EU AI Act use-case guide · Last verified 2026-08-02High risk

EU AI Act for AI exam proctoring in Education & EdTech

Exam proctoring maps to Annex III §3(b) — AI used to monitor and detect prohibited behaviour during tests is high-risk, with the Act's full provider and deployer obligations.

Preliminary risk score 82/100Annex III, §3Preliminary summary · Not legal advice
AI exam proctoringremote test monitoring AIonline proctoring EU AI ActAnnex III education AIAI cheating detection

Risk level

AI exam proctoring maps to a high-risk Annex III category, so the obligations below apply in full.

Annex III anchor

Annex III, §3

Score basis

A preliminary 82/100 based on the type of decision the system influences and how it is deployed in Education & EdTech.

Provider obligations

What the provider (developer) must do

Art. 10

Data governance for behavioural monitoring data

EUR-Lex
Art. 14

Human oversight of cheating flags before outcomes

EUR-Lex
Art. 15

Accuracy and robustness of behavioural detection

EUR-Lex

Deployer obligations

What you must do as the deployer

Art. 26

Inform students; never act on automated flags alone

EUR-Lex
Art. 27

FRIA for education-system deployers where applicable

EUR-Lex

Deployment

How AI exam proctoring shows up in Education & EdTech

Typical contexts

Remote university examsOnline certification tests

Signals it's in play

  • Behaviour monitoring
  • Cheating flags
  • Exam surveillance

Recommendations

  • Human review of every flag
  • Student notification
  • Data minimisation in monitoring

Watch-outs

  • False accusations
  • Bias against certain behaviours
  • Invasion of privacy

FAQ

EU AI Act questions about AI exam proctoring

Is AI exam proctoring high-risk under the EU AI Act?

AI exam proctoring maps to Annex III, §3, which the EU AI Act treats as high-risk. In practice it is assessed as High risk, and the obligations below apply to providers and deployers.

Which EU AI Act articles apply to AI exam proctoring?

The obligations that typically apply are Art. 10 — data governance for behavioural monitoring data; Art. 14 — human oversight of cheating flags before outcomes; Art. 15 — accuracy and robustness of behavioural detection; Art. 26 — inform students; never act on automated flags alone; Art. 27 — fRIA for education-system deployers where applicable. Providers (developers) carry the technical duties; deployers (operators) carry the use, oversight, and transparency duties.

Who is responsible — the provider or the deployer of AI exam proctoring?

Both. Providers owe the technical obligations such as Art. 10, Art. 14, Art. 15. Deployers owe Art. 26, Art. 27. The split matters for procurement and vendor agreements in Education & EdTech.

What should you watch out for with AI exam proctoring?

Common failure modes include: False accusations; Bias against certain behaviours; Invasion of privacy. Mitigations typically start with Human review of every flag and Student notification.

Where does AI exam proctoring typically appear in Education & EdTech?

Typical deployment contexts include Remote university exams and Online certification tests. Before deploying, confirm whether the specific use triggers the high-risk obligations listed above.

Sources

Citations & further reading

Related

More AI use cases in Education & EdTech

Explore

More industry guides

Describe your exact system, get a personalised read

The guide above is a general baseline for AI exam proctoring. The free Risk Scanner maps your specific implementation and surfaces hidden compliance blind spots.

Open the Risk Scanner

Preliminary EU AI Act clarity summary. Not legal advice.