EU Artificial Intelligence Act
The world's first comprehensive, risk-based AI law. Classifies AI by risk tier (prohibited, high-risk, limited, minimal) and imposes graduated obligations, with most high-risk rules and enforcement starting 2 August 2026.
Overview
The world's first comprehensive, risk-based AI law. Classifies AI by risk tier (prohibited, high-risk, limited, minimal) and imposes graduated obligations, with most high-risk rules and enforcement starting 2 August 2026.
Key dates
- Aug 1, 2024Entered into force
- Feb 2, 2025Prohibited practices & AI literacy duties apply
- Aug 2, 2025General-purpose AI (GPAI) model obligations & governance apply
- Aug 2, 2026High-risk (Annex III) rules, transparency duties & enforcement apply
- Aug 2, 2027High-risk AI embedded in regulated products; pre-existing GPAI compliance deadline
Risk areas addressed
Who it applies to
Providers, deployers, importers and distributors placing AI systems or GPAI models on the EU market — including organisations based outside the EU.
Penalties & enforcement
Up to €35M or 7% of global annual turnover (prohibited practices); lower tiers for other breaches.
Enforced by: European AI Office & national market-surveillance authorities
Whatever your exposure to EU AI Act, the practical work is the same: inventory the AI systems in scope, map them to concrete obligations, and keep the evidence to show it. A structured AI governance programme — risk assessments, documentation and continuous monitoring — turns a moving regulatory target into a repeatable process.