Annex III: High-risk AI systems referred to in Article 6(2)

Eight use-case domains: (1) biometrics; (2) critical infrastructure; (3) education & vocational training; (4) employment & worker management; (5) access to essential private & public services; (6) law enforcement; (7) migration, asylum & border control; (8) administration of justice & democratic processes. Matching a domain is necessary but not sufficient — the system must also perform a function the domain's text lists.

The eight high-risk domains

Matching a domain is necessary but not sufficient — the system must also perform a listed function (Article 6(2)).

• 1. Biometrics — Remote biometric identification, biometric categorisation according to sensitive/protected attributes, and emotion…
• 2. Critical infrastructure — AI used as a safety component in the management and operation of critical digital infrastructure, road traffic, or the…
• 3. Education & vocational training — AI determining access or admission, evaluating learning outcomes, assessing the appropriate level of education, or…
• 4. Employment & worker management — AI for recruitment or selection (targeting, screening, evaluating candidates), and for decisions on terms, promotion,…
• 5. Access to essential services — AI evaluating eligibility for public assistance benefits, creditworthiness / credit scoring, risk assessment and…
• 6. Law enforcement — AI used by or for law-enforcement authorities for individual risk assessment, as polygraphs, to evaluate evidence…
• 7. Migration, asylum & border control — AI as polygraphs, for risk assessment (security, irregular migration, health), to examine applications for…
• 8. Justice & democratic processes — AI intended to assist a judicial authority in researching and interpreting facts and the law and applying it, or to…

Related obligations

• Classify the system against Article 6 / Annex III

Legal source

Annex III AIA · Commission draft HRAI guidelines, 19 May 2026

Not legal advice. This is a practitioner reference generated from a cited knowledge base built on the primary legal text and official Commission guidance. Verify against the cited primary sources before relying on it for a compliance decision. See editorial standards & methodology.