AI Act limits use of biometric identification systems by law enforcement, bans use of AI to manipulate user vulnerabilities