Skip to main content
European Commission logo
AI Act Service Desk

AI Act Explorer

Recitals
Chapter I: General Provisions
Chapter II: Prohibited AI Practices
Chapter III: High-Risk AI Systems

Section 1: Classification of AI Systems as High-Risk

Section 2: Requirements for High-Risk AI Systems

Section 3: Obligations of Providers and Deployers of High-Risk AI Systems and Other Parties

Section 4: Notifying Authorities and Notified Bodies

Section 5: Standards, Conformity Assessment, Certificates, Registration

Chapter IV: Transparency Obligations for Providers and Deployers of Certain AI Systems
Chapter V: General-Purpose AI Models
Chapter VI: Measures in Support of Innovation
Chapter VII: Governance
Chapter VIII: EU Database for High-Risk AI Systems
Chapter IX: Post-Market Monitoring, Information Sharing and Market Surveillance

Section 1: Post-Market Monitoring

Section 2: Sharing of Information on Serious Incidents

Section 3: Enforcement

Section 4: Remedies

Section 5: Supervision, Investigation, Enforcement and Monitoring in Respect of Providers of General-Purpose AI Models

Chapter X: Codes of Conduct and Guidelines
Chapter XI: Delegation of Power and Committee Procedure
Chapter XII: Penalties
Chapter XIII: Final Provisions
Annexes

Recital 39

Any processing of biometric data and other personal data involved in the use of AI systems for biometric identification, other than in connection to the use of real-time remote biometric identification systems in publicly accessible spaces for the purpose of law enforcement as regulated by this Regulation, should continue to comply with all requirements resulting from Article 10 of Directive (EU) 2016/680. For purposes other than law enforcement, Article 9(1) of Regulation (EU) 2016/679 and Article 10(1) of Regulation (EU) 2018/1725 prohibit the processing of biometric data subject to limited exceptions as provided in those Articles. In the application of Article 9(1) of Regulation (EU) 2016/679, the use of remote biometric identification for purposes other than law enforcement has already been subject to prohibition decisions by national data protection authorities.

This Recital relates to