AI rules by industry

HR is where the AI Act bites hardest for ordinary companies: almost every AI that decides about candidates or employees is high-risk, and emotion recognition at work is banned.

Credit scoring and life and health insurance pricing are high-risk; the financial sector also has DORA and strict supervisors.

Medical AI is usually a medical device and high-risk; health data is a special category under GDPR. The European Health Data Space will open access to data for AI development.

Content is where transparency rules apply: deepfakes must be labelled, Slovenian media must label all AI content, and copyright questions arise with every campaign.

Chatbots, recommendations and dynamic pricing are everyday AI in retail — mostly minimal risk, but consumer law makes you responsible for what your AI says and does.

Public bodies have extra duties: fundamental rights impact assessments, registration of high-risk AI and, in Slovenia, a public register of high-risk AI in the public sector.

AI for admissions, grading and proctoring is high-risk; emotion recognition of students is banned.

For manufacturers AI meets product law: the Machinery Regulation, the Cyber Resilience Act, the Data Act and the new product liability rules.

If you build or resell AI, you are a provider, importer or distributor — with duties depending on risk — and your software now falls under the CRA and product liability.

Mostly minimal-risk AI use — but professional secrecy and client data make GDPR and confidentiality the main issue.