Skip to content
EU AI Act · EU-AI-ACT-ART-5-PROHIBITED-PREDICTIVE-POLICING

EU AI Act Article 5(1)(d) — Prohibition on predicting criminal offending from profiling or personality traits

AI systems that predict a person's risk of committing a criminal offence based solely on profiling or personality traits are prohibited; systems supporting a human assessment grounded in objective, verifiable facts are not

CRITICALProhibitionProfilingBinding regulationIn forceEnforceable from 2 February 2025

Where this comes from

Provision: Article 5(1)(d) — Prohibition on predicting criminal offending from profiling or personality traits

Instrument: EU Artificial Intelligence Act (Regulation (EU) 2024/1689)

Citation: Article 5(1)(d), Regulation (EU) 2024/1689

Text version: Regulation (EU) 2024/1689 (AI Act), OJ L, 12.7.2024

Checked against the source: 2 September 2026

Read the official text ↗

Who it applies to

AI system in scope of the Act (Art. 2) — all of these:

  • Service deploys AI systems in a professional capacity

…unless:

  • AI Act scope exclusion is used exclusively for military, defence or national-security purposes or developed and used solely for scientific research and development
  • Art. 2(3): the Regulation 'does not apply to AI systems where and in so far as they are placed on the market, put into service, or used with or without modification exclusively for military, defence or national security purposes'. (AI Act Art. 2(3))
  • Art. 2(6): the Regulation 'does not apply to AI systems or AI models, including their output, specifically developed and put into service for the sole purpose of scientific research and development'. (AI Act Art. 2(6))
  • Art. 5(1)(d): 'this prohibition shall not apply to AI systems used to support the human assessment of the involvement of a person in a criminal activity, which is already based on objective and verifiable facts directly linked to a criminal activity'. (AI Act Art. 5(1)(d), final clause)

Scope in the source's own terms

  • Art. 2(1): the AI system is placed on the market or put into service in the Union, or the provider/deployer is established in the Union, or the output produced by the system is used in the Union
  • Art. 5(1): the prohibition binds ANY actor that places the system on the market, puts it into service or uses it — provider, deployer, importer, distributor or authorised representative alike
  • Art. 5(1)(d): the system makes risk assessments of natural persons to assess or predict the risk of committing a criminal offence 'based solely on the profiling of a natural person or on assessing their personality traits and characteristics'
  • Art. 5(1)(d): the assessment rests on profiling or personality data about the individual rather than on objective, verifiable facts directly linked to a criminal activity

What engineering work it implies

Sample acceptance criteria Landfall generates for this obligation:

  • Every AI system and material feature is checked against this prohibition and the result is recorded per system, with a date and an owner
  • A signed attestation states that the practice is not present, naming who is accountable for it
  • A design-review gate asks this question before a new AI feature ships, so a future introduction is caught rather than assumed away
  • Where the prohibition carries a narrow exception, reliance on it is documented with the specific facts, not asserted generically
  • Third-party and vendor AI components are covered by the same check, with the obligation flowed down contractually

Evidence an auditor expects

  • Assessment documentDocument review

    Prohibited-practice screening attestation for Art. 5(1)(d)

    Signed assessment recording whether the system assesses or predicts the risk of a natural person committing a criminal offence and, if so, whether that assessment rests SOLELY on profiling or personality traits, or supports a human assessment already based on objective and verifiable facts directly linked to a criminal activity

  • Process recordDocument review

    Decision record evidencing the objective facts relied on and the human decision-maker

    Per-decision record naming the human decision-maker and listing the objective, verifiable facts directly linked to a criminal activity that the assessment was based on — the evidence the Art. 5(1)(d) carve-out actually requires

Questions people ask

Does EU AI Act Article 5(1)(d) — Prohibition on predicting criminal offending from… apply to my service?
It applies when Service deploys AI systems in a professional capacity. It does not apply where AI Act scope exclusion is used exclusively for military, defence or national-security purposes or developed and used solely for scientific research and development.
When does this become enforceable?
EU AI Act Article 5(1)(d) — Prohibition on predicting criminal offending from… is enforceable from 2 February 2025. Its current status is: in force.
What evidence does an auditor expect?
Prohibited-practice screening attestation for Art. 5(1)(d); Decision record evidencing the objective facts relied on and the human decision-maker.

Find out whether this one lands on you

Landfall's pre-scan answers the applicability question above for your product in minutes, then turns every obligation that applies into traceable engineering tickets with a citation chain your auditors can follow.

Not legal advice. Landfall maps regulatory obligations to engineering work for planning purposes. Its verdicts are not legal advice and create no attorney-client relationship — verify with qualified counsel before relying on them.

What Landfall Is NOT

Critical Boundaries

Understanding these boundaries is essential before using this product. Misuse of this tool for purposes outside its scope may create legal, regulatory, or commercial risk for your organization.

NOT Legal Advice

This product does not provide legal advice and does not create an attorney-client relationship.

Interpretations are informational analysis, not legal counsel. Always consult qualified legal professionals for compliance decisions.

NOT a Risk Score

We do not quantify, calculate, or certify your compliance risk level.

No numerical risk rating, compliance percentage, or safety score. Risk assessment requires human judgment about your specific context.

NOT Runtime Enforcement

This is a planning and mapping tool, not a runtime enforcement system.

Does not integrate with your production systems. Does not block, filter, or enforce compliance in real-time. Implementation is your responsibility.

NOT Regulatory Approval

Using this tool does not mean you are compliant with any regulation.

No certification, seal of approval, or compliance guarantee. Regulators will evaluate your actual implementation, not your use of this tool.

NOT Authoritative Interpretation

Our interpretations are not binding and may differ from regulatory guidance.

Only regulators and courts provide authoritative interpretation. Our analysis reflects our reading of requirements, which may be incomplete or incorrect.

NOT a Safe Harbor

This tool does not shield you from enforcement actions or liability.

Documentation of your process is valuable, but does not constitute a legal defense. Compliance is ultimately your organization's responsibility.

NOT an AI Compliance Agent

AI features assist analysis but do not make compliance decisions for you.

AI-generated interpretations require human review and approval. Automated suggestions are starting points, not final answers.

NOT Complete Coverage

We do not cover all regulations, all obligations, or all jurisdictions.

Regulatory landscape is vast and evolving. Gaps in our coverage do not mean those requirements don't apply to you.

What This Tool IS:

  • A structured workflow for mapping regulatory requirements to implementation tasks
  • A documentation system for compliance decisions (audit trail)
  • A collaboration platform for compliance, legal, and engineering teams
  • An informational resource for understanding regulatory obligations