Cross-Border Registration

The legal cornerstone of cross-border registration. Once a high-risk AI system is registered in one EU member state and receives its CE marking, all other member states must recognize that conformity assessment. This eliminates the need for 27 separate national registrations.

• Based on Regulation (EU) 2019/515 on mutual recognition of goods
• Applies only after successful conformity assessment completion
• Does not override national market surveillance authority powers
• Member states retain the right to suspend registration for legitimate public interest concerns

The provider selects one National Competent Authority as the lead supervisory body for initial registration. This authority becomes the primary interface for the EU AI Act Database entry and coordinates with other member states through the European Artificial Intelligence Board.

• Provider must designate a lead authority based on main establishment location
• Non-EU providers route through their Authorized Representative's member state
• Lead authority validates the Technical Documentation File before database activation
• Subsequent substantial modifications are processed through the same entry point

The CE marking functions as the physical and digital regulatory passport. Once affixed following successful registration, the AI system can circulate freely throughout the European Economic Area without additional technical barriers.

• CE marking must be accompanied by the Unique Registration ID
• Digital products carry the marking in their Digital Product Passport
• Market surveillance authorities in any member state can inspect the marking's validity
• Counterfeit or improperly affixed markings trigger immediate market withdrawal procedures

For non-EU providers, cross-border registration flows through a mandated Authorized Representative established within the Union. This entity serves as the legal anchor point, determining which member state's National Competent Authority processes the registration.

• Representative must have a physical presence in the chosen member state
• All incident reporting obligations route through the representative's jurisdiction
• Representative maintains the Technical Documentation File for inspection
• Liability for compliance failures extends to the authorized representative

Registration in one member state is streamlined when the AI system conforms to harmonized standards adopted by recognized European standards bodies. Compliance with these standards creates a presumption of conformity that all member states must accept.

• Standards are published in the Official Journal of the European Union
• Covers areas like risk management, data quality, and transparency
• Reduces the burden of proof during cross-border conformity assessment
• Providers must still complete the Declaration of Conformity referencing applicable standards

Cross-border registration does not fragment post-market monitoring obligations. The provider maintains a single, unified surveillance system that collects data from all member states where the AI system operates, feeding into the central EU AI Act Database.

• Serious incident reports must be filed regardless of which member state the incident occurs in
• Market surveillance authorities in any member state can request data from the provider
• Coordinated enforcement actions are managed through the European Artificial Intelligence Board
• Registration suspension by one authority triggers notification to all other member states

The foundational legal doctrine underpinning cross-border registration. Once a high-risk AI system is lawfully registered in one member state, all other member states must allow its market placement without imposing additional requirements. This prevents regulatory fragmentation and creates a single digital market. The principle applies only when the system has undergone a valid conformity assessment and bears the CE marking. Exceptions exist for national security and public morality grounds.

The centralized European Commission repository where providers register high-risk AI systems. Key attributes:

• Assigns a Unique Registration ID for supply chain traceability
• Accessible to National Competent Authorities for market surveillance
• Links to incident reporting portals for serious malfunction notifications
• Serves as the single source of truth for cross-border validity Registration in this database is the technical trigger for mutual recognition.

A legal requirement for non-EU providers to designate a natural or legal person established within the Union. This representative:

• Acts as the point of contact for all registration and compliance matters
• Maintains the technical documentation file for inspection
• Cooperates with Notified Bodies and market surveillance authorities Without a valid mandate, a foreign provider cannot benefit from cross-border registration and must establish direct EU presence.

The physical or digital mark affixed to a high-risk AI system indicating compliance with all applicable EU harmonization legislation. It functions as a regulatory passport enabling cross-border movement. The mark must be:

• Visible, legible, and indelible
• Accompanied by the Unique Registration ID
• Supported by a signed Declaration of Conformity Affixing the CE marking without valid registration constitutes a regulatory violation subject to penalties.

The designated public authority within each EU member state responsible for supervising AI registration and enforcement. Their cross-border role includes:

• Validating conformity assessments conducted in other jurisdictions
• Issuing registration suspension orders for non-compliant systems
• Coordinating with other NCAs through the European Artificial Intelligence Board
• Conducting joint investigations when a registered system causes harm across borders Each member state must notify the Commission of its designated NCA.

A change to an AI system's intended purpose or performance characteristics that invalidates the original registration and requires a new conformity assessment. Examples include:

• Expanding from adult diagnostics to pediatric use
• Changing from advisory to autonomous decision-making
• Integrating a new foundation model with different training data Cross-border recognition ceases upon substantial modification until re-registration is complete. The original provider remains responsible for determining whether a change is substantial.