What is the EU AI Act?
The EU AI Act (Regulation (EU) 2024/1689) is the European Union's landmark legislation establishing harmonized rules for the development, deployment, and use of artificial intelligence systems. Adopted in 2024 and entering into force on August 1, 2024, it is the first comprehensive AI-specific regulation in the world. The Act applies to providers, deployers, importers, and distributors of AI systems in the EU market, regardless of where they are established.
The 4 Risk Categories
The AI Act uses a risk-based approach, categorizing AI systems into four levels:
- Unacceptable Risk: Banned outright. Includes social scoring, subliminal manipulation, and most real-time biometric identification systems.
- High Risk: Subject to strict compliance requirements including risk management, data governance, technical documentation, human oversight, and conformity assessment. Listed in Annex III.
- Limited Risk: Transparency obligations — users must be informed when interacting with AI (chatbots, deepfakes, emotion recognition).
- Minimal Risk: No specific regulatory obligations, though voluntary codes of conduct are encouraged.
Key Timeline Dates
- August 1, 2024: AI Act enters into force
- February 2, 2025: Prohibited AI practices ban takes effect
- August 2, 2025: GPAI and foundation model obligations begin
- August 2, 2026: High-risk AI system requirements fully applicable
- August 2, 2027: AI systems in regulated products must comply
Who Does It Apply To?
The AI Act has extraterritorial scope similar to GDPR. It applies to: (a) providers placing AI systems on the EU market, regardless of location; (b) deployers of AI systems located within the EU; (c) providers and deployers in third countries whose AI system output is used in the EU. This means companies in the US, UK, China, and other countries must comply if their AI systems impact EU users.
Penalties for Non-Compliance
The AI Act introduces a three-tier penalty structure that exceeds GDPR:
- €35 million or 7% of global turnover: For prohibited AI practices
- €15 million or 3% of global turnover: For most other violations
- €7.5 million or 1.5% of global turnover: For providing incorrect information
How to Navigate Compliance
Compliance with the EU AI Act requires a structured approach: inventory your AI systems, classify their risk level, conduct gap analyses, implement governance frameworks, and prepare documentation. Our Compliance Checklist provides a step-by-step guide, and our directory of verified consultants can connect you with experts who specialize in your industry and risk category.