The Article 6(3) exception: when an Annex III system is not high-risk
An Annex III match can still escape the high-risk tier if it meets the disjunctive Art. 6(3) conditions and clears both gates — here is how the self-exclusion works, what Art. 6(4) and Art. 49(2) require, and how Veritome records it.
Falling under an Annex III area normally makes a system high-risk. Art. 6(3) provides a narrow escape: the system is not high-risk if it does not pose a significant risk of harm to health, safety or fundamental rights, including by not materially influencing the outcome of decision-making.
The self-exclusion conditions (disjunctive)
The Art. 6(3) test is disjunctive — you qualify if at least one of four conditions holds:
- (a) the system performs only a narrow procedural task (a routine mechanical step, no substantive judgment);
- (b) it only improves the result of a previously completed human activity, without replacing or pre-empting it;
- (c) it detects decision-making patterns or deviations from them, and is not meant to replace or influence a completed human assessment without proper human review;
- (d) it performs a purely preparatory task to an assessment relevant to the Annex III use.
The two hard gates
Meeting a condition is not enough on its own — both of these must also be true:
- the no significant risk of harm chapeau, and
- no profiling of natural persons — an absolute bar. Under Art. 6(3) an Annex III system that performs profiling is always high-risk, and Veritome's classifier enforces this override automatically.
What you owe if you rely on it
- Document it — under Art. 6(4), a provider claiming the exception records the assessment before placing the system on the market or putting it into service, and provides that documentation to the national competent authorities on request.
- Register it — the system is still subject to the registration obligation in Art. 49(2): the provider registers itself and the system in the EU database as one it has concluded is not high-risk under Art. 6(3).
The Commission may issue guidelines and examples on the conditions, and may amend them; if a national authority later disagrees with your assessment, the system is treated as high-risk and the full requirement set follows.
Veritome's built-in assessment wizard
Every Annex III system gets a 3-step Art. 6(3) wizard:
- Eligibility — confirm the system falls under Annex III and you act as provider; the wizard shows the Annex III area on file.
- Criteria — six cards: the four disjunctive conditions above plus the two required gates. A live verdict tells you whether the system qualifies (at least one condition met, and both gates clear).
- Reasoning — write the documented justification (at least 50 characters) that forms your Art. 6(4) record.
The record — answers, reasoning, verdict, who assessed it and when — is saved on the system's active classification and written to the audit log. If it qualifies, a reminder prompts you to inform the market-surveillance authority and to mark the record as notified, and the system is classified as not high-risk — though Art. 50 transparency duties can still attach independently, and the Art. 49(2) registration remains yours to complete in the EU database. Self-exclusion is not a loophole: you document why, you register, and you stay on the hook if you are wrong.
Common questions
Do I have to meet all four Art. 6(3) conditions?
No. The test is disjunctive: the system qualifies if at least one of the four conditions holds — a narrow procedural task, improving a completed human activity, detecting decision-making patterns without replacing human assessment, or a purely preparatory task. What must hold in every case are the two gates: no significant risk of harm, and no profiling of natural persons.
Can a system that profiles people use the Art. 6(3) exception?
No. Under Art. 6(3) an Annex III system that performs profiling of natural persons can never use the exception, whichever of the four conditions it meets. Veritome's classifier applies that override automatically, so the wizard's verdict cannot come out as "qualifies" for a profiling system.
Do I have to tell anyone that I claimed the exception?
You must document the assessment under Art. 6(4) before placing the system on the market and hand that documentation to the national competent authorities on request, and under Art. 49(2) you register the system in the EU database as one relying on the exception. When the wizard's verdict is that the system qualifies, Veritome prompts you to inform the market-surveillance authority and to mark the record as notified; the answers, reasoning, verdict, assessor and date are kept on the system's classification and in the audit log.