06-reference/research

ai act 113 3c registration deferral gap

2026-08-27·research-brief·source: deep-research·by Ray Data Co (deep-research synthesis)
eu-ai-actdigital-omnibusarticle-49-registrationeu-databaseprimary-source-verification

Undeferred on the Face of the Text, Un-performable in the Payload, and Aimed at the Provider Rather Than the Deployer

Not legal advice. This is a text-reading pass by a non-lawyer agent for a solo founder's situational awareness. It reports what the enacting words say and where two readings both survive them. It does not tell anyone what to do about a product.

The question

"Does amended AI Act Article 113(3)(c) actually leave Chapter III Section 5 (Art 49 registration) and Chapter VIII (Art 71 EU database) undeferred — and is that a null set or a live compliance gap before 2 Dec 2027?"

Carried forward from [[2026-08-23-ai-act-annex-iii-employment-entries]], which recorded the observation deliberately as a reading rather than a finding and named it the only genuinely unresolved textual question that pass surfaced.

Answer, up front.

Sub-question Answer Confidence
Is Section 5 (Arts 40-49) named anywhere in Article 113? No. It is the only section of Chapter III never named in Article 113, in either the original or the amended version VERIFIED-FROM-PRIMARY, literal text
Is Chapter VIII (Art 71) named anywhere in Article 113? No. Never named, before or after the amendment VERIFIED-FROM-PRIMARY
So do they apply from 2 August 2026? On the face of the text, yes — the residual rule "It shall apply from 2 August 2026" catches everything Article 113's list does not carve out VERIFIED-FROM-PRIMARY as to the text; the inference is mine
Null set or live gap? Neither cleanly. Functionally close to null, textually not null. Three independent internal barriers empty it out; none of them is a deferral INTERPRETATION — both readings survive the text
Does an employment-context deployer owe registration in the window? A private-sector employer owes nothing under Article 49 at all — 49(3) reaches only public-authority and Union-body deployers. The backlog framing was wrong on this point VERIFIED-FROM-PRIMARY, and this is the correction that matters
Has the Commission said anything either way? No. No recital, no guidance, no Service Desk annotation addresses Section 5 or Chapter VIII timing VERIFIED by absence across three official surfaces

Method and version. Consolidated Regulation (EU) 2024/1689, CELEX 02024R1689-20260727 (title bar: "Consolidated TEXT: 32024R1689 — EN — 27.07.2026"), and the amending act Regulation (EU) 2026/1744 of 8 July 2026 (OJ L 1744, 24.7.2026), both curled to disk and grepped locally. EUR-Lex now returns HTTP 202 with a zero-byte body to a bare curl; sending a browser User-Agent restored a 200. Amendment attribution throughout uses the consolidated text's own ▼M1 / ▼B markers.

What we already know (from the vault)

What the web says

Convergences and contradictions

Synthesis for RDCO

The literal answer is yes, and it is not close. Article 113's third paragraph is a closed list of carve-outs sitting under a residual rule. Section 5 of Chapter III and Chapter VIII are not on the list, so they have applied since 2 August 2026 — twenty-five days ago as of today. Anyone who says "the high-risk chapter is deferred" is making a claim the text does not support: four-fifths of the chapter is deferred, one-fifth is live, and Article 113 names the sections individually precisely because the drafters were operating at that granularity. That much is settled text and is checkable in about ninety seconds by anyone who opens the consolidated version.

The practical answer is that the window is close to empty, for three independent reasons — and none of them is a deferral. First, "high-risk AI system" is not a defined term in Article 3. The status is conferred operationally by Article 6(1) and 6(2), both of which sit in Section 1 and are deferred; Article 6(2) reads "AI systems referred to in Annex III shall be considered to be high-risk," and that sentence is switched off until 2 December 2027. Article 49(1)'s trigger phrase is "a high-risk AI system listed in Annex III" — Annex III is an annex and is not deferred, so the phrase arguably self-identifies, but the legal status it invokes has no operative source in the window. Second, the registration payload is un-fillable. Annex VIII Section A point 11 requires "a copy of the EU declaration of conformity referred to in Article 47" with no "where applicable" qualifier, and Article 47 declares conformity with Section 2 requirements that do not yet apply; Section C point 4 requires a summary of the Article 27 fundamental-rights impact assessment, and Article 27 is in Section 3 and is deferred. A provider registering in September 2026 would be attesting to a conformity assessment against requirements that are not in application. Third — and this is the cleanest of the three — Article 111(2) as amended says that for high-risk systems "placed on the market or put into service before the date of application of Chapter III referred to in Article 113," the Regulation applies to their operators "only if, as from that date, those systems are subject to significant changes in their designs." Every system that could conceivably be caught in the 2 August 2026 to 2 December 2027 window is, by definition, placed on the market before 2 December 2027. Recital 39 confirms the grace runs at type-and-model level, so one lawfully-placed unit covers the model. Read on its words, Article 111(2) closes the window it appears to create. The counter-reading is that Article 111(2) is a grandfathering rule speaking to the position from the Chapter III date forward and saying nothing about the preceding window — that is a fair reading of "as from that date" and it is why this does not resolve to a clean no.

What survives, and it is a genuinely different shape from what the backlog entry expected. Chapter VIII is not a null set at all, but its live obligation belongs to the Commission: Article 71(1) is a standing duty that "the Commission shall, in collaboration with the Member States, set up and maintain an EU database," live since 2 August 2026, conditional on nobody registering anything. And there is a live enforcement hook with no deferral anywhere near it — Article 83(1)(e), in Chapter IX, empowers a market surveillance authority to require a provider to end non-compliance where "the registration in the EU database referred to in Article 71 has not been carried out." The exposure asymmetry underneath is worth holding: Article 99(4) attaches the €15m / 3% tier to "obligations of providers pursuant to Article 16" and "obligations of deployers pursuant to Article 26", both deferred, and never names Article 49. Article 16(i) — "comply with the registration obligations referred to in Article 49(1)" — is the mirror inside Section 3, and it is deferred while the freestanding Article 49(1) is not. So even on the maximalist reading, a bare Article 49 breach in the window draws an order to comply plus whatever residual national penalty a Member State enacted under the amended Article 99(1) duty to penalise "any infringement of this Regulation" — not the headline fine. Both readings survive the text. What would resolve it is not more reading: an AI Office FAQ or Commission guidance addressing Section 5 timing, a corrigendum, or the first market surveillance authority to test Article 83(1)(e) against an unregistered Annex III system before December 2027. Absent any of those, the gap is functional rather than textual — and a functional null set is one a Commission FAQ can close overnight, which a textual one cannot.

Why this is in the vault

This closes the last open textual question in the four-brief Omnibus chain that RDCO's Annex III employment-scope read rests on ([[2026-08-02-agents-as-employees-regulatory-labor-framing]]), and it corrects a concrete error the chain was about to inherit: the assumption that an employment-context deployer faces a near-term registration duty. Article 49(3) reaches only public bodies, which means the entire private-sector question in the window is a provider-side question — directly relevant if RDCO ever ships or resells an Annex III-adjacent HR or hiring surface, and directly relevant to how the "AI workforce" positioning describes who carries EU obligations when a client asks.

Open follow-ups

Related

Sources

Primary text (curled to disk, grepped locally):

Secondary / status checks:

Vault: