For financial services, the high-risk tier triggers transparency, documentation, and human-oversight duties. Some high-risk compliance deadlines are subject to a proposed deferral (the Digital Omnibus) that is not yet final law — confirm the current position with counsel.
It contrasts with the US approach, which relies on existing law plus principles-based regulator guidance rather than one statute.