We use cookies to improve your experience and analyse site traffic.
We use cookies to improve your experience and analyse site traffic.
Fear, uncertainty, and doubt around the EU AI Act are understandable — the regulation is 144 pages of cross-referencing Articles, Annexes, and recitals. But for most organisations, the obligations are precise and manageable.
€35m
Whichever figure is higher applies. SME caps may apply; national competent authorities determine enforcement approach.
pages
of regulation
risk tiers
from minimal to prohibited
deadlines
phased enforcement 2024–2027
max fine
of global annual turnover
Myths & Realities
Enforcement Timeline
The regulation entered into force on 1 August 2024 and applies in phases.
Until high-risk obligations
56
Days
06
Hours
08
Minutes
38
Seconds
All high-risk AI systems Complete Annex IV technical documentation required for all high-risk AI systems. Post-market monitoring, FRIA, and EU database registration all apply. Article 50 transparency obligations activate. Each Member State must have at least one AI regulatory sandbox operational. Original Annex III deadline; will shift if Digital Omnibus adopted before this date.
AI systems in products covered by existing EU harmonisation legislation — medical devices, machinery, aviation — get a full three-year transition.
Parliament's proposed fixed deadline for providers of AI systems generating synthetic audio, image, video, or text content to implement machine-readable detectability under Art. 50(2). Alternative to 2 Feb 2027 Commission text.
AI systems in products covered by existing EU harmonisation legislation - medical devices, machinery, aviation - get a full three-year transition. GPAI models placed on market before 2 Aug 2025 must reach full compliance. Annex X large-scale IT system cutoff date for the 2030 retrofit obligation.
Proposed fixed compliance deadline for standalone high-risk systems (recruitment, credit scoring, biometrics, critical infrastructure, employment, law enforcement, education, essential services). Replaces 2 Aug 2026 if Omnibus adopted.
Proposed fixed compliance deadline for high-risk AI in regulated products (medical devices, machinery, vehicles, toys). Also Commission evaluation of AI Office functioning and voluntary codes of conduct.
First four-yearly evaluation of the Regulation. Commission assesses supervision and governance structures, need to amend Annex III, and need for additional prohibited practices.
Transitional deadline under Art. 111(2) for high-risk systems placed on market before 2 Aug 2026 and used by public authorities, even absent significant design changes.
AI systems that are components of Annex X large-scale IT systems (Schengen Information System, VIS, Eurodac, Entry/Exit System, ETIAS, ECRIS-TCN) placed on market before 2 Aug 2027 must be brought into full compliance.
Who It Applies To
The Act distinguishes between providers, deployers, importers, and authorised representatives. Each carries distinct obligations — and a single organisation may hold multiple roles simultaneously, compounding requirements.
Seven questions, around two minutes. A clear read on your exposure across the EU AI Act, GDPR, and the regimes that engage in parallel — yours to keep, whoever you choose to act with.