Build a board-ready risk heatmap in minutes — free, no account required

Open tool

Governance & Approval

Prohibited AI Practice Screening and Approval

What this control does

Screen proposed AI systems and use cases for prohibited practices before procurement, development, deployment or material change.

How to implement

Apply this screening before acquiring, developing or materially changing an AI use case.

  1. Describe what the system will actually do, who may be affected and how it will be used. Do not rely only on a supplier's general product description.
  2. Compare the proposed use with the relevant Article 5 prohibition and its specific conditions. Record the legal source and version considered.
  3. Prevent a potentially prohibited use from proceeding until the responsible reviewer resolves the issue. An internal approval cannot authorize a prohibited practice.
  4. Where a narrow exception is relied on, document why it applies and obtain any required external authorization. Re-screen when the use or the law changes. Application dates and exceptions must be checked in the linked obligation; they are not identical for every prohibited practice.

Suggested timing and triggers

Before procurement, development, release or deployment; after material changes to purpose, capability or applicable requirements.

Evidence examples

Completed use-case screening with system and intended use identified Decision record citing the relevant prohibition and conditions Documented exception analysis and external authorization where required Records of rejected, restricted or redesigned uses Re-screening and escalation records

How to check this control

Select an approved use and a rejected or restricted use. Check whether the decision addresses the actual activity and relevant conditions, and whether restrictions are implemented. Confirm that a changed use case would trigger a new review.

Recognized by G2 as a Leader

Trusted by customers and rated highly across all categories

Prohibited AI Practice Screening and Approval | EU AI Act Suggested Control | Tracker Networks