[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:eu-ai-act\u002F5":3},{"item":4,"lessons":16,"controls":50,"related":66},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"eu-ai-act","5","Article 5","Prohibited AI practices",8,"European Union","**What it asks for.** Article 5 lists AI practices that are banned in the EU because they pose unacceptable risk. These include manipulative or deceptive techniques that cause significant harm, exploiting vulnerabilities of specific groups, certain social scoring, predicting criminal offences based solely on profiling, untargeted scraping to build facial recognition databases, emotion recognition in workplaces and education with limited exceptions, certain biometric categorisation, and, with narrow exceptions, real time remote biometric identification in public spaces for law enforcement.\n\n**In practice.** Organisations screen existing and planned AI uses against the prohibitions, document the assessment and stop or redesign anything that falls within them. Procurement checks should cover vendor functionality too. Evidence includes screening records and decisions.\n\n**Common gaps.** Emotion recognition and biometric features in HR or security tools are easy to miss. Screening is often done once rather than as part of every new AI use.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj","Read the AI Act on EUR-Lex","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46],{"slug":19,"title":20,"published_at":21},"microsofts-ai-code-of-conduct-draws-hard-lines-on-offensive-cyber-capabilities","Microsoft's AI Code of Conduct Draws Hard Lines on Offensive Cyber Capabilities","2026-09-15T10:20:50.628+00:00",{"slug":23,"title":24,"published_at":25},"deepfake-pornography-sites-target-100-female-politicians-across-europe","Deepfake Pornography Sites Target 100+ Female Politicians Across Europe","2026-09-14T12:20:42.789+00:00",{"slug":27,"title":28,"published_at":29},"ai-chatbot-misuse-houthi-users-attempted-weapons-development-via-claude","AI Chatbot Misuse: Houthi Users Attempted Weapons Development via Claude","2026-09-12T02:20:22.624+00:00",{"slug":31,"title":32,"published_at":33},"ai-scores-perfect-100-on-exploit-benchmark-a-wake-up-call-for-defenders","AI Scores Perfect 100% on Exploit Benchmark — A Wake-Up Call for Defenders","2026-09-04T10:21:23.892+00:00",{"slug":35,"title":36,"published_at":37},"kriminal-ai-platform-lowers-barrier-to-entry-for-cybercrime","Kriminal AI Platform Lowers Barrier to Entry for Cybercrime","2026-08-19T22:21:06.396+00:00",{"slug":39,"title":40,"published_at":41},"hugging-face-ai-models-weaponized-for-deepfake-nonconsensual-imagery","Hugging Face AI Models Weaponized for Deepfake Nonconsensual Imagery","2026-07-28T06:20:19.112+00:00",{"slug":43,"title":44,"published_at":45},"grok-and-stable-diffusion-sued-for-ai-generated-csam-failures","Grok and Stable Diffusion Sued for AI-Generated CSAM Failures","2026-07-07T22:20:55.46+00:00",{"slug":47,"title":48,"published_at":49},"ai-workplace-monitoring-systems-face-gdpr-and-ai-act-compliance-requirements","AI Workplace Monitoring Systems Face GDPR and AI Act Compliance Requirements","2026-06-02T12:07:02.048+00:00",[51,56,61],{"slug":52,"name":53,"problem":54,"stories":55},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",7,{"slug":57,"name":58,"problem":59,"stories":60},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",2,{"slug":62,"name":63,"problem":64,"stories":65},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",1,[67,72,78,83,88,93,98,101],{"family":68,"item":69,"code":70,"title":71,"together":55},"nist-ai-rmf","overview","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)",{"family":73,"item":74,"code":75,"title":76,"together":77},"nist-800-53","si-10","SI-10","Information Input Validation",4,{"family":79,"item":80,"code":81,"title":82,"together":77},"gdpr","25","Article 25","Data protection by design and by default",{"family":84,"item":85,"code":86,"title":87,"together":77},"cis","3","Control 3","Data Protection",{"family":84,"item":89,"code":90,"title":91,"together":92},"16","Control 16","Application Software Security",3,{"family":94,"item":95,"code":96,"title":97,"together":92},"iso","42001","ISO\u002FIEC 42001","ISO\u002FIEC 42001: Artificial intelligence management system",{"family":99,"item":69,"code":100,"title":100,"together":92},"itil","ITIL",{"family":73,"item":102,"code":103,"title":104,"together":92},"ac-2","AC-2","Account Management"]