Article 5 — Prohibited AI practices

Official title, Regulation (EU) 2024/1689

Prohibited: biometric categorisation deducing race, political opinions, trade union membership, religious or philosophical beliefs, sex life or sexual orientation — does not cover labelling or filtering of lawfully acquired biometric datasets, or categorisation of biometric data in law enforcement

Who it binds: Every operator — provider, deployer, importer and distributor alike.
Evidence that discharges it: a written policy
Usually owned by: Legal
Severity: Critical — a gap here is the kind regulators act on first, and in the prohibitions it is not curable by documentation.

Does it apply to you?

Applicability under the Act is risk tier × operator role, not tier alone. This grid is computed by running the same function the assessment uses, so it cannot drift from what the product would tell you.

limited riskprovider, deployer, importer, distributor
high riskprovider, deployer, importer, distributor

Read against Regulation (EU) 2024/1689 as amended, consolidated text 02024R1689-20260727 (consolidation 001.001, incorporating Regulation (EU) 2026/1744). What we work from

Check which duties apply to you All obligations →