Article 5 is the first gate in an enterprise AI governance program. Before a team debates whether a system is high-risk, limited-risk, or minimal-risk, it should ask whether the practice is prohibited outright.
The practical issue for enterprises is that prohibited-practice risk is often hidden in workflow design. A vendor may market a feature as personalization, fraud prevention, productivity scoring, or safety monitoring. The governance team has to examine what the system actually does, who it affects, whether people can reasonably understand or contest it, and whether vulnerable groups are exploited.
Screening should happen at intake. Every new AI request, vendor procurement, proof of concept, and material use-case change should answer a short set of questions:
- Does the system manipulate behavior in a way people are unlikely to perceive?
- Does it exploit vulnerability related to age, disability, social situation, or economic status?
- Does it rank or score people in a way that could lead to unjustified detrimental treatment?
- Does it infer sensitive characteristics or emotions in restricted settings?
- Does it use biometric identification or categorization in a prohibited context?
- Does it scrape or process personal data in a way that creates unacceptable risk?
The exact legal analysis belongs with counsel. The governance system should make sure the right facts are collected, the review is routed, and the conclusion is preserved.
Hydrus supports Article 5 screening as part of AI registration. The prohibited-practice review sits before high-risk classification. If a system presents a red flag, it can be blocked, escalated, or redesigned. If it clears the screen, the rationale stays attached to the system record.
This matters because a clean inventory without prohibited-practice screening is incomplete. Regulators and customers will not only ask what systems exist. They will ask how the organization prevents unacceptable AI from entering production.
The best Article 5 control is operational: no AI system moves from idea to pilot to production without a dated, owner-approved prohibited-practice screen.
This guide is educational and not legal advice.