Artificial Intelligence Policy Tracker
Search
Menu
Legal requirement Prohibited practices European Union Partially applicable

Do not deploy or provide AI for prohibited practices

Download: JSON · MarkdownUnder EU AI Act, Article 5

Pending review · linked to the official source, waiting for a reviewer to confirm it (a factual check against the official source, not a legal review or legal advice)
What this label means
Verified
— a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
Pending review
— linked to the official source and in the queue for a reviewer to confirm.
Source-linked
— linked to the official source, not yet confirmed by a reviewer.
Verification policy and current standing · a factual check, not legal advice.
No change recorded as of 26 Sep 2026 · official source last checked
Open official source Sign in to follow

Report a correction How we verify

On this page 9 sections

In brief

Do not deploy or provide AI for prohibited practices is a legal requirement under the EU AI Act in the European Union (Article 5). It applies from 2 February 2025. The record carries 2 evidence examples and mappings to 2 frameworks.

Instrument
EU AI Act
Jurisdiction
European Union
Nature
Legal requirement
Source reference
Article 5
Applies from
2 February 2025
Who it binds
Provider / developer, Deployer / user organisation, Public authority / government body
Evidence examples
2
Framework mappings
ISO/IEC 42001:2023, NIST AI Risk Management Framework 1.0
Controls that meet it
2
Official source
Open official text
Verification
Pending review · source-linked

What does it require?

Article 5 bans placing on the market, putting into service or using AI for listed practices, including subliminal or manipulative techniques that cause significant harm, exploitation of vulnerabilities, social scoring by public or private actors leading to detrimental treatment, untargeted scraping of facial images to build recognition databases, emotion recognition in workplaces and education institutions except for medical or safety reasons, biometric categorisation to infer protected characteristics, and real-time remote biometric identification in publicly accessible spaces for law enforcement outside narrow exceptions.

Practical action

Add a prohibited-practice screen to your AI intake or design-review process and document the outcome for every system already in use.

Who does it apply to?

Applies to any provider or deployer of an AI system used in the EU, in any sector.

Applies from:

Which controls meet this duty?

Satisfies: the control, operated properly, does the work the duty asks for. Supports: it contributes but the duty needs more. Each control page lists every other duty it serves, so work done once can be counted once.

  • satisfiesProcessAI governance lead · once per ai system
    Prohibited and unacceptable-use screening gate

    Serves 7 recorded duties · evidence: Prohibited-use screening record, Screening list and escalation procedure

    Screens every new and existing system against the banned practices with a recorded outcome.

  • supportsProcessAI governance lead · continuous
    AI system inventory and classification

    Serves 11 recorded duties · evidence: AI system register, Risk-tier classification sign-off, AI intake and classification procedure

    A complete register is the population to be screened.

Templates that cover this duty

Generated from the records. Free · no account · links emailed to your work address. This duty is cited in each file with its source reference and a link back here.

All 8 templates that cover it →

What evidence would a reviewer expect?

Evidence examples
EvidenceTypeNotes
Prohibited-practice screening recordrecordDated checklist for each AI system against each Article 5 practice, with reviewer sign-off.
AI system inventoryregisterRegister of AI systems with owner, purpose and jurisdiction.

Framework mappings

Original editorial crosswalks. They cite clause numbers only and reproduce no standard text; confidence reflects how direct the mapping is.

See every European Union duty mapped this way →

Framework mappings table
FrameworkReferenceNoteConfidence
ISO/IEC 42001:2023Clause 6.1.2 and Annex A control on AI system impact assessmentOriginal editorial mapping: the AI-impact-assessment process is a natural place to screen for prohibited uses.medium
NIST AI RMF 1.0GOVERN 1.1, MAP 1.1Original editorial mapping to legal-requirement identification and context mapping.medium

Frequently asked questions

Is this a legal requirement?

Yes. It is a legal requirement under EU AI Act (Article 5).

Who must comply with this obligation?

Applies to any provider or deployer of an AI system used in the EU, in any sector.

When does this obligation apply?

It applies from 2 February 2025.

What evidence shows compliance?

A reviewer would expect: Prohibited-practice screening record; AI system inventory.

Which frameworks map to this obligation?

It is mapped to ISO/IEC 42001:2023 Clause 6.1.2 and Annex A control on AI system impact assessment, NIST AI Risk Management Framework 1.0 GOVERN 1.1, MAP 1.1. These are editorial crosswalks with a stated confidence, not official mappings.

Which controls satisfy this obligation?

Prohibited and unacceptable-use screening gate; AI system inventory and classification.

What should an organisation do in practice?

Add a prohibited-practice screen to your AI intake or design-review process and document the outcome for every system already in use.

Cite this record

AIPolicyTracker (2026). “Do not deploy or provide AI for prohibited practices (EU AI Act)” [AIPT-OBL-0004, not yet verified]. https://aipolicytracker.org/id/AIPT-OBL-0004 (accessed 27 October 2026). Data licensed CC BY 4.0.

Permanent id AIPT-OBL-0004: it never changes or gets reused, and its address keeps working if this page moves.

Cite the official text alongside it: Regulation (EU) 2024/1689 of the European Parliament and of the Council of 13 June 2024 laying down harmonised rules on artificial intelligence, Official Journal of the European Union, https://eur-lex.europa.eu/eli/reg/2024/1689/oj.

BibTeX 
@misc{aipolicytracker2026_donotdeployorprovideaifo,
  author       = {{AIPolicyTracker}},
  title        = {{Do not deploy or provide AI for prohibited practices (EU AI Act)}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/obligations/eu-ai-act-prohibited-practices}},
  url          = {https://aipolicytracker.org/obligations/eu-ai-act-prohibited-practices},
  urldate      = {2026-10-27},
  note         = {Data licensed CC BY 4.0. Accessed 27 October 2026}
}

Change history

No change to this record's tracked fields has been recorded since 15 October 2026, when field-level history began.

Similar obligations in other instruments

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.