Unacceptable Risk

For example, AI systems that allow “social scoring” by governments or companies are considered a clear threat to people's fundamental rights and are therefore banned.

High Risk

High-risk AI systems such as AI-based medical software or AI systems used for recruitment must comply with strict requirements, including risk-mitigation systems, high-quality data sets, clear user information, human oversight, etc.

Limited Risk

Systems like chatbots must clearly inform users that they are interacting with a machine, while certain AI-generated content must be labelled as such.

Minimal Risk

Most AI systems such as spam filters and AI-enabled video games face no obligation under the AI Act, but companies can voluntarily adopt additional codes of conduct.

Submit Complaint

Notifying Authority

The Notifying Authority and the EU AI Act

The Notifying Authority and the EU AI Act

The Artificial Intelligence Act is the EU’s first comprehensive legal framework regulating artificial intelligence. It introduces strict requirements for high-risk AI systems and mandates oversight by designated national authorities. One such critical authority is the Notifying Authority. 

What Is a Notifying Authority?

What Is a Notifying Authority?

As defined in the AI Act in Article 3 (19):
" ‘Notifying authority’:  is the national authority responsible for setting up and carrying out the necessary procedures for the assessment, designation and notification of conformity assessment bodies and for their monitoring."

Legal Basis

Legal Basis

The designation of a Notifying Authority is mandatory for all EU Member States under the AI Act. It ensures that the notified bodies assessing the conformity of AI systems possess the necessary technical competence, impartiality, and independence as defined by the regulation.

The authority operates under the principles and requirements set out in:

  • Chapter IV of the AI Act
  • EU legislation on accreditation and market surveillance
  • National laws transposing the AI Act into domestic legal systems
Our Role

Our Role

As the Notifying Authority in Cyprus, we are officially empowered to:

  • Establish and implement procedures to assess and designate conformity assessment bodies
  • Notify those bodies to the European Commission and other Member States
  • Monitor and supervise the ongoing performance of notified bodies to ensure compliance
  • Withdraw or suspend designations where necessary
  • Ensure transparency, impartiality, and competence in the national conformity assessment system
Working with Conformity Assessment Bodies

Working with Conformity Assessment Bodies

Conformity assessment bodies (CABs) are independent organizations that verify whether high-risk AI systems comply with the requirements of the AI Act. Before they can operate, these bodies must be:

  • Assessed for competence and impartiality
  • Designated by us, the Notifying Authority
  • Notified at the EU level to be officially recognized

We provide the framework and oversight that allows these bodies to function effectively and in full compliance with European legislation.

Become a Notify Body
Our Commitment

Our Commitment

Our goal is to ensure a robust, trustworthy, and harmonized system of AI oversight that:

  • Protects public interest and fundamental rights
  • Supports innovation within clear and consistent legal boundaries
  • Promote coordination and information-sharing across the EU

We uphold the principles of transparency, competence, and independence in all our operations.

Responsibilities of the Notifying Authority

Reception & Assessment Responsibilities:
  • Application Review: Receive and assess applications for notification from conformity assessment bodies.
  • Documentation Review: Assess relevant documentation for designation, notification, and monitoring (Arts. 29–39).
  • Assess documentation related to subcontractors or subsidiaries, retaining it for 5 years post-subcontract.
  • Assess information provided by notified bodies under Article 45(1).
  • Commission Requests: Provide the Commission with relevant information upon request regarding notifications or the competence of notified bodies.
Notification Responsibilities:

Notify Conformity Bodies:

  • Only notify bodies that meet the requirements of Article 31. Use the electronic notification tool to inform the Commission and Member States of notifications.
  • Update Notifications: Notify the Commission and Member States of any relevant changes to a notified body’s status.
Suspension, Restriction & Withdrawal:

Oversight of Notified Bodies:

  • Monitor notified bodies for continued compliance with Article 31.
  • Investigate if there’s reason to believe a body no longer meets the requirements or fails in obligations.

Take Action:

  • Ιf non-compliance is found, restrict, suspend, or withdraw the designation as appropriate.
  • Assess the impact on issued certificates.
  • Require suspension of affected certificates and inform the Commission and Member State

Commission Findings:

  • Assess and act on Commission findings regarding non-compliant notified bodies. 
Reporting & Communication:

Reporting Failures:

  • Submit a report to the Commission and Member States when a designation is affected.

Other Member States' Objections:

  • Allow for objections by other Member States under Article 30(4) and (5). 
Coordination & Participation:

Group Participation:

  • Ensure notified bodies participate in the group referred to in Article 38(1), directly or via representatives.