High-Risk Processing classification · DIFC Reg 10 §10.2.2; High Risk Processing Activities, Schedule 1, Article 3(c) of the DPL (systematic evaluation, profiling, decisions with legal or similarly significant effects)
Reviewed 18 Sep 2026
High-Risk Processing is a label for AI systems that make, or strongly shape, decisions about people. The decision must matter to the person affected.
Common examples include:
These systems often use automated decision-making or profiling. Profiling means using data to predict things about a person, such as their behaviour or risk.
When a system fits the triggers, you must record a classification. A classification is a written decision that says "this system is High-Risk Processing, and here is why." That label then unlocks stronger controls, such as a deeper risk assessment and sign-off by your Autonomous Systems Officer (ASO).
A wrong call here is costly. If you classify a high-risk system as low-risk, you skip the controls that protect people from unfair or harmful outcomes.
The DIFC Commissioner can review your classifications during an inspection. Weak or missing reasoning is a clear red flag. Where a flawed decision harms someone, that person may bring a private right of action in the DIFC Courts. A solid, honest classification is your first line of defence.
regulation10.ae guides you through the High Risk Processing Activities limbs and produces a written classification for each system, ready for assessment. It links that classification to your AI System Register so the label stays current. You get a consistent, evidence-backed view of where your real risk sits.
Find your high-risk systems with the free readiness assessment, or explore our plans.
AI-assisted. Answers are generated from the published knowledge base and are not legal advice.