EU AI Act Compliance for Education Technology

The Act has no sector-wide education regime. This site uses the word for AI that reaches the Act through Annex III, point 3, headed “Education and vocational training”, and through the rules below.

• Access and admission: Annex III point 3(a)

  AI systems intended to be used to determine access or admission or to assign natural persons to educational and vocational training institutions at all levels are high-risk.

• Learning outcomes: Annex III point 3(b)

  AI systems intended to be used to evaluate learning outcomes, including when those outcomes are used to steer the learning process of natural persons, are high-risk.

• Level of education: Annex III point 3(c)

  AI systems intended to be used for the purpose of assessing the appropriate level of education that an individual will receive or will be able to access are high-risk.

• Monitoring during tests: Annex III point 3(d)

  AI systems intended to be used for monitoring and detecting prohibited behaviour of students during tests are high-risk. Each of the four uses is tied to educational and vocational training institutions at all levels. Point 3(d) names tests.

• Uses that point 3 does not name

  Point 3 does not name plagiarism or AI-text detection, dropout prediction, learning dashboards, administrative chatbots or adaptive learning as such. A system for one of these uses is high-risk only if its intended purpose matches one of points 3(a) to (d), or if another point of Annex III or Annex I covers it.

• Article 6(3) can take a system out of Annex III

  A system under point 3 is high-risk under Article 6(2). By derogation, an Annex III system is not high-risk under Article 6(3) where it does not pose a significant risk of harm to the health, safety or fundamental rights of natural persons, including by not materially influencing the outcome of decision making. That applies where any one of four conditions is fulfilled: (a) the system is intended to perform a narrow procedural task; (b) it is intended to improve the result of a previously completed human activity; (c) it is intended to detect decision-making patterns or deviations from prior decision-making patterns and is not meant to replace or influence the previously completed human assessment, without proper human review; or (d) it is intended to perform a preparatory task to an assessment relevant for the use cases listed in Annex III. An Annex III system is always high-risk where it performs profiling of natural persons (Article 3(52), Article 4(4) GDPR). A provider that considers its Annex III system not high-risk documents its assessment before the system is placed on the market or put into service and registers it (Article 6(4), Article 49(2)). Whether a given education system performs profiling is a question for counsel.

• Inferring emotions in education institutions: prohibited, with a medical or safety exception

  Article 5(1), point (f) prohibits placing on the market, putting into service for this specific purpose, or using AI systems to infer emotions of a natural person in the areas of workplace and education institutions, except where the use of the AI system is intended to be put in place or into the market for medical or safety reasons. The prohibition applies from 2 February 2025 (Article 113, point (a)). It is a prohibition, not a high-risk use: the exception creates no obligation and is not an Annex III hook. A feature of an education system that infers emotions of students falls under point (f) unless the exception applies. A breach is fined up to EUR 35 million or, for an undertaking, up to 7% of total worldwide annual turnover, whichever is higher (Article 99(3)). For SMEs, including start-ups, each fine is up to whichever of the two is lower (Article 99(6)).

• Other rules of the Act that can reach education AI

  Article 4 requires providers and deployers of AI systems to take measures to support the AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf; Chapter I applies from 2 February 2025. Article 50 sets transparency duties for providers and deployers of certain AI systems; it names no education case, and it applies from the general date of application, 2 August 2026. Article 53 sets duties for providers of general-purpose AI models; it names no education case.

The provider develops an AI system, or has it developed, and places it on the market or puts it into service under its own name or trademark (Article 3(3)). Putting into service includes supply for own use (Article 3(11)). A school, university or examination body that uses a system under its authority is a deployer (Article 3(4)). A university that develops a system and puts it into service for its own use under its own name is therefore a provider. A deployer becomes the provider of a high-risk system in three cases: it puts its name or trademark on a system already on the market, without prejudice to contractual arrangements that allocate the obligations otherwise; it makes a substantial modification that leaves the system high-risk; or it modifies the intended purpose of a non-high-risk system so that it becomes high-risk (Article 25(1)).

The provider of a high-risk education system carries the design duties below. Each page linked under “Article pages for education” covers one of them.

• Art. 9
  Risk management system

  A continuous iterative process over the lifecycle, with testing against prior defined metrics and attention to persons under 18.

• Art. 10
  Data and data governance

  Training, validation and testing data sets that meet the quality criteria, with bias examination and data governance practices.

• Art. 12
  Record-keeping

  The system technically allows for the automatic recording of events (logs) over its lifetime.

• Art. 13
  Transparency and instructions for use

  Operation sufficiently transparent for deployers to interpret the output, with instructions for use that contain at least the items in Article 13(3).

• Art. 14
  Human oversight

  Design that allows effective oversight by natural persons while the system is in use.

• Art. 15
  Accuracy, robustness and cybersecurity

  An appropriate level of accuracy, robustness and cybersecurity throughout the lifecycle; the levels of accuracy and the relevant metrics are declared in the instructions for use. Deployers have no Article 15 duty.

• Art. 17
  Quality management system

  A documented quality management system. Its implementation is proportionate to the size of the provider’s organisation, in particular for SMEs and SMCs, who must in any event respect the required degree of rigour (Article 17(2)).

• Art. 43(2), 47–49
  Conformity assessment and registration

  For systems under points 2 to 8 of Annex III, which include point 3, the provider follows the conformity assessment procedure based on internal control (Annex VI), without a notified body (Article 43(2)). It draws up the EU declaration of conformity (Article 47), affixes the CE marking (Article 48) and registers itself and the system in the EU database (Article 49(1)) before placing the system on the market or putting it into service.

• Art. 26(1)–(3)
  Use according to the instructions; assign oversight

  Deployers take appropriate technical and organisational measures to use the system in accordance with the instructions for use, and assign human oversight to natural persons who have the necessary competence, training and authority, as well as the necessary support. These duties are without prejudice to other deployer obligations under Union or national law (Article 26(1) to (3)).

• Art. 26(4)–(6)
  Input data, monitoring and logs

  To the extent the deployer exercises control over the input data, it ensures that the data are relevant and sufficiently representative in view of the intended purpose. It monitors the operation of the system on the basis of the instructions for use and, where deployers have reason to consider that use in accordance with the instructions may result in a risk within the meaning of Article 79(1), they inform the provider or distributor and the market surveillance authority without undue delay and suspend use. It keeps the logs under its control for at least six months, unless Union or national law provides otherwise (Article 26(4) to (6)).

• Art. 26(8)
  Public authorities: registration

  Deployers that are public authorities, or Union institutions, bodies, offices or agencies, comply with the registration obligations in Article 49 and do not use a system that has not been registered in the EU database (Article 26(8), Article 49(3)).

• Art. 26(9)
  Data protection impact assessment, where applicable

  Where applicable, deployers use the information provided under Article 13 to comply with their obligation to carry out a data protection impact assessment under Article 35 of the GDPR (Article 26(9)). Whether that obligation exists is decided by data protection law.

• Art. 26(11)
  Informing the persons concerned

  Without prejudice to Article 50, deployers of Annex III high-risk systems that make decisions or assist in making decisions related to natural persons inform them that they are subject to the use of the system (Article 26(11)). This is the Act’s notice duty towards students. It is not Article 50(1).

• Art. 27
  Fundamental rights impact assessment

  Before deploying a high-risk system, deployers that are bodies governed by public law, or private entities providing public services, perform an assessment of the impact on fundamental rights, and notify the market surveillance authority of its results; in the case referred to in Article 46(1), deployers may be exempt from that obligation to notify. The duty excludes Annex III point 2 and covers point 3 (Article 27(1) and (3)). The Act names no school or university; whether a given institution is a body governed by public law or a private entity providing public services is a question of national law and for counsel.

• Art. 86
  Right to explanation

  An affected person subject to a decision taken by the deployer on the basis of the output of an Annex III system (except point 2) that produces legal effects or similarly significantly affects that person in a way that they consider to have an adverse impact on their health, safety or fundamental rights has the right to obtain from the deployer clear and meaningful explanations (Article 86).

• Art. 4
  AI literacy of staff

  Deployers take measures to support the AI literacy of their staff and other persons dealing with the operation and use of AI systems on their behalf. The obligation does not require them to guarantee a specific level of AI literacy of any individual (Article 4).

• Dates

  Chapter III, Sections 1 to 3, which include Articles 9 to 15, 17, 26 and 27, apply to AI systems classified as high-risk under Article 6(2) and Annex III from 2 December 2027 (Article 113, point (c)(i)). A high-risk system placed on the market or put into service before that date is covered only if, from that date, its design undergoes significant changes. In any case, the providers and deployers of high-risk systems intended to be used by public authorities shall take the necessary steps to comply with the requirements and obligations of the Act by 2 August 2030 (Article 111(2)). The Act does not state whether this also applies to systems placed on the market or put into service after 2 December 2027; that is a question for counsel.

• Fines

  Providers must ensure that their high-risk systems meet the requirements of Section 2 of Chapter III, which includes Articles 9 to 15 (Article 16, point (a)). A breach of the provider obligations in Article 16 or of the deployer obligations in Article 26 can be fined up to EUR 15 million or, if the offender is an undertaking, up to 3% of its total worldwide annual turnover for the preceding financial year, whichever is higher (Article 99(4), points (a) and (e)). For SMEs, including start-ups, each fine is up to whichever of the two is lower (Article 99(6)). The same applies to small mid-cap enterprises (Article 3(14b), Article 99(6a)). Each Member State lays down to what extent fines may be imposed on public authorities and bodies (Article 99(8)).

• Systems and uses outside the Act

  The Act applies to providers placing AI systems on the market or putting them into service in the Union, wherever they are established, and to providers and deployers in a third country where the output of the AI system is used in the Union (Article 2(1), points (a) and (c)). It does not apply to areas outside the scope of Union law, and does not affect the competences of the Member States concerning national security (Article 2(3)). It does not apply to AI systems where and in so far they are placed on the market, put into service or used, with or without modification, exclusively for military, defence or national security purposes, nor to AI systems not placed on the market or put into service in the Union where the output is used in the Union exclusively for such purposes (Article 2(3)). It does not apply to AI systems or AI models, including their output, specifically developed and put into service for the sole purpose of scientific research and development (Article 2(6)). It does not apply to research, testing or development activity before a system is placed on the market or put into service; testing in real world conditions is not covered by that exclusion (Article 2(8)). It does not apply to obligations of deployers who are natural persons using AI systems in the course of a purely personal non-professional activity (Article 2(10)). AI systems released under free and open-source licences are outside the Act unless they are placed on the market or put into service as high-risk AI systems, or fall under Article 5 or 50 (Article 2(12)).

• No education-specific values

  Beyond Annex III point 3 and Article 5(1), point (f), the Act has no rule specific to education. It names no accuracy value, retention period beyond the six-month minimum, testing frequency or bias threshold for education. The Act itself names no standard. High-risk systems that conform to harmonised standards published in the Official Journal are presumed to conform to the requirements of Section 2, to the extent those standards cover them (Article 40(1)). The Commission develops guidelines on the application of Articles 8 to 15, 25 and 26 (Article 96(1), point (a)) and on the prohibited practices (Article 96(1), point (b)).

• Who is a body governed by public law

  Article 27(1) and Article 26(8) apply to bodies governed by public law, private entities providing public services and public authorities. The Act does not define these terms for schools or universities. National law decides how an institution is classified.

• Tools that are not named

  Whether a plagiarism checker, a dropout predictor or an adaptive learning tool is high-risk depends on its intended purpose as set by the provider, read against points 3(a) to (d). The Act gives no list of such tools.

One page for each article that matters most to education providers and deployers.

• Article 9 for Education AI: Risk Management System

  Risk management system, including persons under 18.

• Article 10 for Education AI: Data and Data Governance

  Data sets, bias examination and special categories of personal data.

• Article 12 for Education AI: Record-Keeping

  Automatic recording of events and log retention.

• Article 13 for Education AI: Transparency and Information to Deployers

  Instructions for use and information to deployers.

• Article 14 for Education AI: Human Oversight

  Human oversight by design and the deployer’s role.

• Article 15 for Education AI: Accuracy, Robustness and Cybersecurity

  Accuracy, robustness and cybersecurity.

• Article 17 for Education AI: Quality Management System

  Quality management system for providers.

• Article 26 in Education: Deployer Obligations

  What deployers of high-risk systems must do.

• Article 50 for Education AI: Transparency and Disclosure

  Transparency duties for certain AI systems.

• Article 53 in Education: Obligations of General-Purpose AI Model Providers

  Duties of providers of general-purpose AI models.

• Annex III Deep Dive: All 8 High-Risk Categories

  All eight areas of Annex III, including point 3 on education and vocational training.

• Article 6: High-Risk AI System Classification

  How Article 6 classifies high-risk AI systems, including the Article 6(3) exception.

• Article 27: Fundamental Rights Impact Assessment

  The fundamental rights impact assessment for deployers that are bodies governed by public law or private entities providing public services.

• Prohibited AI Practices Under Article 5

  The prohibited practices of Article 5, including the ban on inferring emotions in education institutions.