§ EU AI Act · Article 49
AI Act Article 49: Obligations, Deadlines & Penalties
At a glance
Article 49 of the AI Act imposes 6 obligations on deployer, provider. At least one obligation carries an explicit compliance deadline.
§ Obligations
All obligations under Article 49
Obligation 1
The provider or authorised representative must register themselves and their high-risk AI system (listed in Annex III, except point 2) in the EU database before placing it on the market or putting it into service.
Regulation (EU) 2024/1689, Article 49, Article 49
- Obligated entity
-
provider
- Action required
-
register
- Deadline
-
before placing on the market or putting into service
- Penalty
-
—
- Exemptions
- high-risk AI systems referred to in point 2 of Annex III
Obligation 2
The provider or authorised representative must register themselves and an AI system they have concluded is not high-risk (under Article 6(3)) in the EU database before placing it on the market or putting it into service.
Regulation (EU) 2024/1689, Article 49, Article 49
- Obligated entity
-
provider
- Action required
-
register
- Deadline
-
before placing on the market or putting into service
- Penalty
-
—
Obligation 3
Deployers that are public authorities, Union institutions, bodies, offices or agencies (or persons acting on their behalf) must register themselves, select the system, and register its use in the EU database before putting into service or using a high-risk AI system (listed in Annex III, except point 2).
Regulation (EU) 2024/1689, Article 49, Article 49
- Obligated entity
-
deployer
- Action required
-
register
- Deadline
-
before putting into service or using
- Penalty
-
—
- Exemptions
- high-risk AI systems listed in point 2 of Annex III
Obligation 4
For high-risk AI systems in law enforcement, migration, asylum, and border control management (Annex III points 1, 6, 7), registration must be in a secure non-public section of the EU database containing only specific information listed in Annexes VIII and IX.
Regulation (EU) 2024/1689, Article 49, Article 49
- Obligated entity
-
provider
- Sector scope
- law enforcement, migration, asylum and border control management
- Action required
-
register
- Deadline
-
before placing on the market or putting into service
- Penalty
-
—
Obligation 5
For high-risk AI systems in law enforcement, migration, asylum, and border control management (Annex III points 1, 6, 7), deployers that are public authorities must register in a secure non-public section of the EU database containing only specific information listed in Annexes VIII and IX.
Regulation (EU) 2024/1689, Article 49, Article 49
- Obligated entity
-
deployer
- Sector scope
- law enforcement, migration, asylum and border control management
- Action required
-
register
- Deadline
-
before putting into service or using
- Penalty
-
—
Obligation 6
High-risk AI systems referred to in point 2 of Annex III shall be registered at national level rather than in the EU database.
Regulation (EU) 2024/1689, Article 49, Article 49
- Obligated entity
-
provider
- Action required
-
register
- Deadline
-
—
- Penalty
-
—
§ Deadlines
EU AI Act compliance deadlines
-
2025-02-02
Article 5 prohibitions (unacceptable risk)
in_force
-
2025-02-02
Article 4 AI literacy
in_force
-
2025-08-02
GPAI model obligations (Articles 51 to 56)
in_force
-
2026-07-27
Regulation (EU) 2026/1744 (Digital Omnibus on AI) enters into force — AI Act applies as amended
in_force
-
2026-08-02
AI Act general date of application (Art 113) — governance, penalties and remaining provisions without a different date
in_force
-
2026-08-02
Article 50 transparency obligations (AI-interaction disclosure, labelling of deepfakes and AI-generated text, emotion-recognition notices)
in_force
-
2026-12-02
Article 50(2) machine-readable marking of AI-generated content — transition for generative AI systems placed on the market before 2 August 2026
scheduled
-
2026-12-02
NEW Article 5 prohibition: AI generation of non-consensual intimate imagery (NCII) and CSAM
scheduled
-
2027-08-02
National AI regulatory sandboxes: at least one operational per Member State (Art 57(1))
scheduled
-
2027-12-02
Annex III stand-alone high-risk obligations
scheduled
-
2028-08-02
Annex I embedded (regulated-product) high-risk obligations
scheduled
§ Frequently asked
Questions about Article 49
Who must comply with Article 49 of the AI Act?
+
deployer, provider.
What does Article 49 of the AI Act require?
+
register
What is the compliance deadline for AI Act Article 49?
+
before placing on the market or putting into service; before putting into service or using