From the journal

European Commission Publishes Draft Guidelines Classifying High-Risk AI Systems Under Article 6, May 2026

On May 19, 2026, the European Commission published draft guidelines on the classification of high-risk AI systems under Article 6 of Regulation (EU) 2024/1689 (EU AI Act), open for consultation until June 23, 2026. The guidelines interpret key classification concepts and provide worked examples across eight Annex III sectors. The Commission has also postponed Article 6(2) compliance from August 2026 to December 2027 and Article 6(1) from August 2027 to August 2028.

3 min read

On May 19, 2026, the European Commission published draft guidelines on the classification of high-risk AI systems under Article 6 of Regulation (EU) 2024/1689, the EU AI Act. The guidelines are in the consultation stage, open for public comment until June 23, 2026. Once finalised, they will guide AI providers, deployers, and national market surveillance authorities across the European Economic Area in determining whether a given AI system meets the statutory high-risk threshold.

Article 6 of the EU AI Act provides two pathways to high-risk classification. Under Article 6(1), an AI system is high-risk if it operates as a safety component of a product covered by Annex I harmonisation legislation and the product requires third-party conformity assessment. Under Article 6(2), an AI system is high-risk if it falls within a use case listed in Annex III, subject to the filtering mechanism in Article 6(3) that can exclude systems posing no significant risk. The Commission has postponed the Article 6(2) application date from 2 August 2026 to 2 December 2027 and the Article 6(1) date from 2 August 2027 to 2 August 2028. The draft guidelines interpret key definitional terms and provide worked examples across eight Annex III sectors.

AI providers placing systems on the EU market, deployers using Annex III applications in employment, credit scoring, education, law enforcement, border control, or judicial proceedings, and national competent authorities acting as market surveillance bodies must apply the Article 6 classification logic before the postponed compliance dates. Providers of AI tools used in recruitment screening, employee performance evaluation, or consumer credit access will find the most directly applicable guidance in the draft guidelines' worked examples for those sectors.

The Article 6(3) filtering mechanism for Annex III systems posing no significant risk remains the subject of interpretive uncertainty. The draft guidelines set out general principles for applying the filter but do not address many commercially common product configurations in detail. Industry participants have raised concerns that the worked examples leave substantial grey areas unresolved. The Commission's final position may shift following consultation submissions before June 23, 2026.

Licentium advises clients on EU AI Act compliance strategy and Article 6 classification analysis and can draw on a partner network with regulatory counsel across EU member states. AI developers and operators determining whether specific systems qualify as high-risk before the postponed application dates may benefit from a classification assessment against the draft guidelines. Work we undertake includes EU AI Act high-risk classification reviews, compliance gap analysis, Annex III sector-specific risk assessments, and EU regulatory advisory for AI product launches.

Source: European Commission, Draft Guidelines on the Classification of High-Risk AI Systems under Article 6 of the EU AI Act, published 19 May 2026, consultation closes 23 June 2026

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.