Law / Frameworks / ETSI EN 304 223 / 5.1
ETSI EN 304 223, 5.15.1.4-3
Where oversight is a risk control, the technical measures behind it are built, verified and maintained. Our summary; European Telecommunications Standards Institute (ETSI)'s text is not ours to print.
We read each law below as bearing on this provision. That does not mean the provision, done well, meets the law: what each law asks is on its own page. Law library as of .
The kinds of duty that reach it: biometric.
- 5
- laws
- 3
- jurisdictions
- 0
- with court rulings behind them
- 2
- not yet in force
Related controls in other frameworks the same duties, in at least two laws we track, reach both
- NIST AI RMFMAP 3.5 Processes for human oversight are defined, assessed, and documented in..., 4 laws
- NIST AI RMFMAP 3.3 Targeted application scope is specified and documented based on the system’s..., 2 laws
- NIST AI 600-1GAI-RISK-04 Data Privacy, 5 laws
- NIST AI 600-1GAI-RISK-07 Human-AI Configuration, 5 laws
- NIST AI 200-22.3 Apply & Measure, 4 laws
- NIST AI 200-24.3 Composing a TEVV Toolbox, 4 laws
- OWASP LLM Top 10LLM03:2026 Excessive Agency, 4 laws
- OWASP Agentic Top 10ASI09 Human-Agent Trust Exploitation, 4 laws
- MIT mitigations3.2 Data Governance, 5 laws
- MIT mitigations3.3 Access Management, 5 laws
- MIT mitigations1.1 Board Structure & Oversight, 4 laws
- 3 more in the MIT mitigations
- NIST Privacy FrameworkCT.DM-P10 Stakeholder privacy preferences are included in algorithmic design..., 2 laws
- NIST Privacy FrameworkCT.PO-P1 Policies, processes, and procedures for authorizing data processing (e.g.,..., 2 laws
- FINOS AIGFAIR-PREV-006 Data Quality & Classification/Sensitivity, 5 laws
- FINOS AIGFAIR-PREV-005 System Acceptance Testing, 4 laws
- FINOS AIGFAIR-PREV-024 Human-in-the-Loop Action Approval Gate, 4 laws
- 3 more in the FINOS AIGF
A law in force is unmarked; the rest wear their state: not yet in force
AI risk obligations
3 laws, 2 jurisdictions| Jurisdiction | Law | How it reaches this provision |
|---|---|---|
 European Union |
AI Act, Article 14 (human oversight) from , in 13 months |
Through its biometric duty. What it requires |
| European Union |
AI Act, Article 26(10) (post-remote biometric identification authorisation) from , in 13 months |
Through its biometric duty. What it requires |
 Italy |
Decreto Legislativo 160/2026, After-the-Fact Facial Recognition Integrated in Video Surveillance (Art. 10) |
Through its biometric duty. What it requires |
AI prohibited practices
1 law, 1 jurisdiction| Jurisdiction | Law | How it reaches this provision |
|---|---|---|
| Italy |
Decreto Legislativo 160/2026, Police Biometric AI: Dataset Labelling and Real-Time Remote Identification (Artt. 7-9, 13) |
Through its biometric duty. What it requires |
Personal data
1 law, 1 jurisdiction| Jurisdiction | Law | How it reaches this provision |
|---|---|---|
 Central African Republic |
Loi n° 24.001 portant protection des données à caractère personnel, collecte de données publiquement accessibles et transfert transfrontalier |
Through its biometric duty. What it requires |
Identifiers refer to ETSI EN 304 223 V2.1.1 (2025-12), © ETSI 2025, all rights reserved. ETSI owns the standard; no ETSI text (titles or sentences) is reproduced here. The standard is free to download from ETSI. Every provision of the framework.