Back to Risk Catalogue

EU AI Act

Regulation (EU) 2024/1689 establishing harmonised rules on artificial intelligence across the European Union.

II.A5 Prohibited AI Practices

Risks

AIR-SEC-010Prompt Injection AIR-OP-014Inadequate System Alignment AIR-OP-016Bias and Discrimination AIR-OP-020Reputational Risk

III.S1.A6: Classification Rules for High-Risk AI Systems

Risks

AIR-OP-018Model Overreach / Expanded Use

III.S2.A8: Compliance with the Requirements

Risks

AIR-RC-022Regulatory Compliance and Oversight

III.S2.A9: Risk Management System

Risks

AIR-OP-014Inadequate System Alignment AIR-OP-016Bias and Discrimination AIR-OP-019Data Quality and Drift AIR-OP-020Reputational Risk AIR-OP-004Hallucination and Inaccurate Outputs AIR-OP-005Foundation Model Versioning AIR-OP-006Non-Deterministic Behaviour

Mitigations

AIR-PREV-005System Acceptance Testing

III.S2.A10: Data and Data Governance

Risks

AIR-OP-016Bias and Discrimination AIR-OP-019Data Quality and Drift AIR-RC-001Information Leaked To Hosted Model AIR-RC-022Regulatory Compliance and Oversight AIR-RC-023Intellectual Property (IP) and Copyright AIR-SEC-002Information Leaked to Vector Store AIR-SEC-009Data Poisoning

Mitigations

AIR-PREV-006Data Quality & Classification/Sensitivity

III.S2.A11: Technical Documentation

Risks

AIR-RC-023Intellectual Property (IP) and Copyright

III.S2.A12: Record-Keeping

Mitigations

AIR-DET-021Agent Decision Audit and Explainability

III.S2.A13: Transparency and Provision of Information to Deployers

Risks

AIR-OP-017Lack of Explainability AIR-RC-001Information Leaked To Hosted Model AIR-OP-004Hallucination and Inaccurate Outputs

Mitigations

AIR-DET-013Providing Citations and Source Traceability for AI-Generated Information AIR-DET-021Agent Decision Audit and Explainability

III.S2.A14: Human Oversight

Risks

AIR-SEC-010Prompt Injection AIR-OP-014Inadequate System Alignment AIR-OP-016Bias and Discrimination AIR-OP-017Lack of Explainability AIR-OP-018Model Overreach / Expanded Use AIR-OP-020Reputational Risk AIR-OP-006Non-Deterministic Behaviour

Mitigations

AIR-DET-011Human Feedback Loop for AI Systems

III.S2.A15: Accuracy, Robustness and Cybersecurity

Risks

AIR-SEC-010Prompt Injection AIR-OP-019Data Quality and Drift AIR-SEC-002Information Leaked to Vector Store AIR-OP-004Hallucination and Inaccurate Outputs AIR-OP-005Foundation Model Versioning AIR-OP-006Non-Deterministic Behaviour AIR-OP-007Availability of Foundational Model AIR-SEC-008Tampering With the Foundational Model AIR-SEC-009Data Poisoning

Mitigations

AIR-PREV-005System Acceptance Testing

III.S3.A16: Obligations of Providers of High-Risk AI Systems

Risks

AIR-RC-022Regulatory Compliance and Oversight AIR-SEC-002Information Leaked to Vector Store AIR-SEC-008Tampering With the Foundational Model

III.S3.A21: Cooperation with Competent Authorities

Risks

AIR-RC-022Regulatory Compliance and Oversight

III.S3.A26: Obligations of Deployers of High-Risk AI Systems

Risks

AIR-OP-018Model Overreach / Expanded Use AIR-OP-007Availability of Foundational Model

Mitigations

AIR-DET-021Agent Decision Audit and Explainability

III.S3.A27: Fundamental Rights Impact Assessment for High-Risk AI Systems

Risks

AIR-OP-016Bias and Discrimination AIR-RC-022Regulatory Compliance and Oversight

IV.A50 Transparency Obligations for Providers and Deployers of Certain AI Systems

Risks

AIR-OP-017Lack of Explainability

V.S2.A53: Obligations for Providers of General-Purpose AI Models

Risks

AIR-RC-001Information Leaked To Hosted Model AIR-RC-023Intellectual Property (IP) and Copyright AIR-OP-005Foundation Model Versioning AIR-OP-007Availability of Foundational Model AIR-SEC-008Tampering With the Foundational Model AIR-SEC-009Data Poisoning

IX.S1.A72: Post-Market Monitoring by Providers and Post-Market Monitoring Plan for High-Risk AI Systems

Mitigations

AIR-DET-011Human Feedback Loop for AI Systems AIR-DET-021Agent Decision Audit and Explainability

IX.S4.A86: Right to Explanation of Individual Decision-Making

Risks

AIR-OP-017Lack of Explainability

Mitigations

AIR-DET-013Providing Citations and Source Traceability for AI-Generated Information AIR-DET-021Agent Decision Audit and Explainability