AI regulations: European Union
Coming into forceApplies from 2 December 2027· European Union

EU AI Act: obligations for high-risk AI (Annex III)

BuildAIPolicy Research · Added 27 October 2026 · Last checked 27 October 2026

What it is

High-risk AI systems listed in Annex III, such as those used in employment, credit, education and access to essential services, will have to meet requirements including risk management, human oversight and documentation. Deployers have their own duties, such as following instructions for use and monitoring the system.

Who it affects

Providers of high-risk AI systems, and organisations that use them in the EU.

What to consider

  • Find out whether any AI you use falls under Annex III.
  • Ask your suppliers how they plan to meet the requirements.

Sources

Put rules like this into practice

The AI Policy & Risk Pack gives your organisation an AI use policy, a risk register, an AI tool inventory and notice wording, written from how you use AI. Preview every section free before you pay. It isn't legal advice.

Get alerts when AI rules change

An email when we add or update an entry for the regions you choose.

Regions

A general summary of public information, checked against the sources listed on the date shown. It isn't legal advice and may not cover every rule that applies to you. Check the sources, and get professional advice for your situation.