Article 7 — Amendments to Annex III (EU AI Act)

Article 7 of Regulation (EU) 2024/1689 — Amendments to Annex III. Official text, practical interpretation, key obligations and compliance implications.

Official Text Summary

Article 7 of Regulation (EU) 2024/1689 confers on the European Commission the power to amend Annex III — the list of high-risk AI system categories — by means of delegated acts adopted pursuant to Article 97. This mechanism allows the regulatory perimeter of Title III to expand or contract in response to empirical evidence, without the need for a full co-legislative procedure.

When assessing whether to add a new category of AI system to Annex III, the Commission is required to apply a structured set of criteria. These include: the severity and irreversibility of the harm the system may cause to health, safety, or fundamental rights; the number of persons potentially affected and their degree of vulnerability; the extent to which the system has already been deployed and the real-world harms observed; the degree of human oversight retained over automated outputs; and whether applicable Union or Member State law already provides an adequate level of protection against the identified risks.

Conversely, the Commission may remove a category from Annex III where the evidence base demonstrates that the residual risk no longer meets the threshold warranting classification as high-risk, or where equivalent safeguards have been established through other binding Union instruments.

Any delegated act adopted under Article 7 is subject to the parliamentary scrutiny procedure set out in Article 97, giving the European Parliament and the Council the right to object before the act takes effect. This ensures democratic oversight of regulatory evolution while preserving the agility the Commission needs to keep pace with rapidly developing AI capabilities.

What This Means in Practice

Article 7 functions as the EU AI Act's adaptive mechanism for high-risk classification. In practice, it means that the boundary between AI systems subject to the full high-risk compliance regime and those that are not is not permanently fixed at the date of entry into force. Providers and deployers must therefore monitor Commission delegated acts continuously, not merely at the point of initial product development.

For organisations building or deploying AI systems in sectors adjacent to Annex III — for example, AI tools used in workforce management, credit scoring, or public-service delivery — Article 7 creates a compliance horizon risk: a system that is out of scope today could fall within scope following a Commission amendment. Prudent organisations should conduct a preliminary high-risk assessment even for borderline systems and design their governance architecture to be upgradeable.

For organisations already operating within Annex III categories, Article 7 reinforces the need for ongoing conformity monitoring. An amendment that narrows the definition of a listed category could relieve certain obligations, but organisations should not assume relief without formal legal analysis of the delegated act's scope.

Concretely, a provider of an AI-assisted tool that ranks job applicants in a public-sector recruitment context is currently within Annex III point 4. If the Commission, drawing on post-market surveillance data collected under Article 72, determines that AI systems used in private-sector recruitment at small enterprises pose equivalent risks, it could extend that point via Article 7. That provider's supply chain, technical documentation requirements, and conformity assessment obligations would then apply to a wider set of customers.

Key Obligations

• Monitor Commission delegated acts: Providers and deployers must track any delegated acts adopted under Article 7 that amend Annex III, as amendments can alter their compliance status without transitional grace periods beyond those specified in the act itself.
• Maintain adaptable risk documentation: Technical documentation and conformity assessment records should be structured so they can be updated to reflect any reclassification of an AI system from non-high-risk to high-risk, or vice versa.
• Conduct horizon assessments for borderline systems: Organisations operating AI systems in sectors adjacent to Annex III should periodically assess whether evolving Commission guidance or market surveillance findings indicate a forthcoming amendment that could affect their products.
• Engage in public consultation processes: The delegated act procedure includes consultations with relevant stakeholders; providers and industry associations should participate to ensure sector-specific evidence is considered before the Commission finalises amendments.
• Review customer and supply-chain obligations on amendment: Where an amendment expands Annex III, providers must cascade updated contractual and technical obligations to deployers and notified bodies without undue delay.
• Track removal of categories: Where the Commission removes a category, organisations should assess whether they can reduce compliance overhead, but must retain records demonstrating past compliance for the periods during which high-risk status applied.

Relationship to Other Articles

Article 7 cannot be read in isolation from several other provisions. It is directly subordinate to Article 97, which governs the exercise of the delegated power, including the duration of the delegation, the conditions for revocation, and the parliamentary objection procedure.

The criteria Article 7 prescribes for adding categories to Annex III directly mirror the risk-assessment framework underlying Article 9 (risk management system), meaning that the same factual questions that inform a Commission amendment also inform a provider's internal risk management obligations.

Article 6 defines the primary rule for high-risk classification, and Article 7 operates as its dynamic complement: together they determine which AI systems fall under the Title III obligations set out in Articles 8 through 49.

Post-market surveillance data collected under Article 72 and serious incident reports under Article 73 feed directly into the evidence base the Commission uses when considering Article 7 amendments, creating a feedback loop between market oversight and regulatory classification. Finally, Annex III itself is the operative text that Article 7 modifies; any compliance analysis must be conducted against the version of Annex III current at the time of the relevant activity, not the version in force at any prior date.

Compliance Timeline

2 August 2024 — Regulation (EU) 2024/1689 entered into force. Article 7, including the Commission's delegated power to amend Annex III, became operative from this date. The delegation period runs for five years from entry into force, renewable by tacit extension under Article 97.

2 February 2025 — Prohibited AI practices under Article 5 became applicable. Article 7 amendments cannot override prohibitions; any system falling under Article 5 cannot be rehabilitated by reclassification.

2 August 2025 — Rules on general-purpose AI models (Title VIII) became applicable. The Commission's post-market surveillance infrastructure began producing data that may inform future Article 7 amendments.

2 August 2026 — High-risk AI systems covered by harmonised Union legislation listed in Annex I, Section A became subject to the full Title III regime. Article 7 amendments affecting these sectors interact with existing product safety legislation.

2 August 2027 — High-risk AI systems listed in Annex III (other than those already subject to earlier dates) become fully subject to Title III obligations. This is the primary compliance deadline for most organisations affected by Annex III classifications, including any future amendments made under Article 7 prior to this date. Amendments adopted after 2 August 2027 will specify their own application dates in accordance with the delegated act procedure.