MR-077 Regulatory compliance Both scope

Deploying or repurposing a system into a prohibited practice

A deployer uses, or through repurposing or capability drift causes a system to fall into, a practice prohibited by the Act (for example manipulative or exploitative techniques, social scoring, untargeted facial scraping, or emotion inference at work).

Risk family: Regulatory compliance
MIT domain: n/a (EU-derived)
MIT subdomain: n/a
AI type: GPAI, Agentic, Classical_ML
Scope: Both
Source standard: EU AI Act 2024/1689 (gap analysis)

Provenance

Source standard

EU AI Act 2024/1689 (gap analysis)

Source frameworks

EU AI Act 2024/1689

EU AI Act articles

Art. 5

Nearest MIT-derived risk

MR-060 Use outside intended scope / MR-040 Regulatory non-compliance (neither names the prohibited-practice categories).

Framework crosswalk

Every framework item mapped to this risk. Items marked partial overlap only in part; definitions appear on hover where the source licence permits.

Sourcesframeworks that contributed to the register

EU AI Act1

Art. 5

More in Regulatory compliance

MR-040 MR-072 MR-073 MR-074 MR-075 MR-076 MR-078 MR-079 MR-080 MR-081 MR-082

Part of the Deployer AI Risk Register, an open-source resource developed by MindXO. Version 1.0, 3 July 2026. Derived from the MIT AI Risk Repository (V4, December 2025) under CC BY 4.0; an independent derivative work, not endorsed by or affiliated with MIT. Sub-risk decomposition references MITRE ATLAS™ v5.6.0 (© 2021-2026 The MITRE Corporation, reproduced and distributed with permission). ISO/IEC and EU AI Act references are by number only. License: CC BY 4.0. Full attribution and licensing.