AI Governance Engineer
GitHub

Annex III

By Updated

The AI Act annex listing high-risk use cases (biometrics, critical infrastructure, education, employment, essential services, law enforcement, migration, justice); obligations for these phase in under the Digital Omnibus timeline 1.

Developed in
ch. 18, High-risk through use (Annex III)
Chapters
ch. 08, Regulatory Map · ch. 18, EU AI Act
Contrast with
Annex I (EU AI Act)
Source
1 numbered reference, listed below

Where it is used

13 chapters of the Body of Knowledge use the term. Each link opens the first section that does.

Annex III: mentions per chapter122 mentions of the term across 13 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter02 Why Now: 3 mentions02 Why Now308 Regulatory Map: 51 mentions08 Regulatory Map5112 Governance Program: 2 mentions12 Governance Program213 Risk Management: 2 mentions13 Risk Management214 Development: 10 mentions14 Development1015 Deployment: 5 mentions15 Deployment516 Fairness & XAI: 7 mentions16 Fairness & XAI717 Incidents: 3 mentions17 Incidents318 EU AI Act: 26 mentions18 EU AI Act2619 Privacy & AI: 4 mentions19 Privacy & AI420 Existing Law: 7 mentions20 Existing Law722 Principles & Standards: 1 mention22 Principles & Standards123 AI Agents: 1 mention23 AI Agents1No mentions in the other 10 chaptersSource: the Body of Knowledgev0.5.0
Annex III: mentions per chapter122 mentions of the term across 13 of the 23 chapters of the Body of Knowledge; the chapters the glossary cross-references are drawn solid.Cross-referenced chapterOther chapter000102 Why Now: 3 mentions302030405060708 Regulatory Map: 51 mentions5108101112 Governance Program: 2 mentions21213 Risk Management: 2 mentions21314 Development: 10 mentions101415 Deployment: 5 mentions51516 Fairness & XAI: 7 mentions71617 Incidents: 3 mentions31718 EU AI Act: 26 mentions261819 Privacy & AI: 4 mentions41920 Existing Law: 7 mentions7202122 Principles & Standards: 1 mention12223 AI Agents: 1 mention123Source: the Body of Knowledge v0.5.0
Mentions per chapter How often each chapter names the term, with the chapters the glossary cross-references drawn solid. The longest bar is where to read the term in use; bars spread across many chapters mark a term that runs through the discipline.
Mentions as a table
Mentions of Annex III per chapter
ChapterMentionsCross-referenced
00 Preface0No
01 Definition0No
02 Why Now3No
03 Values & Principles0No
04 The Stack0No
05 Patterns0No
06 The Role0No
07 Maturity Model0No
08 Regulatory Map51Yes
10 Reading List0No
11 AI Defined0No
12 Governance Program2No
13 Risk Management2No
14 Development10No
15 Deployment5No
16 Fairness & XAI7No
17 Incidents3No
18 EU AI Act26Yes
19 Privacy & AI4No
20 Existing Law7No
21 AI Laws Worldwide0No
22 Principles & Standards1No
23 AI Agents1No

Patterns that use this term

6 pattern pages use the term, most mentions first.

Annex III: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastColour: stack layer of the pattern01 Govern-as-Code04 Runtime Controls05 AssuranceAnnex IIIRelated terms (7)Article 6(3) filter · RelatedArticle 6(3) filterClassification decision record · RelatedClassification decision recordConformity assessment · RelatedConformity assessmentDigital Omnibus · RelatedDigital OmnibusHigh-risk AI system · RelatedHigh-risk AI systemProfiling override · RelatedProfiling overrideRight to explanation (AI Act Art. 86) · RelatedRight to explanationContrast with (1)Annex I (EU AI Act) · ContrastAnnex I (EU AI Act)Patterns using it (6)Decision Notice & Contest Path, 3 mentions · Uses the termDecision Notice & Contest PathDisclosure & Notification Pipeline, 1 mention · Uses the termDisclosure & Notification…Explanation Artefact, 1 mention · Uses the termExplanation ArtefactFRIA-as-Code, 2 mentions · Uses the termFRIA-as-CodeStaged Rollout with Rollback Criteria, 1 mention · Uses the termStaged RolloutUse-Case Intake & Risk Tiering, 6 mentions · Uses the termUse-Case Intake & Risk Tiering
Annex III: related terms and patternsThe term at the centre; related terms on solid edges, the terms it is contrasted with on dashed edges, and the patterns that use it most in the colour of their layer.RelatedContrastColour: stack layer of the pattern01 Govern-as-Code04 Runtime Controls05 AssuranceRelated terms (7)Article 6(3) filter · RelatedArticle 6(3) filterClassification decision record · RelatedClassification decision recordConformity assessment · RelatedConformity assessmentDigital Omnibus · RelatedDigital OmnibusHigh-risk AI system · RelatedHigh-risk AI systemProfiling override · RelatedProfiling overrideRight to explanation (AI Act Art. 86) · RelatedRight to explanationContrast with (1)Annex I (EU AI Act) · ContrastAnnex I (EU AI Act)Patterns using it (6)Decision Notice & Contest Path, 3 mentions · Uses the termDecision Notice & Contest PathDisclosure & Notification Pipeline, 1 mention · Uses the termDisclosure & Notification…Explanation Artefact, 1 mention · Uses the termExplanation ArtefactFRIA-as-Code, 2 mentions · Uses the termFRIA-as-CodeStaged Rollout with Rollback Criteria, 1 mention · Uses the termStaged RolloutUse-Case Intake & Risk Tiering, 6 mentions · Uses the termUse-Case Intake & Risk TieringAnnex III
The term's neighbourhood Terms related to this one on solid edges, terms it is often confused with on dashed edges, and the patterns that use it most in the colour of their layer. Follow a dashed edge to check the distinction before you use either term.
Neighbourhood as a table
Neighbourhood of Annex III
FamilyItemRelation
Related termsArticle 6(3) filterRelated
Related termsClassification decision recordRelated
Related termsConformity assessmentRelated
Related termsDigital OmnibusRelated
Related termsHigh-risk AI systemRelated
Related termsProfiling overrideRelated
Related termsRight to explanation (AI Act Art. 86)Related
Contrast withAnnex I (EU AI Act)Contrast
Patterns using itDecision Notice & Contest Path, 3 mentionsUses the term
Patterns using itDisclosure & Notification Pipeline, 1 mentionUses the term
Patterns using itExplanation Artefact, 1 mentionUses the term
Patterns using itFRIA-as-Code, 2 mentionsUses the term
Patterns using itStaged Rollout with Rollback Criteria, 1 mentionUses the term
Patterns using itUse-Case Intake & Risk Tiering, 6 mentionsUses the term
  • Right to explanation (AI Act Art. 86)

    The right of a person affected by a deployer's decision based on an Annex III high-risk system's output, with legal or similarly significant adverse effects…

  • Classification decision record

    A versioned registry record of why a system sits on a given rung of the AI Act risk ladder: the Annex III point, any Article 6(3) condition relied on, an…

  • Conformity assessment

    The procedure by which a provider shows a high-risk AI system meets the EU AI Act before placing it on the market: internal control for most Annex III…

  • Article 6(3) filter

    The derogation under which an Annex III system is not high-risk when it poses no significant risk of harm and meets one of four conditions (narrow procedural…

  • High-risk AI system

    Under the EU AI Act, an AI system that is a safety component of, or itself, a product under Annex I legislation needing third-party conformity assessment, or…

  • Profiling override

    The rule in the third subparagraph of AI Act Article 6(3) that an Annex III system which performs profiling of natural persons is always high-risk, whichever…

  • Digital Omnibus

    The 2026 reform package amending the EU AI Act (in force 27 Jul 2026), which adjusted the high-risk timeline, added AI Office investigation powers and…

Sources

  1. [1] Regulation (EU) 2024/1689 (AI Act), consolidated text as amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI, in force 27 Jul 2026; definitions in Art. 3, incl. 3(1), 3(3) to 3(14), 3(14b), 3(20), 3(22), 3(23), 3(29) to 3(32), 3(49), 3(55) to 3(57), 3(60), 3(61), 3(63), 3(68); Arts. 4, 5, 6 (incl. 6(3) third subparagraph, profiling), 9, 10, 11, 13, 14, 15, 17, 22 to 27 (incl. 26(11)), 40, 41, 43, 47, 48, 50, 53 (incl. 53(1)(c)), 55, 57, 60, 72, 73, 86; Annexes I, III, IV). Publications Office of the EU (EUR-Lex). 2026-07-27. https://eur-lex.europa.eu/eli/reg/2024/1689/2026-07-27/eng (verified: primary)

Definitions of legal terms paraphrase the cited text, which governs. Dated statements are as of .

Cite this term

García Aibar, J. (2026). Annex III. In AI Governance Engineering: The Thesis & Body of Knowledge (v0.5.0), Glossary. https://doi.org/10.5281/zenodo.22956197. https://aigovernanceengineer.com/glossary/annex-iii. CC BY 4.0

BibTeX

@misc{aige2026annexiii,
  author  = {Jorge García Aibar},
  title   = {{Annex III}},
  note    = {Glossary, AI Governance Engineering: The Thesis \& Body of Knowledge, version 0.5.0},
  year    = {2026},
  doi     = {10.5281/zenodo.22956197},
  url     = {https://aigovernanceengineer.com/glossary/annex-iii}
}