Direct answer
We use AI for creditworthiness or insurance pricing. What applies?
You describe: AI determining creditworthiness or credit scores, or risk and premium setting for life or health insurance. Likely role: credit or insurance deployer.
This applies now
- Article 4: AI literacyApplicable
Coming up
- Annex III: high-risk AIfrom 2 December 2027
- Article 27: FRIAfrom 2 December 2027
These use cases sit in Annex III points 5(b) and 5(c) and are the only private category that also carries the FRIA duty. Both follow the timeline to 2 December 2027.
Your first actions
- Classify the use case and document the outcome. Assess Article 5, Article 6 and Annex III in that order and document purpose, context and any Article 6(3) exception.
- Perform a FRIA before deployment. Assess process, duration, affected persons, risks, oversight, mitigation and complaint mechanisms and notify results where required.
- Take role- and context-specific AI literacy measures. Determine for each role, system and context which combination of instruction, guidance, practice or training is appropriate.
Record this
- Article 6 and Annex III classification record
- FRIA report and notification
- AI literacy measures record
General interpretation, not legal advice. The official source remains authoritative.
Full map for your situationExecution
Record the classification in an AI register
A classification without a register and ownership is not demonstrable. Embed AI guides classification, register and reassessment in a fixed approach.
See the Embed AI approach