Responsible AI Platform
Annex III point 5High-risk domain

AI in essential services and benefits

For banks, insurers, public service providers and emergency services where AI can affect access to basic services or financial opportunities.

Annex III point 5 concerns decisions about credit, insurance, public benefits, healthcare and emergency triage. Correct classification also determines whether Article 27 FRIA becomes relevant.

Scope according to the guidelines

The routes are essential public assistance benefits and services, creditworthiness/credit score, life and health insurance risk assessment/pricing, and emergency first response dispatch or triage.

Classification question

Does the AI affect access, price, priority or eligibility for an essential service?

What to document

Intended purpose and context of use.
Why Article 6(2) and Annex III do or do not apply.
Whether the Article 6(3) filter may apply, and whether profiling blocks it.
Which provider and deployer obligations are triggered.

Finance/public services AI Act intake

Review credit scoring, insurance, public eligibility or emergency triage against Annex III point 5 and Article 27 FRIA.

Frequently asked questions

Short answers for classification, evidence and next steps under Annex III.

When should essential services be assessed under Annex III?

The routes are essential public assistance benefits and services, creditworthiness/credit score, life and health insurance risk assessment/pricing, and emergency first response dispatch or triage. The practical starting question is: Does the AI affect access, price, priority or eligibility for an essential service?

Which use cases are included in Essential private and public services and benefits?

This domain page expands the main routes: Public assistance benefits and services, Creditworthiness and credit score, Life and health insurance risk assessment/pricing and Emergency calls and triage. For each system, check the intended purpose, the output and the impact on access, rights or safety.

What should be documented before obligations are determined?

Document the intended purpose, use context, relevant Annex III route, Article 6(3) assessment, any profiling, provider/deployer roles and the required safeguards.