Sectorial AI Regulation

AI in credit scoring, algorithmic trading, and fraud detection faces the EU AI Act plus sector-specific obligations under DORA for ICT risk management, MiFID II for algorithmic trading governance, Solvency II for insurance model validation, and PSD2 for payment security.

AI-powered medical devices and diagnostic tools must satisfy both the EU AI Act's high-risk requirements and the Medical Devices Regulation (MDR), In Vitro Diagnostics Regulation (IVDR), and clinical trials regulation for AI-assisted research.

AI systems managing energy, water, transport, and digital infrastructure face dual obligations — the EU AI Act for AI-specific risks and NIS2/CER Directive for cybersecurity and physical resilience of essential services.

AI in aviation (autopilot, air traffic management), autonomous vehicles, and rail signalling must comply with the EU AI Act alongside existing safety certification frameworks managed by EASA, type-approval regulations, and railway interoperability directives.

AI-driven network management, predictive maintenance, and customer analytics in telecoms are subject to the European Electronic Communications Code (EECC), upcoming ePrivacy Regulation, and the Data Act's data-sharing obligations.

AI in admissions scoring, automated grading, and learning personalisation is classified as high-risk under the EU AI Act. Sector-specific layers include GDPR protections for minors (Art. 8), the European Accessibility Act, and national education laws.