The Art 6(3) filter and the profiling tripwire

Lesson 4 of 5 in High-Risk Classification: Art 6, Annexes I & III, and the Filter.

Annex III casts a wide net, and the drafters knew it. A tool that merely converts CVs into a structured format technically ‘is used in recruitment’ — should it carry the same rulebook as the model that ranks candidates? Art 6(3) says no: an Annex III system escapes the high-risk tier where it does not pose a significant risk of harm to health, safety or fundamental rights, including by not materially influencing the outcome of decision making.

That abstract test is anchored to four concrete conditions — fulfil at least one and the derogation is available:

(a) Narrow procedural task. The AI performs a tightly bounded step: converting unstructured CVs to structured data, deduplicating applications, classifying incoming documents.

(b) Improving the result of a previously completed human activity. A human already did the work; the AI polishes it — smoothing the language of a decision letter a caseworker already wrote.

(c) Detecting decision-making patterns or deviations from prior patterns — without replacing or influencing the completed human assessment without proper human review. The quality-assurance AI that flags a grader whose marks suddenly diverge from their history.

(d) Preparatory task. The AI prepares inputs for an assessment that follows: indexing files, translating documents, retrieving the precedents a caseworker will read.

That is the profiling tripwire, and it overrides everything above it. Profiling carries its GDPR meaning: automated processing of personal data to evaluate personal aspects of a natural person — analysing or predicting work performance, economic situation, health, preferences, reliability, behaviour, location, movements. The moment your ‘narrow procedural task’ starts scoring what kind of person someone is, the filter slams shut. No significant-risk argument, no condition (a)–(d), no clever documentation gets past it.

Walk the logic yourself — the tripwire comes first for a reason:

Run the Art 6(3) filter

Interactive decision tree — outcomes:

  • Not on Route 2

    The system is outside Annex III — no Art 6(3) analysis needed. Still check Route 1 (Annex I) and the Art 50 transparency duties before declaring it out of scope.

  • Profiling tripwire: always high-risk

    Art 6(3) final subparagraph: profiling of natural persons keeps an Annex III system high-risk regardless of the four conditions. No derogation is available — proceed to the full Chapter III rulebook.

  • High-risk (Art 6(2))

    The system materially influences a sensitive decision or fits no derogation condition. Requirements Arts 8–15, provider obligations, conformity assessment and registration all apply — from 2 Dec 2027 for Annex III systems (post-Omnibus).

  • Filtered out — with homework

    The derogation applies, but it is not a free exit: document the assessment before market placement (Art 6(4)), register the system in the EU database (Art 49(2)), and hand the assessment to a national authority on request. If they disagree, Art 80 reclassification — and possible fines — follows.

Key terms: profiling, Article 6(3) filter, EU AI database, market surveillance

Interactive checkpoint quiz (1 questions) — open this page in a browser to take it.