REGULATORY GLOSSARY
Annex III Categories: Definition & EU AI Act Application (Annex III) | governances.app
Annex III of the EU AI Act lists eight specific areas where AI systems are classified as high-risk: (1) Biometric identification, (2) Critical infrastructure management, (3) Education and vocational training, (4) Employment and worker management, (5) Access to essential services, (6) Law enforcement, (7) Migration and asylum, and (8) Administration of justice. AI systems falling under these categories face the full set of high-risk obligations.
Author: Ioan Ciprian Popa (Managing Partner, Vantages Applied AI) | RFC 8785 SHA-256:
866c84b3e86750cdefbca7fad6e5ebd52e9d68d8ca151ae7e2f03da78f5e7c2cMulti-Jurisdiction & 12-Sector Regulatory Equivalency (EU AI Act, NIST AI RMF, ISO/IEC 42001)
| Jurisdiction | Statutory & Framework Instruments | Articles / Controls | VOS Evidence Artifact |
|---|---|---|---|
| EU (European Union) | EU AI Act (Reg. 2024/1689), GPAI Code of Practice & Revised PLD (2024/2853) | Art. 9–15, 26–27, 50, 53–55, 71–73 | RFC 8785 Evidence Pack + Art. 14 Oversight + PQC SEAL |
| US (Federal & States) | NIST AI RMF 1.0, Colorado SB 21-169 / SB 24-205, CA SB 942 / AB 2013, TX TRAIGA, IL HB 3773, NYC LL144 | GOVERN 1.1–6.2, MAP, MEASURE, MANAGE | Algorithmic Impact & Bias Audit + Watermark Provenance |
| UK (United Kingdom) | UK Data (Use and Access) Act 2025, UK AISI Frontier Safety, FCA/ICO/MHRA Guidance | 5 Cross-Sector Principles + Statutory Data Access | Regulator-Aligned Safety Case & Audit Trail |
| CH / CoE (Switzerland) | Council of Europe Framework Convention on AI (CETS No. 225), Swiss FADP (nDSG) & FINMA | Human Dignity, Rule of Law & Democratic Safeguards | Treaty CETS 225 Impact Record & FADP Transparency Log |
| SG (Singapore) | IMDA Model AI Governance Framework (GenAI & Agentic AI 2025/2026), AI Verify & MAS FEAT | Agentic Action Boundaries, Tool Allowlists & FEAT | Bounded Agent Authority & Zero-Debit Refusal Receipt |
| CA / JP / KR / AU | Canada AIDA / Treasury Board, Japan AISI / METI, South Korea AI Basic Act (2026), Australia Voluntary AI Standard | High-Impact AI Guardrails, Transparency & Human-in-the-Loop | Multi-Regime Crosswalk & Cryptographic Verification URL |
| BR / IN (Global South) | Brazil AI Bill 2338/2023 & LGPD Art. 20, India DPDP Act 2023, MeitY Advisory & RBI FREE-AI | Automated Decision Review, Fiduciary Consent & Fairness | Adverse Action Explanation & Redacted Audit Record |