High-risk AI guide · Annex III

Annex III point 2

High-risk AI in critical infrastructure

AI in critical infrastructure turns on operational impact: does the system steer priority, recovery, safety or availability?

What falls in scope?

Critical digital infrastructure.

Road traffic and traffic management.

Water, gas, heating and electricity supply.

AI as safety component or operational decision support.

When to review first?

Incident detection and recovery priority

Traffic lights or incident response

Load forecasting with operational effect

Security or availability decisions

What should a first review deliver?

Operational decision function

Fallback and escalation scenarios

Human override

Robustness, cybersecurity and logging

Recognisable situations

1

Digital infrastructure

AI prioritises incidents in a cloud or network operation.

2

Traffic

AI supports traffic lights or incident detection.

3

Utilities

AI recommends recovery order after disruptions.

Based on official sources

This page is a practical guide for first classification and preparation. For legal decisions, a full system and context review remains necessary.

View official Annex III text

Make this concrete for your systems.

Start with the Gap Intake and share which AI systems, suppliers and processes are in scope. Then we can sharpen the classification and first evidence route.