[candiodari]

So there's effectively a blanket exception for the organisations you really don't want to be doing this, ie. Police, the institution itself and government? (incidentally, government is your health insurance company in most of Europe)

I keep coming to the same problem with these regulations. I am much less afraid of Amazon/Google/... figuring out something about me and using it to sell me stuff than I am afraid of the police doing the same, and arresting me or otherwise having a huge negative impact on my life. Knowing the police, they'll probably not even do AI monitoring correctly, and of course, won't be responsible for the damage they cause.

Frankly, that Amazon and Google figure out stuff I might want to buy might actually be a positive. Maybe. Sometimes. If they become better at weeding out scams, that is.

[ianbicking]

While there's a hard block on using emotion recognition in workplaces and educational institutions, the other cases you list are listed under "High Risk" and so they are very much included in the regulation.

There are several exceptions for different kinds of law enforcement, things like eminent danger, or doing biometric filters when searching for someone that fits a description. How much you can squeeze in under those exceptions depends on how bold the police are. Probably a lot, but it's not written that way.