing to do with your system. A notified body can cease its activities or lose its designation. Article 36 then gives you nine months, but only where another body assumes responsibility in writing, and the body must inform you within ten days. In a suspension where the authority establishes that your body can no longer support the existing certificates, there is even a genuine duty on you: to confirm in writing to your national competent authority, within three months, which other qualified body will temporarily take over the monitoring. That is the only hard deadline in this whole block that lands on your desk.","source_id":"praxikon:eu:ai-act:source:reg-eu-2026-1744","source_locator":"Article 1, point (19), replacing Article 43(3)","source_url":"https://eur-lex.europa.eu/eli/reg/2026/1744/oj","eli":"http://data.europa.eu/eli/reg/2026/1744/oj"},{"kind":"editorial_interpretation","statement":"Start with the question whether this Article touches you at all, because for most high-risk systems the answer is no. Of Annex III only the biometrics of point 1 pass through a notified body, and there only where you choose that route yourself or where one of the four cases in the second subparagraph of Article 43(1) arises; points 2 to 8 follow the internal control of Annex VI and produce no certificate whatsoever. Whoever does hold a certificate usually holds it through the regulated products of Annex I, Section A, and that certificate comes out of the sectoral conformity assessment of Article 43(3) rather than out of Annex VII. Check first which Section carries your product, because that shifted on 27 July 2026: machinery was taken out of Section A and placed in Section B as Regulation (EU) 2023/1230, and for Section B products the amended Article 2(2) makes only Article 6(1), Article 60a and Articles 102 to 112 applicable. Article 44 is not among them, so for AI in machinery this Article no longer bears, while it applies in full to the remaining products of Section A. On that Section A route the assessment is moreover wider than it was: since 27 July 2026 the quality management system of Article 17 is assessed as well, and point 3, points 4.3, 4.4 and 4.5, the fifth paragraph of point 4.6 and point 5 of Annex VII apply. That difference is practical: the language requirement of paragraph 1 is tied to the Annex VII certificate and does not carry over unchanged to that sectoral route, whereas the five years of paragraph 2 simply apply. The mistake the Article exposes is the idea that conformity assessment is a project that ends. The certificate has an end date, at most four years for an Annex III system and at most five for an Annex I product, and the re-assessment that carries the extension itself takes time. Whoever knocks on the door only in the final month stands on the expiry date without valid paper while the system simply runs in production. The clock is moreover not the most frequent reason to go back. Article 43(4) sends a system through the assessment again whenever it is substantially modified, including where you only keep using it internally; only changes you predetermined and recorded in the technical documentation do not count. In practice that trigger arrives years before the expiry date. Where things do go wrong, the response of the body is not binary: the principle of proportionality in paragraph 3 allows it to confine itself to restrictions instead of withdrawal, correcting within the deadline it sets holds off the measure, and an appeal procedure against its decision is available. Count on none of the three as a matter of course, but know that they exist. Nor should you count on starting afresh elsewhere after a refusal: Article 45(2), point (b), obliges the body to inform its peer bodies of certificates refused, withdrawn, suspended or restricted. Also put 28 January 2028 in your diary, even though that date is not addressed to you. The second subparagraph of the new Article 43(3) lets bodies notified only under the sectoral legislation of Annex I, Section A, assess conformity with Section 2, but only where their compliance with Article 31(4), (5), (10) and (11) has already been assessed in their existing notification, and requires those same bodies to apply for designation under Section 4 by that date. The recital accompanying the amendment describes that power as an arrangement for eighteen months from 27 July 2026. So ask your body what its status is and whether it is applying, because who can carry out your assessment after that date depends on it. Finally, watch the side that has nothing to do with your system. A notified body can cease its activities or lose its designation. Article 36 then gives you nine months, but only where another body assumes responsibility in writing, and the body must inform you within ten days. In a suspension where the authority establishes that your body can no longer support the existing certificates, there is even a genuine duty on you: to confirm in writing to your national competent authority, within three months, which other qualified body will temporarily take over the monitoring. That is the only hard deadline in this whole block that lands on your desk.","source_id":"praxikon:eu:ai-act:source:reg-eu-2026-1744","source_locator":"Article 1, point (2)(a), replacing Article 2(2), and point (41), amending Annex I","source_url":"https://eur-lex.europa.eu/eli/reg/2026/1744/oj","eli":"http://data.europa.eu/eli/reg/2026/1744/oj"},{"kind":"editorial_interpretation","statement":"Start with the question whether this Article touches you at all, because for most high-risk systems the answer is no. Of Annex III only the biometrics of point 1 pass through a notified body, and there only where you choose that route yourself or where one of the four cases in the second subparagraph of Article 43(1) arises; points 2 to 8 follow the internal control of Annex VI and produce no certificate whatsoever. Whoever does hold a certificate usually holds it through the regulated products of Annex I, Section A, and that certificate comes out of the sectoral conformity assessment of Article 43(3) rather than out of Annex VII. Check first which Section carries your product, because that shifted on 27 July 2026: machinery was taken out of Section A and placed in Section B as Regulation (EU) 2023/1230, and for Section B products the amended Article 2(2) makes only Article 6(1), Article 60a and Articles 102 to 112 applicable. Article 44 is not among them, so for AI in machinery this Article no longer bears, while it applies in full to the remaining products of Section A. On that Section A route the assessment is moreover wider than it was: since 27 July 2026 the quality management system of Article 17 is assessed as well, and point 3, points 4.3, 4.4 and 4.5, the fifth paragraph of point 4.6 and point 5 of Annex VII apply. That difference is practical: the language requirement of paragraph 1 is tied to the Annex VII certificate and does not carry over unchanged to that sectoral route, whereas the five years of paragraph 2 simply apply. The mistake the Article exposes is the idea that conformity assessment is a project that ends. The certificate has an end date, at most four years for an Annex III system and at most five for an Annex I product, and the re-assessment that carries the extension itself takes time. Whoever knocks on the door only in the final month stands on the expiry date without valid paper while the system simply runs in production. The clock is moreover not the most frequent reason to go back. Article 43(4) sends a system through the assessment again whenever it is substantially modified, including where you only keep using it internally; only changes you predetermined and recorded in the technical documentation do not count. In practice that trigger arrives years before the expiry date. Where things do go wrong, the response of the body is not binary: the principle of proportionality in paragraph 3 allows it to confine itself to restrictions instead of withdrawal, correcting within the deadline it sets holds off the measure, and an appeal procedure against its decision is available. Count on none of the three as a matter of course, but know that they exist. Nor should you count on starting afresh elsewhere after a refusal: Article 45(2), point (b), obliges the body to inform its peer bodies of certificates refused, withdrawn, suspended or restricted. Also put 28 January 2028 in your diary, even though that date is not addressed to you. The second subparagraph of the new Article 43(3) lets bodies notified only under the sectoral legislation of Annex I, Section A, assess conformity with Section 2, but only where their compliance with Article 31(4), (5), (10) and (11) has already been assessed in their existing notification, and requires those same bodies to apply for designation under Section 4 by that date. The recital accompanying the amendment describes that power as an arrangement for eighteen months from 27 July 2026. So ask your body what its status is and whether it is applying, because who can carry out your assessment after that date depends on it. Finally, watch the side that has nothing to do with your system. A notified body can cease its activities or lose its designation. Article 36 then gives you nine months, but only where another body assumes responsibility in writing, and the body must inform you within ten days. In a suspension where the authority establishes that your body can no longer support the existing certificates, there is even a genuine duty on you: to confirm in writing to your national competent authority, within three months, which other qualified body will temporarily take over the monitoring. That is the only hard deadline in this whole block that lands on your desk.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 36(3), (5), (7), (8) and (9)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"editorial_interpretation","statement":"Start with the question whether this Article touches you at all, because for most high-risk systems the answer is no. Of Annex III only the biometrics of point 1 pass through a notified body, and there only where you choose that route yourself or where one of the four cases in the second subparagraph of Article 43(1) arises; points 2 to 8 follow the internal control of Annex VI and produce no certificate whatsoever. Whoever does hold a certificate usually holds it through the regulated products of Annex I, Section A, and that certificate comes out of the sectoral conformity assessment of Article 43(3) rather than out of Annex VII. Check first which Section carries your product, because that shifted on 27 July 2026: machinery was taken out of Section A and placed in Section B as Regulation (EU) 2023/1230, and for Section B products the amended Article 2(2) makes only Article 6(1), Article 60a and Articles 102 to 112 applicable. Article 44 is not among them, so for AI in machinery this Article no longer bears, while it applies in full to the remaining products of Section A. On that Section A route the assessment is moreover wider than it was: since 27 July 2026 the quality management system of Article 17 is assessed as well, and point 3, points 4.3, 4.4 and 4.5, the fifth paragraph of point 4.6 and point 5 of Annex VII apply. That difference is practical: the language requirement of paragraph 1 is tied to the Annex VII certificate and does not carry over unchanged to that sectoral route, whereas the five years of paragraph 2 simply apply. The mistake the Article exposes is the idea that conformity assessment is a project that ends. The certificate has an end date, at most four years for an Annex III system and at most five for an Annex I product, and the re-assessment that carries the extension itself takes time. Whoever knocks on the door only in the final month stands on the expiry date without valid paper while the system simply runs in production. The clock is moreover not the most frequent reason to go back. Article 43(4) sends a system through the assessment again whenever it is substantially modified, including where you only keep using it internally; only changes you predetermined and recorded in the technical documentation do not count. In practice that trigger arrives years before the expiry date. Where things do go wrong, the response of the body is not binary: the principle of proportionality in paragraph 3 allows it to confine itself to restrictions instead of withdrawal, correcting within the deadline it sets holds off the measure, and an appeal procedure against its decision is available. Count on none of the three as a matter of course, but know that they exist. Nor should you count on starting afresh elsewhere after a refusal: Article 45(2), point (b), obliges the body to inform its peer bodies of certificates refused, withdrawn, suspended or restricted. Also put 28 January 2028 in your diary, even though that date is not addressed to you. The second subparagraph of the new Article 43(3) lets bodies notified only under the sectoral legislation of Annex I, Section A, assess conformity with Section 2, but only where their compliance with Article 31(4), (5), (10) and (11) has already been assessed in their existing notification, and requires those same bodies to apply for designation under Section 4 by that date. The recital accompanying the amendment describes that power as an arrangement for eighteen months from 27 July 2026. So ask your body what its status is and whether it is applying, because who can carry out your assessment after that date depends on it. Finally, watch the side that has nothing to do with your system. A notified body can cease its activities or lose its designation. Article 36 then gives you nine months, but only where another body assumes responsibility in writing, and the body must inform you within ten days. In a suspension where the authority establishes that your body can no longer support the existing certificates, there is even a genuine duty on you: to confirm in writing to your national competent authority, within three months, which other qualified body will temporarily take over the monitoring. That is the only hard deadline in this whole block that lands on your desk.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 45(2), point (b)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"recommended_action","statement":"First establish per high-risk system whether there is a certificate at all, and along which route it was issued: Annex VII or the sectoral procedure of Article 43(3). Check while doing so whether your product still sits in Section A of Annex I since 27 July 2026, because for the Section B products, machinery among them, the amended Article 2(2) does not make this Article apply. Then record which certificate belongs to it, which notified body issued it, on what date it expires and which supplements are attached to it, and put that expiry date in the same watch list as your contracts. Plan the extension request well before the expiry date, because the extension rests on a re-assessment in accordance with the applicable conformity assessment procedures. Also tie your change management to Article 43(4): determine per change whether it is substantial, and record the predetermined changes of a learning system in the technical documentation of point 2(f) of Annex IV, because only those do not count as a substantial modification. Designate who receives a message from the notified body, so that a deadline set for corrective action does not expire in a general inbox, and keep the appeal procedure of paragraph 3 open as a route alongside correcting itself. Finally, bring the body itself into the same watch list: track whether it ceases its activities or loses its designation, ask whether it is filing the application for designation under Section 4 that the second subparagraph of Article 43(3) requires of it by 28 January 2028, and make sure you can file the confirmation of Article 36(8), point (b), in writing with your national competent authority within three months.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 44(1)-(3)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"recommended_action","statement":"First establish per high-risk system whether there is a certificate at all, and along which route it was issued: Annex VII or the sectoral procedure of Article 43(3). Check while doing so whether your product still sits in Section A of Annex I since 27 July 2026, because for the Section B products, machinery among them, the amended Article 2(2) does not make this Article apply. Then record which certificate belongs to it, which notified body issued it, on what date it expires and which supplements are attached to it, and put that expiry date in the same watch list as your contracts. Plan the extension request well before the expiry date, because the extension rests on a re-assessment in accordance with the applicable conformity assessment procedures. Also tie your change management to Article 43(4): determine per change whether it is substantial, and record the predetermined changes of a learning system in the technical documentation of point 2(f) of Annex IV, because only those do not count as a substantial modification. Designate who receives a message from the notified body, so that a deadline set for corrective action does not expire in a general inbox, and keep the appeal procedure of paragraph 3 open as a route alongside correcting itself. Finally, bring the body itself into the same watch list: track whether it ceases its activities or loses its designation, ask whether it is filing the application for designation under Section 4 that the second subparagraph of Article 43(3) requires of it by 28 January 2028, and make sure you can file the confirmation of Article 36(8), point (b), in writing with your national competent authority within three months.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 43(1), (2) and (4)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"},{"kind":"recommended_action","statement":"First establish per high-risk system whether there is a certificate at all, and along which route it was issued: Annex VII or the sectoral procedure of Article 43(3). Check while doing so whether your product still sits in Section A of Annex I since 27 July 2026, because for the Section B products, machinery among them, the amended Article 2(2) does not make this Article apply. Then record which certificate belongs to it, which notified body issued it, on what date it expires and which supplements are attached to it, and put that expiry date in the same watch list as your contracts. Plan the extension request well before the expiry date, because the extension rests on a re-assessment in accordance with the applicable conformity assessment procedures. Also tie your change management to Article 43(4): determine per change whether it is substantial, and record the predetermined changes of a learning system in the technical documentation of point 2(f) of Annex IV, because only those do not count as a substantial modification. Designate who receives a message from the notified body, so that a deadline set for corrective action does not expire in a general inbox, and keep the appeal procedure of paragraph 3 open as a route alongside correcting itself. Finally, bring the body itself into the same watch list: track whether it ceases its activities or loses its designation, ask whether it is filing the application for designation under Section 4 that the second subparagraph of Article 43(3) requires of it by 28 January 2028, and make sure you can file the confirmation of Article 36(8), point (b), in writing with your national competent authority within three months.","source_id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","source_locator":"Article 36(3), (5), (7), (8) and (9)","source_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj"}]}],"conditional":[],"sources":[{"id":"praxikon:eu:ai-act:source:reg-eu-2024-1689","title":"EU Artificial Intelligence Act 2024/1689","publisher":"European Parliament and Council","canonical_url":"https://eur-lex.europa.eu/eli/reg/2024/1689/oj","eli":"http://data.europa.eu/eli/reg/2024/1689/oj","source_version":"original-oj-2024-07-12","verified_at":"2026-08-08T00:00:00.000Z"},{"id":"praxikon:eu:ai-act:source:reg-eu-2026-1744","title":"Digital Omnibus on AI 2026/1744","publisher":"European Parliament and Council","canonical_url":"https://eur-lex.europa.eu/eli/reg/2026/1744/oj","eli":"http://data.europa.eu/eli/reg/2026/1744/oj","source_version":"official-journal-2026-07-24","verified_at":"2026-08-08T00:00:00.000Z"}],"first_actions":[{"label":"Manage the life of the certificate","summary":"A practical working out for whoever holds a certificate: watch the expiry date, ask in time for the re-assessment that carries the extension, test every change against the substantial modification of Article 43(4), and make sure a deadline set by the body for corrective action reaches an identifiable person. Also track the body itself, because on cessation or withdrawal of its designation the deadlines of Article 36 apply."}],"evidence":[{"label":"Certificate file per system","summary":"Per high-risk system: the certificate itself and the route along which it was issued, the notified body that issued it, its validity period and expiry date, its supplements, the extension requests with the re-assessment underlying them, the assessment per change of whether it was substantial within the meaning of Article 43(4), every decision to suspend, withdraw or restrict together with the reasons the body gave for it, and the notices from the body on cessation or change of its designation with the confirmation that followed.","url":null}],"guidance":[],"examples":[],"standards":[],"definitions":[],"answer_page":"https://www.praxikon.com/en/antwoord/artikel-44-ai-act","follow_up_questions":[],"disclaimer":"General interpretation, not legal advice. The official source remains authoritative.","methodology":"https://www.praxikon.com/en/methodologie"}