AI Act

AI Act Authorized Representative: Article 22-25 Obligations for Non-EU AI Providers

Non-EU companies deploying AI in Europe need an authorized representative under Articles 22-25. Full obligation breakdown, country requirements, and compliance checklist.

Export PDF (Pro)
At a glance
Who this applies to
Non-EU providers of high-risk AI systems and GPAI models placing products on the EU market without an EU establishment.
Deadline
August 2, 2026. Authorized representative must be appointed before market placement.
What you must have
  • Appoint an EU-based authorized representative (Article 22)
  • Written mandate specifying representative duties (Article 23)
  • Representative keeps EU Declaration of Conformity available for 10 years (Article 24)
  • Representative cooperates with market surveillance authorities (Article 25)
63
days until AI Act market access deadline
2026-08-02
Not sure if your AI system is high-risk? Take the 5-minute diagnostic
Intelligence briefing

Authorized Representative Under the EU AI Act: Requirements for Non-EU Providers

Who this applies to

This obligation applies to providers of high-risk AI systems (Article 24(1)) and general-purpose AI models (Article 25(1)) that are established outside the EU but place their systems on the EU market. It also covers importers and distributors acting as authorized representatives under Article 24(2).


What is required

  • Appointment of an EU-based authorized representative (Article 24(1)): Non-EU providers must designate a natural or legal person established in the EU to act on their behalf for compliance and enforcement matters.
  • Written mandate (Article 24(3)): The authorized representative must hold a written mandate empowering them to:
- Cooperate with national competent authorities (Article 24(4)(a)) - Ensure compliance documentation is available upon request (Article 24(4)(b)) - Facilitate corrective actions, including withdrawal or recall (Article 24(4)(c))
  • Registration in the EU database (Article 51(1)): The authorized representative’s details must be recorded in the EU AI database before market placement.
  • Liability for non-compliance (Article 24(5)): The authorized representative is jointly liable for defective administrative compliance, though not for product defects under civil liability rules.

Key deadlines

The primary deadline for this obligation is August 2, 2026, when the AI Act’s market access provisions enter into force.


Enforcement patterns

AI Act enforcement begins August 2, 2026. No precedent currently exists. This page will be updated as enforcement cases emerge.


Cross-border considerations

Implementation varies by member state, with Italy (IT), Belgium (BE), and Austria (AT) showing the highest citation density for Articles 24–25 in national guidance. No jurisdiction-specific deviations from the AI Act’s authorized representative requirements have been documented in enforcement or cross-reference data.

Cross-reference intelligence

No AI Act article citations in corpus yet. AI Act entered into force August 2024. Article 50 transparency obligations take effect 2 August 2026; Annex III high-risk obligations are expected 2 December 2027 (pending Digital Omnibus formal adoption). This section will populate as citations accumulate.

Analogous GDPR articles

GDPR article citations that relate to this AI Act topic and may inform enforcement patterns.

ArticleCitationsTop CountriesMost Co-Cited
GDPR Art. 22 51 IT (12), ES (8), AT (6) GDPR Art. 13, GDPR Art. 15, GDPR Art. 25
GDPR Art. 23 21 DE (7), AT (6), DK (2) GDPR Art. 15, GDPR Art. 15(1), GDPR Art. 12
GDPR Art. 24 338 IT (98), BE (63), NO (41) GDPR Art. 5(2), GDPR Art. 13, GDPR Art. 32
GDPR Art. 25 413 IT (123), FI (47), BE (41) GDPR Art. 32, GDPR Art. 13, GDPR Art. 5(2)
Regulatory framework
Cross-regulatory overlap
EDPB Opinion 28/2024 on certain data protection aspects related to the processing of personal data i
EU · edpb · 2026-03-18 · Opinion 28/2024
EDPB Opinion 28/2024 on certain data protection aspects related to the processing of personal data in the context of AI models EDPB Opinion 28/2024 on
ENISA: Cybersecurity Challenges in the Uptake of Artificial Intelligence in Autonomous Driving
EU · enisa · 2026-03-24 · enisa-enisa-jrc-cybersecurity-challenges-in-the-uptake-of-artifici
ENISA: Cybersecurity Challenges in the Uptake of Artificial Intelligence in Autonomous Driving ENISA: Cybersecurity Challenges in the Uptake of Artifi
ENISA: AI and Cybersecurity — Securing Artificial Intelligence Systems
EU · enisa · 2026-03-23 · enisa-ai-cybersecurity
ENISA: AI and Cybersecurity — Securing Artificial Intelligence Systems ENISA: AI and Cybersecurity — Securing Artificial Intelligence Systems Category
EDPB Guidelines 05/2021 on the interplay between the application of Article 3 and the provisions on
EU · edpb · 2026-03-18 · 05/2021
EDPB Guidelines 05/2021 on the interplay between the application of Article 3 and the provisions on international transfers (Chapter V GDPR) EDPB Guid
EBA — Commission Implementing Regulation (EU) 2026/295 of 4 February 2026 suspending commercial reba
EU · eba · 2026-03-21 · eba-eurlex-32026R0295
EBA — Commission Implementing Regulation (EU) 2026/295 of 4 February 2026 suspending commercial rebalancing measures concerning certain products origi
ENISA: EU Cybersecurity Act — ENISA Mandate and EU Cybersecurity Framework
EU · enisa · 2026-03-23 · enisa-cybersecurity-act
ENISA: EU Cybersecurity Act — ENISA Mandate and EU Cybersecurity Framework ENISA: EU Cybersecurity Act — ENISA Mandate and EU Cybersecurity Framework
Sources (13)

Get the complete AI Act compliance checklist as a PDF

Mapped to enforcement precedents and cross-referenced against 1.2 million regulatory citations. Free.

We'll email you the PDF. No spam. Unsubscribe anytime.

Get unlimited briefings on Fontvera Pro — or browse all intelligence briefings