The EU AI Act assigns duties by system classification and operator role, including transparency and human oversight for defined education uses.
Classification precedes control selection
The EU AI Act requires classification before control selection. Education-related systems can fall into different categories according to intended purpose and effect; some uses listed in Annex III may be high-risk, while other systems engage transparency or general operator duties. A generic statement that an institution ‘uses AI’ is therefore insufficient for legal analysis.[S1]
The Regulation organizes obligations by system classification, intended purpose and operator role. Education appears in specified Annex III use cases, but that does not make every instructional or administrative feature high-risk. The factual record needs the system version, the decision it supports, the population affected and whether the organization acts as provider, deployer, importer or distributor.[S1]
Operator duties and high-risk system evidence
The Regulation separates obligations for providers, deployers, importers and distributors. The high-risk framework covers risk management, data governance, technical documentation, record keeping, transparency, human oversight, accuracy, robustness and cybersecurity. Article 50 establishes specified transparency duties, while article 4 addresses AI literacy. Evidence needs to preserve the system version, use case, role allocation and the provision relied upon.[S1]
For high-risk systems, Articles 9 to 15 address risk management, data governance, technical documentation, records, transparency, human oversight, accuracy, robustness and cybersecurity. Article 26 addresses deployers, Article 49 registration, Article 50 specified transparency duties and Article 4 AI literacy. Evidence should map each applicable duty to the responsible actor rather than treating a vendor declaration as a complete conformity file.[S1]
System documentation needs to remain connected to the deployed configuration. Intended purpose, model or software version, data inputs, instructions, logs and human decisions form the traceability record. Change control determines when an earlier classification or test no longer supports the current use. Complaints, overrides and incident reports provide essential evidence about operation beyond the supplier's pre-market documentation.[S1]
Defining the education use and accountable role
Territorial reach, placing on the market, putting into service and use of outputs within the Union are distinct connecting factors. Annex III education cases concern specified decisions and not every instructional feature. Prohibitions, exceptions and phased applicability require provision-specific review.[S1]
Territorial reach can arise through placing a system on the Union market, putting it into service, using it in the Union or using outputs in the Union under the Regulation's conditions. Intended purpose is central to classification. An education organization may deploy one system in several use cases, each requiring separate analysis if the decision, affected person or role changes.[S1]
Technical labels cannot establish legal conformity
This article does not decide the classification of a named system or replace competent legal advice. Technical explainability, a human-in-the-loop label or a vendor declaration cannot independently establish conformity with all applicable duties.[S1]
A statement that a human is involved does not show effective oversight. The person needs competence, information, authority and time to intervene. Explainability is likewise not a substitute for accuracy, lawful processing or remedy. Application dates, exceptions and classification questions are provision-specific; this article does not decide the legal status of a named system.[S1]
EU AI Act material in ICEQC analysis
ICEQC treats the Regulation as external law and keeps it separate from voluntary certification. This record predates the effective ICEQC standards edition in the current public register, so no later ICEQC clause is presented as part of the original analysis.
ICEQC keeps EU legal obligations separate from voluntary certification. Regulatory evidence may be relevant to the declared scope, but ICEQC does not act as the competent market-surveillance authority. The page predates the effective ICEQC edition in the register, so it carries no later clause link.