Previous value: -"Does it make automated decisions with legal or significant effects?"New value: +"Does it make automated decisions with legal or similarly significant effects on people (credit, hiring, admissions…)? Adds GDPR art. 22 duties; high risk only if an Annex III domain applies."

Previous value: -"Biometric categorisation inferring sensitive attributes such as race, political opinion, religion or sexual orientation (prohibited, art. 5)."New value: +"Does it use biometric data (face, voice, gait…) to infer sensitive attributes — race, political opinion, religion, trade-union membership, sexual orientation (art. 5.1.g)? Prohibited. Ordinary face-unlock or liveness checks that don't infer these attributes are NOT this."

Previous value: -"AI embedded in an Annex I regulated product (toys, machinery, medical devices...). Moves the high-risk deadline to 2028-08-02."New value: +"Is the AI a safety component embedded in an Annex I regulated product (toys, machinery, medical devices…)? High risk via art. 6.1, deadline Aug 2, 2028."

Previous value: -"Emotion recognition in workplace or education settings (prohibited, art. 5)."New value: +"Does it infer emotions (frustration, attention, mood…) from employees at work or students in education, e.g. to flag disengaged staff or bored students (art. 5.1.f)? Prohibited. Emotion inference on end users of a public consumer product (not their employees/students) is NOT this."

Previous value: -"Does it generate text, images, audio or video shown to users?"New value: +"Does it generate text, images, audio or video shown to users? Triggers the art. 50 duty to label AI-generated content."

Previous value: -"Predicting an individual's criminal risk based solely on profiling or personality traits (prohibited, art. 5)."New value: +"Predicting an individual's criminal risk based solely on profiling or personality traits (art. 5.1.d)? Prohibited."

Previous value: -"Do people interact directly with the AI (chatbot, assistant…)?"New value: +"Do people interact directly with the AI (chatbot, voice assistant…)? Triggers the art. 50 duty to disclose they are talking to an AI."

Previous value: -"Subliminal/manipulative techniques or exploiting vulnerabilities (age, disability, social situation) causing harm (prohibited, art. 5)."New value: +"Does it use subliminal techniques beyond a person's consciousness, or exploit a known vulnerability (age, disability, specific social or economic situation) to materially distort behavior and cause harm — e.g. dark patterns targeting a diagnosed gambling addiction (art. 5.1.a-b)? Prohibited. Ordinary persuasive marketing or UX nudges aimed at the general population are NOT this."

Previous value: -"Does it do real-time biometric identification in public spaces?"New value: +"Real-time remote biometric identification in publicly accessible spaces (e.g. live face recognition)? High risk (Annex III biometrics) — prohibited only when combined with realtimeBiometricLawEnforcement."

Previous value: -"Does it score or rank people based on behavior or characteristics?"New value: +"Does it score people's social behavior or traits causing detrimental treatment in unrelated contexts, or disproportionate to the behavior (art. 5.1.c)? Prohibited. A seller rating or fitness points app is NOT this."

Previous value: -"Untargeted scraping of facial images from the internet or CCTV to build face-recognition databases (prohibited, art. 5)."New value: +"Does it untargetedly scrape facial images from the internet or CCTV footage to build or expand a face-recognition database (art. 5.1.e)? Prohibited. Matching a user's own consented selfie against their own ID photo is NOT this."

Previous value: -"Does the product use AI at all?"New value: +"Does the product use AI at all (LLM calls, recommendations, computer vision…)? false ⇒ minimal risk, the AI Act does not apply."

Previous value: -"Annex III high-risk domains that apply (e.g. employment, education, credit, health)."New value: +"Annex III high-risk domains that apply. Only these exact values count; anything else is not Annex III and must be left out."

Added value: +[
+  "biometrics",
+  "critical",
+  "education",
+  "employment",
+  "essential",
+  "law",
+  "migration",
+  "justice"
+]

Added value: +{
+  "default": false,
+  "description": "Only if realtimeBiometricPublic: is it used FOR LAW ENFORCEMENT purposes? That combination is prohibited under art. 5.1.h and already in force; any other use of public real-time biometric ID is high risk instead. Without this the prohibition can never be reached.",
+  "type": "boolean"
+}

Added value: +{
+  "default": false,
+  "description": "Biometric categorisation inferring sensitive attributes such as race, political opinion, religion or sexual orientation (prohibited, art. 5).",
+  "type": "boolean"
+}

Added value: +{
+  "default": false,
+  "description": "AI embedded in an Annex I regulated product (toys, machinery, medical devices...). Moves the high-risk deadline to 2028-08-02.",
+  "type": "boolean"
+}

Added value: +{
+  "default": false,
+  "description": "Emotion recognition in workplace or education settings (prohibited, art. 5).",
+  "type": "boolean"
+}

Added value: +{
+  "default": false,
+  "description": "Predicting an individual's criminal risk based solely on profiling or personality traits (prohibited, art. 5).",
+  "type": "boolean"
+}

Added value: +{
+  "default": false,
+  "description": "Subliminal/manipulative techniques or exploiting vulnerabilities (age, disability, social situation) causing harm (prohibited, art. 5).",
+  "type": "boolean"
+}

Added value: +{
+  "default": false,
+  "description": "Untargeted scraping of facial images from the internet or CCTV to build face-recognition databases (prohibited, art. 5).",
+  "type": "boolean"
+}