[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:eu-ai-act\u002F6":3},{"item":4,"lessons":16,"controls":22,"related":27},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"eu-ai-act","6","Article 6","Classification rules for high-risk AI systems",1,"European Union","**What it asks for.** An AI system is high-risk if it is a safety component of, or is itself, a product covered by the Union harmonisation legislation listed in Annex I and that product must undergo third-party conformity assessment. Systems used in the areas listed in Annex III, such as employment, education, credit scoring, essential services, law enforcement and migration, are also high-risk.\n\n**In practice.** An Annex III system is not high-risk where it does not pose a significant risk of harm, for example when it performs a narrow procedural task, improves the result of a completed human activity, detects decision patterns without replacing human assessment, or performs a preparatory task. A system that profiles natural persons is always high-risk. A provider relying on this derogation must document its assessment before placing the system on the market and register the system. Organisations should keep an AI inventory with a recorded classification decision, rationale and owner for each system.\n\n**Common gaps.** Organisations often classify systems informally, rely on the derogation without written assessment, or overlook profiling, which removes the exemption.",null,"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002Foj","Read the AI Act on EUR-Lex","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18],{"slug":19,"title":20,"published_at":21},"dual-use-ai-models-pose-unavoidable-national-security-risk","Dual-Use AI Models Pose Unavoidable National Security Risk","2026-06-16T18:20:20.398+00:00",[23],{"slug":24,"name":25,"problem":26,"stories":9},"ai-security","AI application security","Prompt injection, data leaks through AI tools and unapproved AI use get caught.",[28,33,37,42,46,50,55,59],{"family":29,"item":30,"code":31,"title":32,"together":9},"cis","16","Control 16","Application Software Security",{"family":29,"item":34,"code":35,"title":36,"together":9},"3","Control 3","Data Protection",{"family":38,"item":39,"code":40,"title":41,"together":9},"gdpr","25","Article 25","Data protection by design and by default",{"family":43,"item":44,"code":45,"title":45,"together":9},"itil","overview","ITIL",{"family":47,"item":44,"code":48,"title":49,"together":9},"mitre-atlas","ATLAS","MITRE ATLAS (Adversarial Threat Landscape for AI Systems)",{"family":51,"item":52,"code":53,"title":54,"together":9},"nist-800-53","ac-20","AC-20","Use of External Systems",{"family":51,"item":56,"code":57,"title":58,"together":9},"ra-3","RA-3","Risk Assessment",{"family":60,"item":44,"code":61,"title":62,"together":9},"nist-ai-rmf","AI RMF 1.0","AI Risk Management Framework (AI RMF 1.0)"]