Rule set sha256:c63def17fac2

EU_AI_ACT_ART5_VULNERABILITY_001

One rule of the rule set with digest c63def17fac2df12ab70941d8fcb7678e9a670479ea0d6dce87e7ddd4dc96079. An audit record that names this digest and this rule was decided by the rule as shown here. Every rule in this set.

RuleEU_AI_ACT_ART5_VULNERABILITY_001
Rule version2aa2522d96746ba86dfd44b563ffca01921930a506c5afd7edf37059f4510e58
ProvisionRegulation (EU) 2024/1689, Article 5(1)(b)
ELI: http://data.europa.eu/eli/reg/2024/1689/art_5/par_1/pnt_b/oj
ApprovalApproved
Approved by Leo Celis (via agent review per §5.1 amendment v1.1) on 2026-10-22

rules/regulations/eu/eu_ai_act_article5_exploitation_vulnerabilities.yaml

Citation
Regulation (EU) 2024/1689, Article 5(1)(b): the placing on the market, the putting into service or the use of an AI system that exploits any of the vulnerabilities of a natural person or a specific group of persons due to their age, disability or a specific social or economic situation, with the objective, or the effect, of materially distorting the behaviour of that person or a person belonging to that group in a manner that causes or is reasonably likely to cause that person or another person significant harm.
Condition
Prohibits AI systems that exploit vulnerabilities of persons due to their age, disability, or social or economic situation to materially distort their behaviour causing significant harm. Article 5(1)(b).
Layer 1 detects
each on one line and in this order with any words between, "exploit" and then "elderly", "disabled", "minor" or "minors" as a whole word, "child", "vulnerab", "low income" (also "low-income" or "lowincome"), "disadvantaged" or "impoverished"; "target" and then "elderly", "disabled", "vulnerab" or "poverty"; and "predatory", then "lending", "pricing" or "marketing", then "elderly", "disabled", "minor" or "minors" (whole word) or "vulnerab". Case is ignored and every other word can sit inside a longer word ("targeted", "children"); "minority" does not match. It matches wording, not meaning: it misses the practice told in other words ("For users whose transaction data shows unemployment benefit deposits, push the 39.9% APR instant loan banner at 2 a.m. when they are most likely to accept."), and it fires on text that only names the practice, such as a refusal or a report about it. Whether a text does the practice is judged in Layer 2.
Condition type
regex; semantic condition in the file, not run by the engine
Status in the file
approved