Field Notes

source

EU AI Act

StatusStableReviewdue UpdatedStands on2 sourcesSupportsnotes

The EU AI Act is Regulation (EU) 2024/1689, the Union’s horizontal framework for placing, putting into service, and using artificial-intelligence systems. It classifies systems by regulatory treatment rather than declaring all AI a single legal category.

This note focuses on the Article 5 rule that matters to Swedish real-time facial recognition law and Adversarial clothing; it is not a general guide to the Regulation.

Real-time biometric identification

Article 5(1)(h) prohibits law-enforcement use of real-time RBI in publicly accessible spaces, subject to tightly delimited exceptions. The Regulation defines RBI functionally: it identifies people at a distance and without active involvement by comparing their biometric data against a reference database. Verification — confirming a claimed identity for access or authentication — is outside that definition.1

The exceptions concern finding victims of abduction, trafficking, or sexual exploitation and missing persons; preventing a specific, substantial and imminent threat to life or a terrorist attack; and locating or identifying a suspect of a listed serious offence. They require necessity and proportionality, consideration of temporal, geographic, and personal limits, and a Member State legal authorization. The authority must also complete a fundamental-rights impact assessment, register the system in the EU database, and obtain prior judicial or independent administrative authorization except in a duly justified urgent case.1

Swedish implementation

Sweden’s lag 2026:806 uses the Article 5 opening to authorize defined police and Security Service uses from 1 July 2026. It does not turn all public-camera footage, private biometric systems, or retrospective identification into a single legal category. For a concrete system, the time of identification, operator, location, purpose, and legal basis remain decisive.

Reading path

Facial recognition explains the technical pipeline. Gait recognition covers a separate biometric modality that can operate when a face is unavailable. Adversarial clothing assesses what apparel attacks can and cannot do against those pipelines.

  1. Article 5, prohibited AI practices, European Commission AI Act Service Desk; local copy. The operative text is Regulation (EU) 2024/1689; the service desk restates it with the Commission’s own navigation and commentary, which is convenient but not the authentic version. ↩↩

Built on 2 sources (2 external).

Working out connections…