§ EU AI Act · Article 31
AI Act Article 31: Obligations, Deadlines & Penalties
At a glance
Article 31 of the AI Act imposes 17 obligations on notified body.
§ Obligations
All obligations under Article 31
Obligation 1
A notified body shall be established under the national law of a Member State and shall have legal personality.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
establish
- Deadline
-
—
- Penalty
-
—
Obligation 2
Notified bodies shall satisfy the organisational, quality management, resources and process requirements that are necessary to fulfil their tasks, as well as suitable cybersecurity requirements.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
satisfy
- Deadline
-
—
- Penalty
-
—
Obligation 3
The organisational structure, allocation of responsibilities, reporting lines and operation of notified bodies shall ensure confidence in their performance, and in the results of the conformity assessment activities that the notified bodies conduct.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
ensure
- Deadline
-
—
- Penalty
-
—
Obligation 4
Notified bodies shall be independent of the provider of a high-risk AI system in relation to which they perform conformity assessment activities, as well as of any other operator having an economic interest in high-risk AI systems assessed, and of any competitors of the provider.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
be independent
- Deadline
-
—
- Penalty
-
—
- Exemptions
- use of assessed high-risk AI systems necessary for operations or for personal purposes
Obligation 5
Neither a conformity assessment body, its top-level management nor the personnel responsible for carrying out its conformity assessment tasks shall be directly involved in the design, development, marketing or use of high-risk AI systems, nor shall they represent the parties engaged in those activities.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
refrain from involvement
- Deadline
-
—
- Penalty
-
—
Obligation 6
They shall not engage in any activity that might conflict with their independence of judgement or integrity in relation to conformity assessment activities for which they are notified, particularly consultancy services.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
refrain from activity
- Deadline
-
—
- Penalty
-
—
Obligation 7
Notified bodies shall be organised and operated so as to safeguard the independence, objectivity and impartiality of their activities.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
organise
- Deadline
-
—
- Penalty
-
—
Obligation 8
Notified bodies shall document and implement a structure and procedures to safeguard impartiality and to promote and apply the principles of impartiality throughout their organisation, personnel and assessment activities.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
document
- Deadline
-
—
- Penalty
-
—
Obligation 9
Notified bodies shall have documented procedures in place ensuring that their personnel, committees, subsidiaries, subcontractors and any associated body or personnel of external bodies maintain the confidentiality of the information which comes into their possession during the performance of conformity assessment activities.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
document
- Deadline
-
—
- Penalty
-
—
- Exemptions
- when disclosure is required by law
Obligation 10
The staff of notified bodies shall be bound to observe professional secrecy with regard to all information obtained in carrying out their tasks under this Regulation.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
observe
- Deadline
-
—
- Penalty
-
—
- Exemptions
- in relation to the notifying authorities of the Member State in which their activities are carried out
Obligation 11
Notified bodies shall have procedures for the performance of activities which take due account of the size of a provider, the sector in which it operates, its structure, and the degree of complexity of the AI system concerned.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
have procedures
- Deadline
-
—
- Penalty
-
—
Obligation 12
Notified bodies shall take out appropriate liability insurance for their conformity assessment activities.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
take out
- Deadline
-
—
- Penalty
-
—
- Exemptions
- unless liability is assumed by the Member State in which they are established or that Member State is itself directly responsible for the conformity assessment
Obligation 13
Notified bodies shall be capable of carrying out all their tasks under this Regulation with the highest degree of professional integrity and the requisite competence in the specific field.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
be capable
- Deadline
-
—
- Penalty
-
—
Obligation 14
Notified bodies shall have sufficient internal competences to be able effectively to evaluate the tasks conducted by external parties on their behalf.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
have
- Deadline
-
—
- Penalty
-
—
Obligation 15
The notified body shall have permanent availability of sufficient administrative, technical, legal and scientific personnel who possess experience and knowledge relating to the relevant types of AI systems, data and data computing, and relating to the requirements set out in Section 2.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
have
- Deadline
-
—
- Penalty
-
—
Obligation 16
Notified bodies shall participate in coordination activities as referred to in Article 38.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
participate
- Deadline
-
—
- Penalty
-
—
Obligation 17
Notified bodies shall take part directly, or be represented in, European standardisation organisations, or ensure that they are aware and up to date in respect of relevant standards.
Regulation (EU) 2024/1689, Article 31, Article 31
- Obligated entity
-
notified body
- Action required
-
participate
- Deadline
-
—
- Penalty
-
—
§ Deadlines
EU AI Act compliance deadlines
-
2025-02-02
Article 4 AI literacy
in_force
-
2025-02-02
Article 5 prohibitions (unacceptable risk)
in_force
-
2025-08-02
GPAI model obligations (Articles 51 to 56)
in_force
-
2026-08-02
Article 50(2) machine-readable marking (watermarking) of AI-generated content
provisionally_amended
-
2026-08-02
Article 50 transparency obligations OTHER than the 50(2) marking grace (for example disclosure that a user is interacting with an AI system)
scheduled
-
2026-08-02
Annex III stand-alone high-risk obligations
provisionally_amended
-
2026-08-02
National AI regulatory sandboxes (establishment deadline)
provisionally_amended
-
2026-12-02
NEW Article 5 prohibition: AI generation of non-consensual intimate imagery (NCII) and CSAM
provisionally_amended
-
2027-08-02
Annex I embedded (regulated-product) high-risk obligations
provisionally_amended
§ Frequently asked
Questions about Article 31
Who must comply with Article 31 of the AI Act?
+
notified body.
What does Article 31 of the AI Act require?
+
establish satisfy ensure