We use cookies to improve your experience and analyse site traffic.
Fear, uncertainty, and doubt around the EU AI Act are understandable — the regulation is 144 pages of cross-referencing Articles, Annexes, and recitals. But for most organisations, the obligations are precise and manageable.
€35m
Whichever figure is higher applies. SME caps may apply; national competent authorities determine enforcement approach.
pages
of regulation
risk tiers
from minimal to prohibited
deadlines
phased enforcement 2024–2027
max fine
of global annual turnover
Myths & Realities
Enforcement Timeline
The regulation entered into force on 1 August 2024 and applies in phases.
Until high-risk obligations
56
Days
06
Hours
08
Minutes
38
Seconds
All high-risk AI systems Complete Annex IV technical documentation required for all high-risk AI systems. Post-market monitoring, FRIA, and EU database registration all apply. Article 50 transparency obligations activate. Each Member State must have at least one AI regulatory sandbox operational. Original Annex III deadline; will shift if Digital Omnibus adopted before this date.
AI systems in products covered by existing EU harmonisation legislation — medical devices, machinery, aviation — get a full three-year transition.
Parliament's proposed fixed deadline for providers of AI systems generating synthetic audio, image, video, or text content to implement machine-readable detectability under Art. 50(2). Alternative to 2 Feb 2027 Commission text.
AI systems in products covered by existing EU harmonisation legislation - medical devices, machinery, aviation - get a full three-year transition. GPAI models placed on market before 2 Aug 2025 must reach full compliance. Annex X large-scale IT system cutoff date for the 2030 retrofit obligation.
Proposed fixed compliance deadline for standalone high-risk systems (recruitment, credit scoring, biometrics, critical infrastructure, employment, law enforcement, education, essential services). Replaces 2 Aug 2026 if Omnibus adopted.
Proposed fixed compliance deadline for high-risk AI in regulated products (medical devices, machinery, vehicles, toys). Also Commission evaluation of AI Office functioning and voluntary codes of conduct.
First four-yearly evaluation of the Regulation. Commission assesses supervision and governance structures, need to amend Annex III, and need for additional prohibited practices.
Transitional deadline under Art. 111(2) for high-risk systems placed on market before 2 Aug 2026 and used by public authorities, even absent significant design changes.
AI systems that are components of Annex X large-scale IT systems (Schengen Information System, VIS, Eurodac, Entry/Exit System, ETIAS, ECRIS-TCN) placed on market before 2 Aug 2027 must be brought into full compliance.
Who It Applies To
The Act distinguishes between providers, deployers, importers, and authorised representatives. Each carries distinct obligations — and a single organisation may hold multiple roles simultaneously, compounding requirements.
Seven questions, around two minutes. A clear read on your exposure across the EU AI Act, GDPR, and the regimes that engage in parallel — yours to keep, whoever you choose to act with.