EU AI Act Art. 43: conformity assessment

Conformity assessment before placing on the market (internal control, or a notified body for Annex III point 1 biometrics)

By Jorge García Aibar Reviewed 2026-09-24

From clause to evidence Build the artefact, then file every output it produces as a record that names AIGE-OBL-EUAIA-ART43. Drawn from chapter 08.

Text alternative

Clause: EU AI Act, Art. 43.
Duty holder: Provider.
Applies from: 2027-12-02, Deferred.
Artefact: Conformity-assessment workflow.
Layers: Layer 01, Layer 05.
Evidence record: Go/no-go decision.
Record schemas: Go/no-go decision .
The same topic in 15 other frameworks; the crosswalk section below links each clause.

Id

AIGE-OBL-EUAIA-ART43

Instrument

EU AI Act (post-Omnibus) law

Compared side by side

ISO 42001 vs EU AI Act · NIST AI RMF vs EU AI Act

Clause

Art. 43

Duty holder

Provider

Authority

National MSA

Applies from

2027-12-02 Deferred · Annex III

Later dates

2028-08-02 Applies to Annex I embedded (product safety-component) systems
2030-08-02 Deadline for legacy high-risk systems intended for use by public authorities (Art. 111(2))

System class

High-risk (Annex III) · High-risk (Annex I)

The artefact that evidences it

Conformity-assessment workflow; internal-control or notified-body evidence pack; traceability to Annex IV documentation.

Patterns that build it

No pattern in the catalogue names this clause on its "Maps to" line yet; the artefact above is the engineering answer.

The same topic in other frameworks

From the topic crosswalk: the clauses filed under the same topics as this one. Mappings are illustrative, not a claim of conformity.

Conformity assessment and certification

ISO 42006 ISO/IEC 42006 Requirements for bodies providing audit and certification of AI management systems (core)
CSA AICM A&A-02 Independent Assessments (core)
EU AI Act Art. 47 EU declaration of conformity
EU AI Act Art. 48 CE marking
EU AI Act Art. 40 Harmonised standards and standardisation deliverables
GDPR Art. 42 Certification (clause not verified)
ISO 42001 9.2 Internal audit (clause not verified)
NIST AI RMF MEASURE 1.3 MEASURE 1.3: Internal experts who did not serve as front-line developers for the system and/or independent assessors are involved in regular assessments and updates
CSA AICM A&A-04 Requirements Compliance
Korea AI Act Art. 33 Confirmation of high-impact AI
Singapore GenAI GenAI 5 Testing and Assurance
EN 18286 EN 18286 Quality management system for EU AI Act regulatory purposes
China GenAI Measures GenAI Art. 17 Security assessment and algorithm filing
GAO AI Accountability 1.8 Compliance: ensure the AI system complies with relevant laws, regulations, standards, and guidance

Deployment, change and decommissioning

EU AI Act Art. 26 Obligations of deployers of high-risk AI systems (core)
ISO 42001 A.6.2.5 AI system deployment (core) (clause not verified)
ISO 42001 A.6.2.6 AI system operation and monitoring (core) (clause not verified)
NIST AI RMF MANAGE 2.4 MANAGE 2.4: Mechanisms are in place and applied, and responsibilities are assigned and understood, to supersede, disengage, or deactivate AI systems that demonstrate performance or outcomes inconsistent with intended use (core)
NIST AI RMF MANAGE 4.1 MANAGE 4.1: Post-deployment AI system monitoring plans are implemented, including mechanisms for capturing and evaluating input from users and other relevant AI actors, appeal and override, decommissioning, incident response, recovery, and change management (core)
NIST AI RMF GOVERN 1.7 GOVERN 1.7: Processes and procedures are in place for decommissioning and phasing out AI systems safely and in a manner that does not increase risks or decrease the organization's trustworthiness (core)
CSA AICM AIS-06 Secure Application Deployment (core)
EU AI Act Art. 25 Responsibilities along the AI value chain
EU AI Act Art. 20 Corrective actions and duty of information
EU AI Act Art. 79 Procedure at national level for dealing with AI systems presenting a risk
EU AI Act Art. 86 Right to explanation of individual decision-making
ISO 42001 A.9 Use of AI systems
CSA AICM CCC-01 Change Management Policy and Procedures
CSA AICM DSP-02 Secure Disposal
Singapore Agentic Agentic 2.3.3 When deploying, continuously monitor and test
CoE Convention CoE Art. 16(2)(g) Testing before first use and when significantly modified
OECD AI Principles OECD 1.4 Robustness, security and safety
TC260 Framework 3.0 TC260 5.3 Operators' safety guidelines
TC260 Framework 3.0 TC260 5.3.19 Re-assessment on material change
GAO AI Accountability 4.4 Ongoing assessment: assess the utility of the AI system to ensure its relevance to the current context
GAO AI Accountability 4.5 Scaling: identify conditions, if any, under which the AI system may be scaled or expanded beyond its current use

Source

Chapter 08, section EU AI Act, post-Omnibus, checked against its sources on the review date above.

Machine-readable

This obligation: /api/v1/obligations/aige-obl-euaia-art43.json
The register: /api/v1/obligations.json · CSV
Schema and stability promise: open data and API

Cite this obligation

García Aibar, J. (2026). EU AI Act Art. 43: conformity assessment (AIGE-OBL-EUAIA-ART43). In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0). https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/obligations/aige-obl-euaia-art43. CC BY 4.0

BibTeX

@misc{aige2026obligation,
  author       = {Jorge García Aibar},
  title        = {{EU AI Act Art. 43: conformity assessment (AIGE-OBL-EUAIA-ART43)}},
  howpublished = {In AI Governance Engineering: The Thesis \& Body of Knowledge},
  year         = {2026},
  version      = {0.5.0},
  doi          = {10.5281/zenodo.22956197},
  url          = {https://aigovernanceengineer.com/obligations/aige-obl-euaia-art43},
  note         = {Version 0.5.0}
}