Skip to main content

Article 33: Subsidiaries of notified bodies and subcontracting

Article 33, Regulation (EU) 2024/1689

High-risk AI systemsAuthorityNotified bodyProvider

1. Where a notified body subcontracts specific tasks connected with the conformity assessment or has recourse to a subsidiary, it shall ensure that the subcontractor or the subsidiary meets the requirements laid down in Article 31, and shall inform the notifying authority accordingly.

2. Notified bodies shall take full responsibility for the tasks performed by any subcontractors or subsidiaries.

3. Activities may be subcontracted or carried out by a subsidiary only with the agreement of the provider. Notified bodies shall make a list of their subsidiaries publicly available.

4. The relevant documents concerning the assessment of the qualifications of the subcontractor or the subsidiary and the work carried out by them under this Regulation shall be kept at the disposal of the notifying authority for a period of five years from the termination date of the subcontracting.

Cited by

Implementing this provision is a skill, not a lookup.

The EU AI Act Implementation Expert program teaches the working practice behind every article: classification, conformity, documentation, and the judgment to defend your decisions.

Mechanically consolidated from the official OJ texts of Regulations (EU) 2024/1689 and 2026/1744 (the Digital Omnibus, in force 27 July 2026); unofficial pending the official EUR-Lex consolidation. Study aid, not legal advice; the official texts on EUR-Lex are authoritative.