Annex III High-Risk AI Systems

Annex III of the eu-ai-act-regulation-2024-1689 lists AI systems classified as high-risk across eight specific areas. These systems are subject to the strict requirements of Chapter III, Section 2.

1. Biometrics

(where use is permitted under relevant law)

• Remote biometric identification systems (excluding verification)
• Biometric categorization based on sensitive/protected attributes
• Emotion recognition systems

2. Critical Infrastructure

• Safety components for critical digital infrastructure management
• Road traffic management systems
• Supply of water, gas, heating, or electricity

3. Education and Vocational Training

• Access/admission determination systems
• Learning outcome evaluation systems
• Educational level assessment systems
• Student behavior monitoring during tests

4. Employment and Worker Management

• Recruitment and selection systems
• Work relationship decision systems (terms, promotion, termination)
• Task allocation based on behavior/traits
• Performance and behavior monitoring

5. Essential Services and Benefits

• Public assistance eligibility evaluation
• Creditworthiness evaluation and credit scoring
• Life and health insurance risk assessment
• Emergency call evaluation and dispatch systems

6. Law Enforcement

(where use is permitted under relevant law)

• Victim risk assessment systems
• Polygraphs and similar tools
• Evidence reliability evaluation
• Offender risk assessment (not solely based on profiling)
• Criminal profiling systems

7. Migration, Asylum and Border Control

(where use is permitted under relevant law)

• Polygraphs and similar tools
• Risk assessment for persons entering territory
• Application examination assistance
• Person detection/recognition (excluding travel document verification)

8. Administration of Justice and Democratic Processes

• Judicial research and interpretation assistance
• Election/referendum influence systems (excluding administrative tools)

Dynamic List

The Commission can amend this list through delegated acts based on risk assessment criteria in Article 7.