AI Act Article EN

Article 33

Subsidiaries of notified bodies and subcontracting

Notification Obligation Notified Bodies for AI Systems Notified Body Subsidiaries and Subcontracting
  1. 1.

    Where a notified body subcontracts specific tasks connected with the conformity assessment or has recourse to a subsidiary, it shall ensure that the subcontractor or the subsidiary meets the requirements laid down in Article 31, and shall inform the notifying authority accordingly.

  2. 2.

    Notified bodies shall take full responsibility for the tasks performed by any subcontractors or subsidiaries.

  3. 3.

    Activities may be subcontracted or carried out by a subsidiary only with the agreement of the provider. Notified bodies shall make a list of their subsidiaries publicly available.

  4. 4.

    The relevant documents concerning the assessment of the qualifications of the subcontractor or the subsidiary and the work carried out by them under this Regulation shall be kept at the disposal of the notifying authority for a period of five years from the termination date of the subcontracting.

Related across sources

Guidance Guidelines 07/2020 on the concepts of controller and processor in the GDPR News EDPB meets with EU Commissioner McGrath and adopts common data breach notification template News The Italian SA fined Poste Vita for data breach News Making GDPR compliance easier through new initiatives: a key focus of the EDPB work programme 2026-2027 News UODO (Poland) - DKN.5131.4.2025 Guidance Guidelines 03/2022 on Deceptive design patterns in social media platform interfaces: how to recognise and avoid them