AI risk checker

Describe one AI use case and see where it might sit under the EU AI Act, with practical next steps.

Not all AI is equally risky. A tool that tidies your emails is not the same as one that screens job applicants. This check walks you through one use case and suggests the controls it needs.

Why use it

  • It flags the uses the EU AI Act bans outright, before you invest in them.
  • It spots high-risk areas, such as hiring, credit and education, where the rules are strict.
  • It turns risk into actions, grouped under the NIST AI RMF functions: Govern, Map, Measure and Manage.

How it works

  1. Describe the AI use case in a sentence or two.
  2. Tick anything that matches the prohibited, high-risk or transparency lists.
  3. Tick the general risk factors that apply.
  4. Read the indicative tier and the suggested controls, then record the result in your AI register.

Good to know

  • The EU AI Act's highest fines, for prohibited practices, can reach 35 million euros or 7% of worldwide annual turnover, whichever is higher.
  • The EU AI Act can apply to businesses outside the EU, for example when they offer AI systems in the EU or when their AI's output is used there.
  • Nigeria's Data Protection Act 2023 gives people the right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on them, subject to some exceptions.

Questions

Does the EU AI Act apply to my business if we are not in Europe?

It can. It covers organisations that place AI systems on the EU market, and those outside the EU whose AI output is used in the EU. If you have no EU customers or users, it is less likely to apply, but local data protection and consumer laws still do.

What is the difference between high-risk and prohibited?

Prohibited practices, such as social scoring or untargeted scraping of faces, are banned. High-risk uses, such as AI in recruitment or credit scoring, are allowed but come with strict duties on testing, documentation, human oversight and more.

Is the result a legal classification?

No. It is an indicative check based on a simplified reading of the EU AI Act and good practice. Edge cases and exceptions need a lawyer who knows your facts.

Is my use case saved?

Only on your own device, so your answers are there next time. Nothing you type is sent to us.

Please note

Provided free, as is, for general information. It is not legal, regulatory, compliance or professional advice, and it does not create a lawyer-client or adviser relationship. The result is an indicative estimate based on a simplified summary of the EU AI Act and general good practice. It may be incomplete or out of date, and the law applies in stages and is subject to amendment and official guidance. You are responsible for your own classification and compliance. Check the rules that apply where you operate and get advice from a qualified lawyer before relying on it.

Related tools: AI use register, AI acceptable-use policy builder, AI governance readiness quiz