CE Marking

The CE marking is a legally binding declaration by the manufacturer that the AI system satisfies all relevant EU harmonization legislation. It is not a certification from a third party, but a manufacturer's self-declaration of responsibility, backed by a comprehensive Technical Documentation dossier.

• Requires a signed EU Declaration of Conformity
• Applies to the entire AI system, not just software
• Must be affixed before the system is placed on the market

The mark must be affixed visibly, legibly, and indelibly to the AI system or its data plate. For purely digital AI systems, such as cloud-based software, the mark can be displayed digitally, typically within the user interface or system settings.

• Physical: Affixed to the hardware or packaging
• Digital: Displayed in the 'About' section or login screen
• Must follow the official proportional graphic design

Affixing the CE mark is the final step in a mandatory process. For high-risk AI systems, this requires a successful Conformity Assessment. This assessment is based on Harmonized Standards or, in their absence, direct evaluation against the AI Act's essential requirements.

• Internal control by the manufacturer for most systems
• Third-party assessment by a Notified Body for specific high-risk categories
• A new assessment is triggered by a Substantial Modification

The CE marking functions as a single passport for the entire European Economic Area (EEA). Without it, a high-risk AI system cannot be legally sold, distributed, or put into service in any EU member state. Market Surveillance Authorities can demand its removal if non-compliance is discovered.

• Grants free circulation within the EEA
• Absence leads to immediate market withdrawal orders
• Applies to both EU and non-EU manufacturers exporting to the bloc

By affixing the CE mark, the Provider assumes full legal liability for the system's compliance. This includes obligations for Post-Market Monitoring and Serious Incident Reporting. The mark is not a one-time event but a symbol of an ongoing commitment to regulatory adherence.

• Provider is the legal entity responsible for the mark
• Obligations persist for the system's entire lifecycle
• Non-compliance can result in fines of up to €40M or 7% of global turnover

The CE marking is often confused with other labels. It is not a quality certification (like ISO 9001), a safety mark from a private lab (like TÜV), or a regional standard (like China's CCC). It is a specific regulatory conformity mark for the EU single market.

• CE = EU Regulatory Conformity
• ISO = Voluntary Quality Management
• TÜV/UL = Private Safety Testing

The mandatory verification process a provider must complete before affixing the CE Marking. It demonstrates that a high-risk AI system meets all applicable requirements of the EU AI Act.

• Based on internal controls (self-assessment) or third-party review by a Notified Body
• The specific procedure depends on the system's risk classification
• Results in a certificate of conformity or a declaration of conformity

An independent, accredited organization designated by an EU member state to conduct third-party conformity assessments. Their involvement is mandatory for certain high-risk AI systems before a CE Marking can be legally affixed.

• Must operate with impartiality and technical competence
• Scope of accreditation defines which AI categories they can assess
• Issues the EU-type examination certificate required for market access

European technical specifications that provide a presumption of conformity with the AI Act's essential requirements. Applying these standards is the most efficient path to CE Marking.

• Developed by CEN/CENELEC under a Standardization Request from the European Commission
• Covers areas like risk management, data quality, and transparency
• Compliance is voluntary but legally advantageous

The comprehensive dossier a provider must compile and maintain for 10 years after the AI system is placed on the market. It serves as the primary evidence for the CE Marking's validity.

• Must include a general description of the system and its intended purpose
• Detailed specifications of design, development, and testing processes
• Performance metrics, risk management records, and a copy of the EU declaration of conformity

The continuous, systematic process that begins after the CE Marking is affixed. Providers must collect and analyze real-world performance data to ensure ongoing compliance.

• Identifies emerging risks not foreseen during the initial assessment
• Triggers mandatory serious incident reporting to market surveillance authorities
• Failure to monitor can invalidate the original conformity declaration

A change to an AI system's intended purpose or a significant alteration to its performance that voids the original CE Marking. A new conformity assessment is mandatory.

• Examples: repurposing a diagnostic AI for treatment recommendations
• Includes major software updates that change core logic or risk profile
• The original provider remains liable unless the modification creates a new provider