European regulation that establishes prohibitions, obligations for certain high-risk systems and transparency duties. Its application is phased; the specific scope depends on the system, its use and the role of each organisation.