Article 49: Registration

Register yourself and the system in the EU database before placing an Annex III high-risk system on the market or putting it into service, except for point 2. A system assessed as not high-risk under Article 6(3) remains subject to registration under Article 49(2). For that route, Regulation (EU) 2026/1744 deleted only two information fields from Annex VIII, not the registration itself.

The duty in Article 49(3) does not apply to every private deployer. It applies to public authorities, Union institutions, bodies, offices and agencies, and persons acting on their behalf. Before using an Annex III system, except point 2, they register themselves, select the system and register its use.

An SME may have to register as a provider, including when it applies the Article 6(3) filter. A private SME deployer does not have to register its use under Article 49(3) merely because it is a deployer. Check whether changes, own branding or a new intended purpose make the SME a provider.

Before first use, verify that the provider registration exists and register your use where Article 49(3) applies. Systems under Annex III point 2 are registered nationally. Registrations for certain biometric, law enforcement and migration systems go into a secure, non-public section of the EU database.

Providers or authorised representatives register themselves and an Annex III high-risk system in the EU database before placing it on the market or putting it into service. Annex III point 2 follows a national registration route.

Not every deployer. Article 49(3) applies to public authorities, Union institutions, bodies, offices and agencies, and persons acting on their behalf. A private deployer is not subject to paragraph 3 merely because it is a deployer.

Registration contains the applicable information from Annex VIII. For an Article 6(3) assessment, registration under paragraph 2 remains required; Regulation (EU) 2026/1744 deleted only points 7 and 9 from Annex VIII, Section B.