Authorised representative (EU AI Act)
An authorised representative under the EU AI Act is a natural or legal person located or established in the Union that has received and accepted a written mandate from a provider of an AI system or a general-purpose AI model established in a third country, to perform and carry out on the provider's behalf the obligations and procedures established by the Regulation (Art. 3(5)). Appointment is mandatory before a high-risk AI system is made available on the Union market (Art. 22) and, for third-country providers of general-purpose AI models, before the model is placed on the market (Art. 54). The concept mirrors the authorised representative under the MDR and other product legislation.
The mandate must empower the representative at least to: verify that the EU declaration of conformity and technical documentation have been drawn up and that the conformity assessment procedure has been carried out; keep at the disposal of authorities, for ten years, the provider's contact details, the declaration of conformity, the technical documentation and, where applicable, the notified body certificate; provide authorities with all information and documentation necessary to demonstrate conformity, including access to logs; cooperate with authorities on any action they take to reduce risks; and, where applicable, comply with the registration obligations. The representative must terminate the mandate if it considers that the provider is acting contrary to its obligations and inform the market surveillance authority. Authorities may address the representative directly, and the representative's identity must appear on the system or its documentation.
For non-EU developers of AI-enabled medical device software, diagnostic algorithms or health AI platforms, the AI Act representative is a second mandatory EU footprint alongside the MDR authorised representative and the GDPR Art. 27 Data Protection Representative. The three roles have different legal bases, mandates and liabilities (the GDPR representative deals with data subjects and supervisory authorities on all processing issues, the AI Act representative with market surveillance authorities on conformity), but they can be held by the same organisation to ensure a consistent interface with EU regulators. iliomad acts as EU AI Act authorised representative for life sciences providers alongside its GDPR representative service.
