EU AI Act and Education AI: Adaptive Learning, Proctoring, and Admissions

Artificial intelligence is transforming education at every level — personalised learning platforms adapt to individual students, automated proctoring systems monitor remote exams, and algorithmic tools assist with university admissions. Each of these applications raises distinct questions under the EU AI Act, and the answers differ significantly from one use case to the next.

This guide explains how the AI Act classifies the main education AI use cases, what obligations apply, and what educational institutions and EdTech companies must do to comply.

The Core Classification: Which Education AI Is High-Risk?

Article 6(2) and Annex III §3 of the AI Act are the primary provisions governing education AI. Annex III §3 classifies the following as high-risk:

AI systems intended to be used to determine access or admission to or to assign natural persons to educational and vocational training institutions, to evaluate learning outcomes of natural persons, to assess the appropriate level of education for a person and materially influence the level of education and training that person will receive, or to monitor and detect prohibited behaviour of students during tests.

This single provision covers a surprisingly broad range of education AI:

Admissions AI: Systems that score, rank, or select applicants for schools, universities, or vocational training
Assessment AI: Systems that evaluate student performance — grading, scoring essays, evaluating oral responses
Adaptive learning AI: Systems that assess a student's learning level and recommend a specific curriculum path — when these recommendations "materially influence" the educational trajectory, they are covered
Proctoring AI: Systems that monitor students during examinations to detect prohibited behaviour

Each of these is high-risk under the AI Act, triggering the full suite of Articles 9–15 provider obligations.

Adaptive Learning Tools: The Material Influence Test

Not all adaptive learning falls within the high-risk category. The AI Act's language in Annex III §3 requires that the system "materially influence" the level of education or training the person will receive.

An AI system that adjusts the difficulty of practice exercises within a single lesson session — without generating permanent records that affect a student's curriculum placement — is unlikely to qualify as high-risk. The adaptation is real-time, reversible, and does not determine the student's educational trajectory.

An AI system that assesses a student's learning level across multiple sessions, generates a placement report that an educator or institution uses to assign the student to a specific class level, ability group, or educational programme, exercises material influence over the student's educational trajectory. This system is high-risk.

The boundary is between AI that adapts within a bounded interaction and AI that generates assessments that determine access to educational pathways. EdTech companies should examine where on this spectrum their product sits.

Obligations for high-risk adaptive learning providers

If your adaptive learning platform generates assessments that materially influence curriculum placement:

Annex IV technical documentation: Document the assessment methodology, performance evaluation across student demographic groups, known limitations, and failure modes.
Article 10 training data: Demonstrate that training data is representative of the student population the system will assess, including diversity in age, educational background, learning style, and disability status. Flag and address any systematic performance gaps by student demographic.
Article 14 human oversight: Educators must be able to override placement recommendations. The system must flag uncertainty (for example, when a student's performance data is sparse, inconsistent, or potentially affected by a learning disability not captured in the training data).
Article 13 transparency to schools: Schools deploying your platform must receive documentation adequate to explain to students and parents how the assessment works, what factors it considers, and what its limitations are.

AI Proctoring: The High-Risk Case with an Absolute Prohibition

Proctoring AI — systems that monitor students during online exams for suspected cheating behaviour — is explicitly listed as high-risk in Annex III §3 ("monitor and detect prohibited behaviour of students during tests").

Proctoring AI is one of the most contentious AI use cases in education. It has faced regulatory scrutiny across multiple EU member states and has been challenged by students and data protection authorities on fundamental rights grounds.

What high-risk proctoring requires

Risk management (Article 9): The risk management file must specifically address:

False positive risk — students incorrectly flagged as cheating due to environmental factors (poor lighting, background noise, physical disability, cultural norms around eye contact)
Bias risk — evidence that the system produces different false positive rates for different demographic groups, including race, disability, and gender
Fundamental rights impact — the right to education (EU Charter Article 14) is implicated when false positives result in academic penalties

Training data (Article 10): Proctoring models trained primarily on one demographic group systematically underperform on others. Documentation must address the demographic diversity of training data and performance testing across relevant groups.

Human oversight (Article 14): A proctoring AI output — a flag indicating suspected cheating — cannot trigger automatic academic penalty. A named educator must review the flag, view the relevant footage (if applicable), and make an independent judgment. The AI's flag is input to human judgment, not a determination.

The absolute prohibition: no emotion recognition in educational institutions

Article 5(1)(f) of the AI Act bans AI systems used to infer emotions of natural persons in educational institutions, with only medical and safety exceptions.

This prohibition affects proctoring products that go beyond detecting specific prohibited behaviours (looking away from screen, second person detected) and attempt to infer emotional states (stress, anxiety, suspicious engagement). It also affects adaptive learning products that use emotion inference to adapt content delivery based on inferred student emotional state.

If your proctoring or EdTech product uses emotion recognition in any form in an educational context, this capability must be removed. There is no compliance pathway. The prohibition applies from February 2025.

Data protection dimension

Proctoring AI in online examinations processes highly sensitive biometric data — facial images and often behavioural biometric data (typing patterns, gaze tracking). This is special category biometric data under GDPR Article 9. Processing requires explicit consent or a specific legal basis under Article 9(2) GDPR.

In practice: students cannot provide genuinely free consent when refusal means being unable to sit an examination. GDPR supervisory authorities in multiple EU member states have taken positions that mandatory consent in educational examination contexts is not freely given and therefore not a valid GDPR consent basis. Alternative legal bases (necessary for substantial public interest under national law) may apply but require explicit national legal provision.

EdTech companies offering proctoring in the EU must navigate both AI Act and GDPR compliance simultaneously. The FRIA requirement under Article 27 for public educational institutions deploying proctoring AI is also mandatory.

Admissions AI

Classification

AI used in educational admissions — screening application essays, scoring candidates, ranking applicants for university or school places — is explicitly high-risk under Annex III §3. This includes:

AI that scores or grades standardised test responses
AI that analyses application essays for quality, originality, or fit
AI that ranks candidates by predicted success likelihood
AI that recommends admission or rejection

Critical obligations for admissions AI

Article 10 — Bias testing: Admissions AI must be tested for differential performance by race, gender, socioeconomic background, disability, and first language. Historical admissions data reflects historical patterns of privilege and disadvantage — a model trained on past successful applicants will systematically reproduce the socioeconomic profile of past successful applicants unless bias is actively identified and corrected.

Article 14 — Human oversight: Admissions AI cannot replace human admissions committees. The AI's output must be one input among several, and admissions decisions must be subject to meaningful human review. The AI Act does not require individual human approval of every application, but the system must be designed so that significant decisions (admission/rejection) involve human judgment, not just AI output.

FRIA (Article 27) for public universities: Public universities and publicly-funded educational institutions that deploy admissions AI must complete a FRIA before deployment. The FRIA must assess the fundamental rights implications of algorithmic admissions decisions, including the right to education (Article 14 of the EU Charter), non-discrimination (Article 21), and the right to an effective remedy (Article 47).

The explainability expectation

Applicants who are rejected based on an AI-assisted admissions process have a reasonable expectation of understanding why. While the AI Act does not mandate explainability per se, the combination of Article 50 transparency obligations, the right to an effective remedy under the EU Charter, and national administrative law in many EU member states creates strong pressure for admissions AI providers to offer explainable outputs.

Admissions AI that is a "black box" — producing a score without any indication of the factors considered — is difficult to defend when rejected applicants challenge decisions, and creates legal exposure for the educational institution.

Practical Guidance for EdTech Companies and Educational Institutions

For EdTech companies providing high-risk education AI:

Classify each product against Annex III §3 with documented reasoning
Remove any emotion recognition components from products used in educational contexts (Article 5(1)(f))
Prepare Annex IV technical documentation including demographic performance disaggregation
Provide schools and universities with documentation sufficient for their own compliance and FRIA preparation
Design override and human escalation pathways into the product architecture

For schools, universities, and public educational institutions:

Verify that any AI system you deploy has a valid EU Declaration of Conformity
Complete a FRIA before deploying any high-risk AI system
Designate human oversight persons for AI-assisted decisions on student placement, assessment, and admissions
Inform students and parents that AI is used in educational processes affecting them (Article 50)
Establish a recourse mechanism for students to challenge AI-influenced decisions

How DilAIg Helps

DilAIg generates the four mandatory documents for EdTech providers of high-risk education AI systems — Technical Documentation, Declaration of Conformity, FRIA, and Transparency Notice — from a single 50-question audit. For public educational institutions deploying AI, the FRIA generation covers the Article 27 requirements specific to educational deployment contexts.

Start your free audit at dilaig.com and get your education AI compliance documentation in order.

FAQ: EU AI Act and Education AI

Q: Does a learning management system (LMS) that uses AI recommendations qualify as high-risk? It depends on what the recommendations do. An LMS that uses AI to suggest study resources within a session is unlikely to be high-risk. An LMS that uses AI to assign students to different class levels, generate placement reports, or produce assessments that teachers use to make educational pathway decisions is likely high-risk under Annex III §3.

Q: Does the emotion recognition ban apply to university research projects? The emotion recognition ban in Article 5(1)(f) applies to uses "in the context of educational institutions." Academic research conducted in a university research context, with separate ethical approval and not deployed as an operational AI system in an educational setting, may fall outside the prohibition's scope — but this is an area requiring careful legal analysis. Using emotion recognition in a classroom or examination setting for research purposes is likely still prohibited.

Q: Can a university use an AI essay grading tool for official grade determination? Yes, but with full high-risk AI compliance. If the AI tool materially influences grades that form part of a student's academic record, the tool is high-risk under Annex III §3. The university as deployer must: verify the tool has a valid Declaration of Conformity, implement human oversight of grades generated by AI, inform students that AI was used in grading, and complete a FRIA if the university is a public institution.

Q: Who bears responsibility when an admissions AI makes a biased decision? Both provider and deployer bear responsibility for their respective obligations. The EdTech company (provider) is responsible for ensuring the system meets Articles 9–15 requirements, including bias testing. The university (deployer) is responsible for implementing human oversight, conducting a FRIA, and ensuring decisions are reviewed. In practice, biased automated admissions decisions may also trigger EU anti-discrimination law claims directly against the university as the decision-making body.

Key Takeaways

Admissions AI, assessment AI, and proctoring AI are explicitly high-risk under Annex III §3 of the EU AI Act.
Adaptive learning AI is high-risk when it materially influences a student's educational trajectory, but not when it only adapts within bounded real-time interactions.
Emotion recognition in educational institutions is absolutely prohibited under Article 5(1)(f) — this capability must be removed from any product deployed in schools or universities.
Public educational institutions deploying high-risk AI must complete a FRIA before deployment.
Admissions AI must be tested for demographic bias, designed with human oversight, and provide students with a basis for challenging AI-influenced decisions.