EU AI Act / High risk

High-risk AI.Understand your responsibility.

Health, safety and fundamental rights are the starting point. Understand what to check in your company and what you need to organise.

Check whether your system qualifies
  1. Your AI
  2. A decision
  3. People

What could be affected

Health
The care we receive
Safety
Protection from harm
Fundamental rights
Our treatment and opportunities

These effects help explain what is at stake. High-risk classification requires checking the conditions in Article 6; a generic possibility of harm is not enough.

Checked on September 12, 2026 · quarterly and whenever relevant rules change review

Recognise your situation

Two routes to check for high risk.

Classification depends on the system and its intended purpose: what it does, for whom and which decisions it influences. The annex helps establish classification; your role determines responsibilities.

Annex I · Article 6(1)

AI in regulated products

Both conditions must be met:

  1. The AI is a safety component of a product covered by Annex I, or is itself such a product.
  2. That product requires third-party conformity assessment under its legislation.

Sections A and B have different regimes. Being part of machinery or a medical device does not establish both conditions.

Annex III · Article 6(2)

AI in particularly sensitive decisions

The intended purpose falls within a specific use case in one of Annex III’s eight areas, from education and employment to essential services.

The Article 6(3) exemption has conditions; it does not cover every supporting use. Profiling people rules it out. A final human decision does not, by itself, exclude high-risk classification.

Annex I: the 20 instruments and each section’s regime

Annex I has two sections with different consequences. Section A products fall under the high-risk framework, subject to the rules coordinating it with product legislation. Section B follows a sectoral route: Article 2(2) limits the directly applicable AI Act provisions, while requirements are integrated into the relevant product rules.

Toys

Reference2009/48

SectionA

Recreational craft and personal watercraft

Reference2013/53

SectionA

Lifts and safety components

Reference2014/33

SectionA

Equipment for potentially explosive atmospheres

Reference2014/34

SectionA

Radio equipment

Reference2014/53

SectionA

Pressure equipment

Reference2014/68

SectionA

Cableway installations

Reference2016/424

SectionA

Personal protective equipment

Reference2016/425

SectionA

Appliances burning gaseous fuels

Reference2016/426

SectionA

Medical devices

Reference2017/745

SectionA

In vitro diagnostic medical devices

Reference2017/746

SectionA

Civil aviation security

Reference300/2008

SectionB

Agricultural and forestry vehicles

Reference167/2013

SectionB

Two- or three-wheel vehicles and quadricycles

Reference168/2013

SectionB

Marine equipment

Reference2014/90

SectionB

Railway interoperability

Reference2016/797

SectionB

Motor vehicle type approval

Reference2018/858

SectionB

Unmanned aircraft and equipment within Article 2(1)(a) and (b)

Reference2018/1139

SectionB

General vehicle safety

Reference2019/2144

SectionB

Machinery and safety components

Reference2023/1230

SectionB

Instrument numbers from Annex I. Sections A and B have different regimes; appearing in this table does not replace the two conditions in Article 6(1).

Machinery is in Section B. Regulation (EU) 2023/1230 is the machinery reference following the Omnibus amendment. Article 6(1), Article 60a and Articles 102–112 apply directly to these systems; Articles 57–59 apply to the extent specified in Article 2(2). Do not apply an Annex III compliance checklist to machinery without checking that sectoral route.

Sources: Annex I of the AI Act and the amendment in Regulation (EU) 2026/1744, Article 1, points 2 and 41.

Annex III: eight areas, one example per area

These examples come from the Commission’s draft classification guidelines. They illustrate systems within the listed use cases. They are neither exhaustive nor permission to use a system: Article 5 prohibitions and other applicable law must also be checked.

Biometrics

The Commission's exampleFacial and voice recognition used to identify specific individuals in audiovisual archives, matching against a reference database and without the person's active involvement.

Critical infrastructure

The Commission's exampleA system that monitors road traffic and adjusts traffic lights: it controls or limits physical harm, so it has a direct impact on road safety.

Education and vocational training

The Commission's exampleAutomated admissions that review applications, transcripts and test scores to determine eligibility for a place.

Employment and worker management

The Commission's exampleA shift scheduler that ranks workers by punctuality, no-show history and ratings, and allocates shifts using that ranking.

Essential services

The Commission's exampleAn insurer assessing life insurance applications using age, health status, family history, lifestyle and occupation against mortality tables.

Law enforcement

The Commission's exampleAssessing the risk faced by a victim of domestic violence from statements, police reports, previous incidents and restraining order data.

Migration, asylum and border control

The Commission's exampleRisk scoring at entry checks using personal history, travel patterns and watch-list matches, to refer travellers to second-line checks.

Justice and democratic processes

The Commission's exampleA system that analyses the facts, identifies the applicable law and case law, and drafts judicial decisions, reasoning and ruling included.

One example per area, taken from the ones the Commission itself publishes as cases that fall inside.

The Commission also identifies profiling in its admissions and victim-risk examples. That prevents use of the Article 6(3) exemption discussed below. The Annex III document is available through the classification guidelines consultation.

Checking classification and the Article 6(3) exemption

First check that it is an AI system under Article 3(1). Automating a task does not establish that. Intended purpose follows from instructions, documentation and marketing, as well as the contract. A contractual restriction does not cancel a use that you promote. Classification does not follow simply from using a particular model or selling to a particular industry.

Only systems on the Annex III route can use this provision. It does not exempt a system classified under Article 6(1).

The assessment must establish that the system does not pose a significant risk of harm to health, safety or fundamental rights, including that it does not materially influence the outcome of decision-making. The draft takes a narrow approach to this exception. A final human review does not establish it on its own.

The four alternative conditions

At least one of these conditions must apply, together with that overarching test:

  • A narrow procedural task. An operation within a process whose limited role does not become the substantive assessment.
  • Improving a completed human activity. Working on a result that a person has already produced, rather than replacing their assessment.
  • Finding patterns or deviations. Reviewing earlier decisions without replacing or influencing the completed human assessment without proper human review.
  • A preparatory task. Preparing an assessment covered by Annex III without materially determining its outcome.

Assess the system in context. If connected components or agents jointly produce an output that materially influences the decision, describing each component as preparatory does not establish an exemption for the combined system.

Profiling rules out the exemption

An Annex III system that profiles natural persons remains high-risk, even if one of the four conditions appears to fit.

The draft uses the three elements of profiling: automated processing, personal data and evaluation of personal aspects. For an AI system, the practical question is usually whether the latter two are present. Ranking a person’s performance, reliability or behaviour requires that examination. A manager’s approval after the ranking does not remove the profiling.

Article 6(4): document the decision before release

A provider relying on the exemption must document its assessment before placing the system on the market or putting it into service. Registration in the EU database under Article 49(2) is still required.

Paragraphs 113–116 of the draft describe what the assessment should explain:

  1. The system’s intended purpose.
  2. The Annex III use case it would fall within under Article 6(2).
  3. The Article 6(3) condition relied on and why it applies.
  4. Why the system does not profile natural persons.

The competent authority can request that assessment and review the classification. The draft also encourages deployers to consult the register. Build an explanation that someone outside your development team can examine.

Article 25 · check your role

Using someone else’s AI can bring provider obligations.

If you change the intended purpose of a system already on the market or in service, previously not considered high-risk, so that it becomes high-risk, Article 25(1)(c) may apply to you.

Consider CVs: asking a general-purpose assistant to score and shortlist candidates may change its intended purpose. Using a tool already offered for recruitment according to its instructions does not, by itself, establish that change. A person making the final decision does not automatically exempt you.

Check whether you may take on provider obligations: three scenarios and other changes to review.

From obligations to work

What you need to organise.

Your company can hold different roles for different systems. For Annex I products, check the section and sectoral regime: these obligations do not automatically carry over to Section B.

If you act as a provider

Quality from development onwards.

Article 17 requires a quality management system. Quality and engineering need to implement requirements 9–15 and produce evidence to document and assess the system. EN 18286 is a voluntary reference. Presumption of conformity means that applying a harmonised standard cited in the Official Journal of the EU allows conformity to be presumed for the requirements it covers; check its status before relying on it.

What quality needs to prepare with engineering.

If you act as a deployer

Oversee and organise its use.

Article 26 requires you to organise human oversight, conditions of use, monitoring and logs. Also check whether a fundamental rights impact assessment (FRIA) is required: Article 27 does not require one from every deployer.

What to organise as a deployer and when a FRIA is required.

Before adopting AI or extending its use, product and quality need to review purpose, functionality and commitments.

For further reading

Consult what your situation needs.

The two general high-risk dates

Art. 6(2) · Annex III
Art. 6(1) · Annex I

Each date belongs to its route and applicable obligations. Check your system’s regime and the transitional provisions in the full calendar.

Dates measured on September 11, 2026 against ../vigilancia-regulatoria/fuentes.yaml (69a40d9). They are not copied from any other page of ours.

Full calendar: seven milestones and their conditions

The calendar separates high-risk obligations from transparency obligations and prohibitions. Each date has its own scope. A transitional deadline for systems already on the market is not the general start date for a requirement.

Application dates

  • Art. 50.2

    Machine-readable marking of synthetic content. This is transparency, not high risk, and the Regulation's general date applies to it.

    High risk: No· Already due

  • Art. 111.4

    Transitional deadline for synthetic-content systems placed on the market before the general application date.

    High risk: No

  • Art. 5

    The new prohibitions on non-consensual intimate material and child sexual abuse material start to apply.

    High risk: No

  • Art. 6(2) · Annex III

    High-risk systems by use case, those in Annex III, and the obligations that come with them.

    High risk: Yes

  • Art. 6(1) · Annex I

    AI systems that are regulated products or their safety components, subject to third-party conformity assessment. The relevant Annex I section determines the regime.

    High risk: Yes

  • Art. 111.2

    Deadline in the transitional provision for high-risk systems intended for public authorities; it does not replace the general application dates.

    High risk: Yes

  • Art. 111.1

    Components of the large-scale IT systems in Annex X covered by the transitional provision in Article 111(1).

    High risk: Yes

Dates measured on September 11, 2026 against ../vigilancia-regulatoria/fuentes.yaml (69a40d9). They are not copied from any other page of ours.

Two of these milestones fall on 2 December, one year apart, and only one of them is about high risk.

The public-authority and Annex X dates belong to specific transitional provisions. They do not replace the general dates for the two Article 6 routes.

Standards and presumption of conformity: status by requirement

The Act sets the requirement. A standard can help you implement it. Publication as a European standard and citation in the Official Journal are separate steps.

At the recorded measurement date, no harmonised AI Act standard has been cited in the Official Journal. Drafts and supporting standards can inform implementation; the obligation comes from the Act.

Presumption of conformity means the requirements covered by a harmonised standard can be presumed met when its reference is cited in the EU Official Journal and the system conforms to it; it does not establish compliance of the whole system.

Art. 9

RequirementRisk management system

StandardprEN 18228

StateDraft

Art. 10

RequirementData and data governance

StandardprEN 18283 · prEN 18284

StateDraft

Art. 11

RequirementTechnical documentation (Annex IV)

StandardISO/IEC 25623

StateNo harmonised draft

Art. 12

RequirementAutomatic logging

StandardprEN 18229-1

StateDraft

Art. 13

RequirementTransparency towards the deployer

StandardprEN 18229-2

StateDraft

Art. 14

RequirementHuman oversight

StandardprEN 18229-3

StateDraft

Art. 15

RequirementAccuracy, robustness and cybersecurity

StandardprEN 18229-4 · prEN 18229-5 · prEN 18282

StateDraft

Art. 17

RequirementQuality management system

StandardEN 18286

StateAdopted, not cited in the OJEU

There are also 22 supporting standards. A supporting standard is useful for the work; it confers no presumption of conformity.

Dates measured on September 11, 2026 against ../vigilancia-regulatoria/registros/presunciones.md (69a40d9). They are not copied from any other page of ours.

Article 11 is the only one of the eight requirements in this table without an associated harmonised draft. It does have a supporting standard, ISO/IEC 25623. That is different from having no standard at all.

EN 18286 has been adopted as a European standard, but its Official Journal citation is still pending at the recorded measurement date. Reading the status column matters as much as reading the standard number.

Harmonised standards are voluntary. Citation and coverage of each requirement determine whether presumption of conformity can be claimed.

The Act, draft guidelines and related reading

Consult the consolidated Act alongside the 2026 amendment.

The draft was published on 19 May 2026. The targeted consultation closed on 23 July 2026, following a four-week extension from 23 June. At the source check, the Commission still expected final adoption by the end of 2026, without specifying an exact date.

The consultation record provides those dates and links to the documents. The regulatory source review used here was recorded on 11 September 2026.

These are draft, non-binding guidelines. They address classification, not proof that a system meets the requirements. Examples may change; the draft also provides for consultation with the AI Board and further stakeholder feedback before adoption.

The draft predates the Omnibus amendment. Where the two differ, the amended Regulation governs: Article 6(5) authorises the Commission to issue guidance, not to replace the Act. This page uses the amended text for the calendar and the machinery regime.