High-risk AI guide · Annex III

Annex III point 1

High-risk AI in biometrics

Biometric AI needs early scoping because identification, categorisation and emotion recognition can each trigger a different route.

What falls in scope?

Remote biometric identification.

Biometric categorisation using sensitive or protected attributes.

Emotion recognition, especially in work and education contexts.

Check first whether Article 5 prohibits the use case.

When to review first?

Facial recognition in public or semi-public spaces

Matching against a reference database

Emotion, stress or attention classification

Biometric categories that steer access or treatment

What should a first review deliver?

Article 5 prohibition check

GDPR/DPIA and biometric data

Human oversight and error margins

Bias and representativeness questions

Recognisable situations

1

Remote ID

AI matches camera footage against a database to recognise a person.

2

Categorisation

The system infers protected or sensitive attributes from biometric signals.

3

Emotion

A tool estimates stress, attention or behaviour from face or voice signals.

Based on official sources

This page is a practical guide for first classification and preparation. For legal decisions, a full system and context review remains necessary.

View official Annex III text

Make this concrete for your systems.

Start with the Gap Intake and share which AI systems, suppliers and processes are in scope. Then we can sharpen the classification and first evidence route.