What makes an industry use high-risk?
A system falls under when its matches a listed use, subject to Article 6(3). A covered product or can separately be high-risk under Article 6(1). Keep both checks: the product route does not itself put a system in Annex III. The Commission FAQ explains that classification follows function, specific purpose and conditions of use.
A predictive-maintenance dashboard, production-quality analytics tool or internal knowledge assistant is not high-risk solely because a factory, utility, insurer, bank or public-sector supplier uses it. Check for a listed purpose, such as recruitment, worker management, creditworthiness, life or health insurance pricing, emergency triage or a in specified infrastructure. Biometrics, education, law enforcement, migration, justice and democratic processes also need a use-specific check.
Commission examples and draft classification guidelines can help apply the rule, but they do not add an category. Record the exact Annex III point, the system's , and the deployment facts instead of classifying from an industry label or an example alone.
- Start with the provider's , instructions for use, technical documentation, sales materials, and actual deployment context.
- Check Article 6(1) first if the AI is a product or covered by Annex I legislation and the product requires third-party conformity assessment.
- Check Article 6(2) and next if the system is used for a listed area involving people, rights, access, employment, public services, infrastructure safety, or public authority decisions.
- Do not classify a system as high-risk just because the customer is in an industrial sector or the model uses operational, employee, financial, or safety-related data.
- Treat differently: Article 6(3) says an system is always high-risk where it performs profiling of natural persons.
Is all AI used by industry high-risk?
No. A system used by an industrial company falls under only when its matches a listed use case, subject to the limited Article 6(3) exception. Separately, a system can be high-risk under the product or safety-component route in Article 6(1); Article 6(3) does not remove that classification.
Citations (2)
- Regulation (EU) 2024/1689 (EU AI Act)
Supports the Article 6 classification sequence, Annex III high-risk areas, Article 6(3) exception, provider documentation duty, and Annex VIII registration fields.
AI systems referred to in Annex III shall be considered to be high-risk.
- European Commission FAQ - Navigating the AI Act
Supports the intended-purpose classification approach and Commission examples of Annex III high-risk areas.
The risk classification is based on the intended purpose of the AI system.