From the journal

European Commission Issues Draft Guidelines on High-Risk AI System Classification, EU, May 2026

On 19 May 2026, the European Commission published draft guidelines on the classification of high-risk AI systems under Article 6 of Regulation (EU) 2024/1689, the EU AI Act. A targeted public consultation is open until 23 July 2026. The guidelines aim to assist providers, deployers, and market surveillance authorities in determining which AI systems trigger the Act's most onerous compliance obligations. Final guidelines are expected before end of 2026.

2 min read

On 19 May 2026, the European Commission published draft guidelines on the classification of high-risk AI systems and opened a targeted public consultation. The consultation deadline was subsequently extended to 23 July 2026. The guidelines are non-binding at this stage and will not take effect until the Commission adopts them in final form, which is expected before the end of 2026.

The draft guidelines interpret Article 6 of Regulation (EU) 2024/1689, the EU AI Act. Article 6(1) covers AI systems embedded in products subject to Union harmonised product safety legislation. Article 6(2) covers AI systems whose use can significantly affect the health, safety, or fundamental rights of natural persons in the use cases listed in Annex III. Annex III sectors include biometric identification, critical infrastructure, education, employment, essential private and public services, law enforcement, migration, and administration of justice. The draft guidelines set out general classification principles and a non-exhaustive list of examples across each Annex III sector.

Providers of AI systems operating in Annex III sectors must assess whether their products meet the Article 6 classification threshold. A positive classification triggers the full set of high-risk obligations in Chapter III of the EU AI Act, including conformity assessments, technical documentation, logging requirements, human oversight measures, and registration in the EU database. Deployers of high-risk AI systems face parallel requirements covering monitoring, incident reporting, and data governance. Market surveillance authorities in each Member State will apply the final guidelines when deciding whether to open enforcement proceedings.

Article 6(3) of the EU AI Act exempts from high-risk classification AI systems that perform a narrow procedural task, improve the outcome of a previously completed human activity, detect decision-making patterns without influencing individual decisions, or prepare tasks for human assessment. The draft guidelines do not fully define the boundaries of these exclusions, creating scope for divergent interpretations among national market surveillance authorities before the final text is adopted. Consultation responses are accepted until 23 July 2026.

Licentium advises AI system providers and deployers on EU AI Act classification and compliance. If you are assessing whether your AI product is high-risk under Article 6, we can assist with classification analysis and readiness planning. Work we undertake includes EU AI Act conformity assessment support, Annex III classification analysis, technical documentation review, and regulatory consultation strategy.

Source: European Commission, Draft Commission Guidelines on the Classification of High-Risk AI Systems, 19 May 2026

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.