EU AI Act Article 50(3) — Deployer duty to inform persons exposed to emotion recognition or biometric categorisation
Deployers of emotion recognition or biometric categorisation systems must inform the people exposed to them of the system's operation, and must process the personal data in accordance with EU data-protection law
Where this comes from
Provision: Article 50(3) — Deployer duty to inform persons exposed to emotion recognition or biometric categorisation
Instrument: EU Artificial Intelligence Act (Regulation (EU) 2024/1689)
Citation: Article 50(3), with Article 50(5), Regulation (EU) 2024/1689
Text version: Regulation (EU) 2024/1689 (AI Act), OJ L, 12.7.2024
Checked against the source: 2 September 2026
Who it applies to
AI system in scope of the Act (Art. 2) — all of these:
- Service deploys AI systems in a professional capacity
- AI Act role is Deployer or we provide some AI systems and deploy others
Emotion recognition or biometric categorisation system — any one of these:
- AI transparency features includes The system infers people's emotions
- AI transparency features includes The system places people in categories using their biometric data
…unless:
- AI Act scope exclusion is used exclusively for military, defence or national-security purposes or developed and used solely for scientific research and development
- Art. 2(3): the Regulation 'does not apply to AI systems where and in so far as they are placed on the market, put into service, or used with or without modification exclusively for military, defence or national security purposes'. (AI Act Art. 2(3))
- Art. 2(6): the Regulation 'does not apply to AI systems or AI models, including their output, specifically developed and put into service for the sole purpose of scientific research and development'. (AI Act Art. 2(6))
- Each Art. 50 transparency duty is disapplied for AI systems authorised by law to detect, prevent, investigate or prosecute criminal offences, subject to appropriate safeguards for the rights and freedoms of third parties — except, for Art. (AI Act Art. 50(1), (2), (3) and (4))
Scope in the source's own terms
- Art. 2(1): the AI system is placed on the market or put into service in the Union, or the provider/deployer is established in the Union, or the output produced by the system is used in the Union
- Art. 26(1), read with Art. 3(4): the actor is a 'deployer' — a natural or legal person using an AI system under its authority, other than in the course of a personal non-professional activity
- Art. 50(3): the triggering feature is deployment of an emotion recognition system or a biometric categorisation system, which brings with it the parallel duty to process the personal data under Regulation (EU) 2016/679 / (EU) 2018/1725 / Directive (EU) 2016/680
What engineering work it implies
- AI Transparency Notices (Chatbot, Emotion/Biometric, Synthetic Media)Covers it fully
The three Article 50 disclosures as shippable components: an AI-interaction notice, an emotion/biometric exposure notice, and synthetic-media labelling with a...
Sample acceptance criteria Landfall generates for this obligation:
- The notice is shown to the exposed person BEFORE the inference runs, not after the result exists
- The notice states what is inferred and for what purpose, in plain language
- The GDPR lawful basis is recorded, including the Art. 9 condition where a special category is inferred
- Use in the workplace or an education institution is checked against the Art. 5(1)(f) prohibition before build, and the medical/safety exception is documented if relied on
- Inference of protected attributes covered by Art. 5(1)(g) is blocked in code, not merely discouraged in policy
Evidence an auditor expects
- User-interface evidenceUser testing
Notice informing exposed natural persons of the operation of the emotion recognition or biometric categorisation system
Evidence of the notice served on persons exposed to the system, provided at the latest at the time of first exposure, in a clear and distinguishable manner and in conformity with applicable accessibility requirements (Art. 50(5))
- Assessment documentDocument review
Data-protection record for the biometric or emotion processing (the Art. 50(3) second limb)
Evidence that the personal data is processed in accordance with Regulation (EU) 2016/679, Regulation (EU) 2018/1725 and Directive (EU) 2016/680 as applicable — in practice the GDPR Art. 9(2) condition relied on for biometric data and the Art. 35 DPIA covering it
Questions people ask
- Does EU AI Act Article 50(3) — Deployer duty to inform persons exposed to emotion… apply to my service?
- It applies when Service deploys AI systems in a professional capacity; AI Act role is Deployer or we provide some AI systems and deploy others; and at least one of: AI transparency features includes The system infers people's emotions; AI transparency features includes The system places people in categories using their biometric data. It does not apply where AI Act scope exclusion is used exclusively for military, defence or national-security purposes or developed and used solely for scientific research and development.
- When does this become enforceable?
- EU AI Act Article 50(3) — Deployer duty to inform persons exposed to emotion… is enforceable from 2 August 2026. Its current status is: in force.
- What evidence does an auditor expect?
- Notice informing exposed natural persons of the operation of the emotion recognition or biometric categorisation system; Data-protection record for the biometric or emotion processing (the Art. 50(3) second limb).
Find out whether this one lands on you
Landfall's pre-scan answers the applicability question above for your product in minutes, then turns every obligation that applies into traceable engineering tickets with a citation chain your auditors can follow.
Not legal advice. Landfall maps regulatory obligations to engineering work for planning purposes. Its verdicts are not legal advice and create no attorney-client relationship — verify with qualified counsel before relying on them.