In short
- Article 6(3) of Regulation (EU) 2024/1689 lets a provider conclude that a system listed in Annex III is not high risk, if it meets one of 4 named conditions and poses no significant risk of harm.
- The conditions are narrow procedural task, improving a completed human activity, detecting deviations from prior decision patterns, and performing a preparatory task.
- Profiling of natural persons defeats the exemption outright. A system that profiles is always high risk, whichever of the 4 conditions it also satisfies.
- Article 6(4) requires the assessment to be documented before the system is placed on the market, and Article 49(2) requires registration of the system even though it is not high risk.
- The Commission guidelines promised for 2 February 2026 by Article 6(5) were still in draft when published on 19 May 2026, so the assessment is written against the text of the Regulation.
Annex III is a list of uses, not a list of verdicts. A system can appear on it and still fall outside the high-risk regime.
Article 6(3) of Regulation (EU) 2024/1689 is the provision that allows it, and it is written to be hard to satisfy by accident. Reading it as an escape hatch produces an undocumented decision that an auditor will treat as a gap.
01What does Article 6(3) actually say?
Two things that have to hold at once.
The first is a standard: the system does not pose a significant risk of harm to the health, safety or fundamental rights of natural persons, including by not materially influencing the outcome of decision making. The second is a list: the system must fall into one of four described roles.
Both limbs are required. A system that satisfies a condition but still shapes the outcome of an Annex III decision does not qualify, because the standard in the opening words is not met.
02Which of the four conditions tends to fail?
The preparatory one, because almost everything can be described as preparatory.
| Condition | What it covers | Where the claim usually breaks |
|---|---|---|
| (a) Narrow procedural task | Formatting, routing, classification of a document type | The task widens after launch |
| (b) Improves a completed human activity | Cleaning or ranking work a person already did | The human step quietly disappears |
| (c) Detects decision patterns or deviations | Flagging inconsistency against prior decisions | The flag becomes the decision |
| (d) Preparatory task | Assembling inputs for an assessment | The preparation determines the result |
Each failure mode is the same failure mode. The classification is written about the system as designed, and the system as operated drifts toward the decision. That drift is invisible unless someone re-reads the assessment against current behaviour, which is exactly the sort of evidence an audit asks to see rather than assumes.
03What does profiling do to the analysis?
It ends it.
The second subparagraph of Article 6(3) provides that an Annex III system is always to be considered high risk where it performs profiling of natural persons. There is no balancing here and no reference back to the four conditions. A system that profiles is high risk even if it performs the narrowest procedural task on the list.
This matters more than it first appears, because profiling in Union law is a broad concept covering automated evaluation of personal aspects of a person. A scoring step added to a document routing tool can move the whole system across the line.
04What has to exist before the system ships?
A dated document and a database entry.
| Duty | Provision | When |
|---|---|---|
| Document the not high-risk assessment | Article 6(4) | Before placing on the market |
| Register provider and system in the EU database | Article 49(2) | Before placing on the market |
| Provide the assessment to authorities on request | Article 6(4) | On request |
| Annex III high-risk obligations apply | Article 113 | 2 Dec 2027 |
| Commission guidelines due | Article 6(5) | 2 Feb 2026 |
The registration duty is the part most often missed. Article 49(2) puts a system that its provider considers not high risk into the same public database as high-risk systems, which means the exemption is asserted in public, in advance, under the provider’s name.
The guidelines row is worth reading twice. The Article 6(5) deadline of 2 February 2026 passed, a draft appeared on 19 May 2026, and the classification question became no easier in the meantime. The consequence is practical: the assessment is written against the text of the Regulation, and the deferral of the high-risk dates bought time to write it rather than a reason not to.
05What does a defensible exemption file contain?
An Article 6(3) exemption file needs four short answers and a review date.
Name the Annex III point the system touches. State which of the conditions (a) to (d) is relied on and why, in terms of what the system does rather than what it is called. State explicitly that the system does not perform profiling of natural persons, because that sentence is the one a regulator will look for first. Record who decided, on what date, and against which version of the system.
Then set a review trigger rather than a review date: any change to the intended purpose, any new output that feeds a decision, any removal of a human step. An exemption that was true at launch and untrue a year later is worse than no exemption, because the file proves the organisation understood the test.
06Frequently asked questions
Can a system listed in Annex III avoid high-risk classification?
Yes, under Article 6(3), if it does not pose a significant risk of harm to health, safety or fundamental rights, including by not materially influencing the outcome of decision making, and it meets one of four conditions listed in that paragraph.
What are the four conditions in Article 6(3)?
The system performs a narrow procedural task, improves the result of a previously completed human activity, detects decision-making patterns or deviations from prior patterns without replacing or influencing the earlier human assessment absent proper human review, or performs a preparatory task to a relevant assessment.
Does profiling block the Article 6(3) exemption?
Yes, absolutely. The second subparagraph of Article 6(3) provides that an Annex III system is always high risk where it performs profiling of natural persons, regardless of which condition it would otherwise satisfy.
Do you still have to register a system you decided is not high risk?
Yes. Article 6(4) requires the provider to document the assessment before placing the system on the market, and Article 49(2) requires the provider to register themselves and the system in the EU database, which makes the exemption a visible decision rather than a silent one.
07References and method
- Regulation (EU) 2024/1689, Article 6(3) for the four conditions and the profiling carve-out, Article 6(4) for the documentation duty, Article 6(5) for the guidelines deadline of 2 February 2026 and Article 49(2) for the registration duty.
- Article 6 of Regulation (EU) 2024/1689 in the consolidated presentation, checked on 23 September 2026 for the wording of conditions (a) to (d) and for the paragraphs added by Regulation (EU) 2026/1744.
- Draft Commission guidelines on the classification of high-risk AI systems, published 19 May 2026 and still in draft when consulted on 23 September 2026. Reports that the consultation deadline was extended into July 2026 are marked here as reported, not read from the Commission page.
- Regulation (EU) 2026/1744, for the Annex III high-risk application date of 2 December 2027 that sets when the classification question becomes operative.