MR-074 Regulatory compliance Organization scope

Failure to register a high-risk system or verify its registration

A public-authority deployer does not meet its EU-database registration duty, or uses a high-risk system that the provider has not registered, instead of declining use and informing the provider.

Risk family: Regulatory compliance
MIT domain: n/a (EU-derived)
MIT subdomain: n/a
AI type: GPAI, Agentic, Classical_ML
Scope: Organization
Source standard: EU AI Act 2024/1689 (gap analysis)

Provenance

Source standard

EU AI Act 2024/1689 (gap analysis)

Source frameworks

EU AI Act 2024/1689

EU AI Act articles

Art. 26(8) | Art. 49 | Art. 71

Nearest MIT-derived risk

MR-063 AI inventory blind spots (internal visibility; Art. 26(8)/49 is the external regulatory registration duty).

Framework crosswalk

Every framework item mapped to this risk. Items marked partial overlap only in part; definitions appear on hover where the source licence permits.

Sourcesframeworks that contributed to the register

EU AI Act3

Art. 26(8)
Art. 49
Art. 71

More in Regulatory compliance

MR-040 MR-072 MR-073 MR-075 MR-076 MR-077 MR-078 MR-079 MR-080 MR-081 MR-082

Part of the Deployer AI Risk Register, an open-source resource developed by MindXO. Version 1.0, 3 July 2026. Derived from the MIT AI Risk Repository (V4, December 2025) under CC BY 4.0; an independent derivative work, not endorsed by or affiliated with MIT. Sub-risk decomposition references MITRE ATLAS™ v5.6.0 (© 2021-2026 The MITRE Corporation, reproduced and distributed with permission). ISO/IEC and EU AI Act references are by number only. License: CC BY 4.0. Full attribution and licensing.