The AI Act, defence and national security: the exemptions

Short answer: The AI Act does not apply to AI systems placed on the market or used exclusively for military, defence or national-security purposes. Article 2 carves these out. But the exemption is narrow: as soon as a system is also deployed in a civilian context, or falls outside that purpose, the AI Act applies in full — and other law applies regardless.

What Article 2 excludes

Article 2 of the AI Act provides that the regulation does not apply to AI systems developed and used exclusively for military or defence purposes, nor to systems used exclusively for national security — whether by a public or a private party.

The rationale: defence and national security are primarily a competence of the Member States, not the Union. The EU legislator did not want to intervene there through product regulation.

"Exclusively" is the pivotal word

The exemption stands or falls on the word exclusively. A system used even partly for other purposes falls outside the exemption and therefore within the AI Act.

That bears directly on dual-use: technology usable both militarily and civilly. A facial-recognition or drone system deployed not only in defence but also in border management or policing may fall fully under the AI Act for that civilian use — possibly even as a high-risk or prohibited practice.

What the exemption does not do

The exemption switches off only the AI Act, not the rest of the law. Processing of personal data remains under the GDPR insofar as it applies, fundamental rights continue to apply, and international law remains fully in force. The exemption is thus no blank cheque, but a delimitation of one instrument.

Nor does it mean anything bearing a security label drops out of view. Use by law enforcement for routine tasks is not "national security" within the meaning of Article 2; those applications are in fact among the most heavily regulated categories of the AI Act.

Consequences for suppliers

For anyone supplying defence the boundary is commercially relevant. A product that stays purely military escapes AI Act conformity. The moment the same product seeks a civilian market, the ordinary obligations apply — see the overview of high-risk obligations. That forces a deliberate choice about positioning.

What to do

• Establish the actual purpose of use, not just intent: is deployment truly exclusively military/defence/national security?
• Separate dual-use variants: a civilian application draws the AI Act fully in.
• Apply the GDPR and fundamental rights anyway; the exemption does not switch those off.
• Distinguish national security from law enforcement: the latter falls squarely within the AI Act.
• Place this in the wider context of the state of AI regulation.

The defence exemption is real but narrow. Reading it too broadly misses the civilian and fundamental-rights obligations that simply continue to apply.