EU-AI Act
The EU AI Act introduces strict rules for how AI systems are built, managed and used.
It focuses on transparency, risk, safety, and user awareness. If your AI is used in the EU, you're in scope, even if you're based elsewhere.
Think GDPR, but for AI and it kicks in August 2025.
The Four Point Summary
1 AI Risk Levels & Regulation Scope That Cone into Effect
The AI Act classifies AI systems by risk:
- Unacceptable risk systems (e.g. social scoring, manipulative AI) are banned.
- High-risk systems are strictly regulated.
- Limited-risk systems (like chatbots, deepfakes) must disclose AI usage.
- Minimal-risk systems (like spam filters, video games) are largely unregulated, for the time being.
2 Who Holds the Burden & The Potential Penalties?
It's mostly the providers, but not only them:
- Most obligations fall on providers (developers) of high-risk AI, regardless of where they’re based.
- If your high-risk AI is used in the EU, you’re in scope.
- That includes developers outside the EU placing models on the market
- Also includes third-party providers if the output reaches the EU.
3 What About the Deployers, Service Providers of AI?
Responsibility is not only on the providers
- It's mostly the providers, but not only them:
- If you’re using a high-risk AI system in a professional capacity, you also carry responsibility.
- These obligations are lighter than for developers, but they still apply both for EU-based users & those outside the EU
- Applied if the AI’s impact lands in Europe.
4 GPAI: General Purpose AI Rules
Who’s a “provider”?
A provider is any organization or individual that develops, pre-trains, or places a general-purpose AI model on the market, regardless of where they’re based. This includes commercial companies, research labs, and open-source contributors, if their model is used in the EU or made available to users in the EU.
If you’re a provider of a GPAI model, you must:
Comply with the Copyright Directive
Publish a summary of training data
Share technical documentation & usage instructions
Open-source models have lighter rules unless they pose systemic risk, in which case evaluations, incident tracking, and cybersecurity controls are mandatory.
EU AI Act Compliance Checker
AI rules are shifting fast – and knowing where you stand is half the battle. Our simple compliance checker helps you assess your exposure under the EU AI Act. Use it to spot risks, flag gaps, and stay ahead. A quick first step toward responsible AI adoption.
go to Compliance Checker siteStay on Top of Your Obligations
The rules around AI are evolving fast, and it’s your responsibility to stay informed. Regularly check the official EU website for updates, guidance, and clarifications. Compliance isn’t a one-off – it’s an ongoing process. Keep your eye on this space.
go to EU AI act site" The EU AI Act is here to protect everyone. It is my belief that it will be the standard which we adopt here in the Middle East. We must be informed, be aware and be ready. "
" I can see the EU AI act becomng the standard bearer AI complaince requirement for the Middle East, similar to how GDPR is being used/referred/built towards. "
" Write a quote here from one of your customers. Quotes are a great way to build confidence in your products or services. "
Date: 12 July 2024 The AI Act is published in the Official Journal of the European Union. This serves as the formal notification of the new law.
Related AI Act Content Article 113
Date: 1 August 2024 Application: Date of entry into force of the AI Act. At this stage, none of the Act’s requirements apply—they will begin to apply gradually over time.
Related AI Act Content Article 113
Date: 2 November 2024 Member States: Deadline for Member States to identify and publicly list the authorities / bodies responsible for fundamental rights protection, and to notify the Commission and other Member States.
Date: 2 February 2025 Application: Prohibitions on certain AI systems and requirements on AI literacy start to apply (Chapter 1 and Chapter 2).
Related AI Act Content Article 113(a) Recital 179
Date: 2 May 2025 Commission: Codes of practice shall be ready by this date.
Related AI Act Content Article 56(9) Recital 179
Date: 2 August 2025 Application: The following rules start to apply:
- Notified bodies (Chapter III, Section 4),
- GPAI models (Chapter V),
- Governance (Chapter VII),
- Confidentiality (Article 78)
- Penalties (Articles 99 and 100)
Related AI Act Content Article 113(b)
Date: 2 August 2025 Providers: Providers of GPAI models that have been placed on the market / put into service before this date need to be compliant with the AI Act by 2 August 2027.
Related AI Act Content Article 111(3)
Date: 2 August 2025 (and every two years thereafter) Member States: Deadline for Member States to report to the Commission on the status of the financial and human resources of the national competent authorities.
Related AI Act Content Article 70(6)
Date: 2 August 2025 Member States: Deadline for Member States to designate national competent authorities (notifying authorities and market surveillance authorities), communicate them to the Commission, and make their contact details publicly available.
Related AI Act Content Article 70(2)
Date: 2 August 2025 (based on date of application of Articles on ‘Penalties’) Member States: Deadline for Member States to lay down rules for penalties and fines, notify them to the Commission, and ensure that they are properly implemented.
Related AI Act Content Recital 179
Date: 2 August 2025 Commission: (If code of practice cannot be finalised, or if the AI Office deems it is not adequate) Commission may provide common rules for the implementation of the obligations for providers of GPAI models via implementing acts.
Related AI Act Content Article 56(9)
Date: 2 August 2025 (and every year thereafter) Commission: Deadline for annual Commission review and possible amendments on prohibitions.
Related AI Act Content Article 112(1)
Date: 2 February 2026 Commission: Deadline for Commission to provide guidelines specifying the practical implementation of Article 6, including post-market monitoring plan.
Related AI Act Content Articles 6(5), 72(3)
Date: 2 August 2026 Application: The remainder of the AI Act starts to apply, except Article 6(1).
Related AI Act Content Article 113
Date: 2 August 2026 Operators: This Regulation shall apply to operators of high-risk AI systems (other than those systems referred to in Article 111(1)), placed on the market / put into service before this date. However, this only applies to systems which are subject to significant changes in their designs from this date onwards.
Related AI Act Content Article 111(2)
Date: 2 August 2026 Member States: Member States shall ensure that their competent authorities have established at least one AI regulatory sandbox at national level. It should be operational by this date.
Related AI Act Content Article 57(1)
Date: 2 August 2027 Application: Article 6(1) and the corresponding obligations in the Regulation start to apply.
Related AI Act Content Article 113
Date: 2 August 2027 Providers: Providers of GPAI models placed on the market before 2 August 2025 must have taken the necessary steps to comply with the obligations laid down in this Regulation by this date.
Related AI Act Content Article 111(3)
Date: 2 August 2027 Large-scale IT Systems: AI systems which are components of the large-scale IT systems listed in Annex X and that were placed on the market / put into service before this date shall be brought into compliance with this Regulation by 31 December 2030.
Related AI Act Content Article 111(1)
Date: 2 August 2028 Commission: Commission shall evaluate the functioning of the AI Office.
Related AI Act Content Article 112(5)
Date: 2 August 2028 (and every three years thereafter) Commission: Commission shall evaluate the impact and effectiveness of voluntary codes of conduct.
Related AI Act Content Article 112(7) Recital 174
Date: 2 August 2028 (and every four years thereafter) Commission: Commission shall evaluate and report to the European Parliament and to the Council on the need for amendments to:
- Area headings in Annex III,
- List of AI systems requiring additional transparency measures in Article 50,
- The supervision and governance system.
Related AI Act Content Article 112(2) Recital 174
Date: 2 August 2028 (and every four years thereafter) Commission: Commission shall submit a progress report on ‘standardisation deliverables’ which cover the topic of energy-efficient development of general-purpose AI models. This report must be submitted to the European Parliament and Council, and made public.
Related AI Act Content Article 112(6) Recital 174
Date: 1 December 2028 (which is 9 months prior to 1 August 2029) Commission: Commission must draw up a report on the delegation of power outlined in Article 97.
Related AI Act Content Article 97(2)
Date: 1 August 2029 Commission: The Commission’s power to adopt delegated acts referred to in the following articles expires—unless this period is extended:
- Article 6 (6) and (7),
- Article 7 (1) and (3),
- Article 11 (3),
- Article 43 (5) and (6),
- Article 47 (5),
- Article 51 (3),
- Article 52 (4),
- Article 53 (5) and (6)
The delegation of power will, by default, be extended for recurring 5-year periods unless the European Parliament or the Council opposes such extension three months or more before the end of each period.
Related AI Act Content Article 97(2)
Date: 2 August 2029 (and every four years thereafter) Commission: Commission shall submit a report on the evaluation and review of this Regulation to the European Parliament and to the Council.
Related AI Act Content Article 112(3) Recital 174
Date: 2 August 2030 Providers & Deployers: Providers and deployers of high-risk AI systems intended to be used by public authorities must have taken the necessary steps to comply with the requirements and obligations of this Regulation by this date.
Related AI Act Content Article 111(2)
Date: 31 December 2030 Large-scale IT Systems: Deadline for AI systems which are components of the large-scale IT systems listed in Annex X and that were placed on the market or put into service before 2 August 2027 to be brought into compliance with this Regulation.
Related AI Act Content Article 111(1)
Date: 2 August 2031 Commission: Commission shall carry out an assessment of the enforcement of this Regulation and shall report on it to the European Parliament, the Council and the European Economic and Social Committee.
Related AI Act Content Article 112(13)
Key Dates
Phased Roll‑Out of the EU AI Act
The EU Artificial Intelligence Act entered into force on 1 August 2024, marking the start of a transformation in global AI governance
However, its provisions are being phased in thoughtfully, giving businesses a clear timeline to align and adapt.
Check the roll out in this Calander