The Article 6(3) Exemption: When an Annex III System Isn't High-Risk
An Annex III system escapes high-risk under Article 6(3) if it meets one of four conditions. But profiling is always high-risk, and you still register.
Landing in Annex III does not automatically make your AI system high-risk. Article 6(3) of the EU AI Act, Regulation (EU) 2024/1689, carves out an exemption: an Annex III system is not high-risk if it "does not pose a significant risk of harm to the health, safety or fundamental rights of natural persons" — including where it "does not materially influence the outcome of decision-making." Meet any one of four conditions and the high-risk stack falls away.
This is the most under-used provision in the classification rules, and the most over-claimed. The exemption is real, but narrow — and one carve-out swallows the rest: a system that profiles natural persons is always high-risk, no matter which condition it would otherwise satisfy.
The four conditions — meeting one is enough
A system whose intended purpose falls within an Annex III area escapes high-risk status if it does one or more of the following (Article 6(3), second subparagraph):
| Condition | What it covers | Plain-English test |
|---|---|---|
| (a) Narrow procedural task | The system performs a limited, well-defined procedural step | Does it just sort, route, or format — not judge? |
| (b) Improving a completed human activity | It refines the result of work a human already finished | Is a person's decision already made before the system runs? |
| (c) Detecting decision-making patterns or deviations | It flags anomalies without replacing or influencing the human assessment | Does it surface patterns for a human, leaving their judgment untouched? |
| (d) Preparatory task | It prepares for an assessment relevant to an Annex III use case | Is it groundwork only, with the substantive call made elsewhere? |
The logic is consistent: these are uses where the AI does not make or materially shape a consequential decision about a person. The decision stays with a human, or has already been made, or hasn't been reached yet.
The profiling override — read this before you celebrate
There is a hard limit. Under Article 6(3), third subparagraph, the exemption never applies to a system that performs profiling of natural persons. Profiling here carries its GDPR Article 4(4) meaning: any automated processing that evaluates personal aspects — predicting performance, economic situation, health, preferences, behaviour, location, or movements.
So a CV-screening tool that scores candidates by inferring their traits is profiling — high-risk, full stop, even if you tried to frame it as a "preparatory task." A tool that only de-duplicates application records and forwards them, evaluating no one, is not profiling and may qualify under condition (a). The override is the line between the two.
You assess it, you document it — and you still register
The exemption is not self-executing. The provider runs the assessment before placing the system on the market, and Article 6(4) requires that assessment to be documented — kept on file and produced to authorities on request. Get it wrong in your favour and you are an unregistered, undocumented high-risk provider.
There is a second trap. Even when a provider concludes a system is exempt under Article 6(3), it must still register the system in the EU database — Article 49(2) requires registration of Annex III systems that the provider considers not high-risk. The exemption removes the Article 8–15 obligations; it does not remove the registration duty. The Commission is to publish guidance and a practical list of examples of high-risk and non-high-risk use cases (Article 6(5)) to steer these calls.
Worked example: Lerntech GmbH, ~120 employees, ~€19M turnover
Lerntech, a German edtech vendor, ships two features. Feature A schedules exam-room bookings for universities — it reads timetables and allocates rooms. Feature B scores essay answers and feeds the score into a student's final grade.
- Feature A touches "education and vocational training" (Annex III, point 3) only at the edges. Its intended purpose is a narrow procedural task — room allocation — that does not evaluate any student. It profiles no one. Condition (a) applies; Lerntech documents the assessment under Article 6(4), still registers under Article 49(2), and treats the feature as not high-risk.
- Feature B evaluates students and materially influences the grading outcome. That is squarely Annex III high-risk; no condition rescues it, and it profiles natural persons regardless. Lerntech runs the full high-risk programme for Feature B: risk management (Article 9), data governance (Article 10), technical documentation (Article 11 / Annex IV), human oversight (Article 14), conformity assessment (Article 43), and registration (Article 49).
One vendor, one Annex III heading, two opposite verdicts — decided entirely by what each feature actually does.
How Confir helps
Confir runs the Article 6(3) test as an explicit step: it screens each use against the four conditions, checks the profiling override, and records the reasoned conclusion you need under Article 6(4) — including the Article 49 registration that survives an exemption. The engine is deterministic and rule-based, so the same intake yields the same cited finding, and you can show exactly which condition fired and why.
Frequently asked questions
What is the Article 6(3) exemption?
It is the rule that an Annex III system is not high-risk if it poses no significant risk of harm to health, safety or fundamental rights, because it meets at least one of four conditions: a narrow procedural task, improving a completed human activity, detecting patterns without influencing the human assessment, or a preparatory task. The provider documents the assessment under Article 6(4).
Do I need to meet all four conditions?
No. Meeting any one of the four conditions is enough to take an Annex III system out of the high-risk category — provided it also does not profile natural persons. The conditions are alternatives, not a cumulative checklist.
When does the exemption never apply?
When the system performs profiling of natural persons, as defined in GDPR Article 4(4) — automated evaluation of personal aspects such as performance, behaviour, health, or preferences. A profiling system in an Annex III area is always high-risk, regardless of the four conditions.
Do I still have to register an exempt system?
Yes. Article 49(2) requires the provider to register an Annex III system in the EU database even when the provider concludes it is not high-risk under Article 6(3). The exemption removes the Article 8–15 obligations, not the registration duty.
When does the high-risk regime apply if my system is not exempt?
For stand-alone Annex III systems, the high-risk obligations apply from 2 December 2027 under the Digital Omnibus deferral, now adopted by the European Parliament (16 June 2026) and the Council (29 June 2026) — entry into force is pending Official Journal publication, expected before 2 August 2026.
Does the exemption need any sign-off from an authority?
No prior approval is required, but the provider must document the assessment and keep it available for national authorities on request (Article 6(4)). The Commission is to issue guidance and practical examples (Article 6(5)) to help draw the line.
Related guides
- How Article 6 classifies high-risk AI
- How AI risk classification works
- Is my AI high-risk?
- Annex III high-risk use cases
- Registration in the EU database (Article 49)
- Recruitment screening AI and Annex III
Manage your EU AI Act compliance in one place
Confir automates risk classification, technical documentation, and audit trails for any company. No consultants. No 6-month projects. 14-day free trial.
Start free trial →