The AI Omnibus Changed the Timetable. What Should UK SMEs Do Now?

The European Commission reports that the AI Omnibus entered into force on 27 July 2026. It sets 2 December 2027 for Annex III high-risk rules and 2 August 2028 for high-risk AI embedded in regulated products under Annex I. The change extends the high-risk timetable beyond the final conformity assessment paperwork.

The package also simplifies other requirements, including AI literacy and some registration arrangements. It is inaccurate to describe the Omnibus as only a deadline change or to assume every earlier company obligation remains untouched. See the Commission's update and the legislation it links to for the current position.

A UK business is not automatically covered by every part of the EU AI Act. Assess the AI system, your role and the territorial scope before choosing documents or treating a date as your deadline.

Having an EU customer alone does not settle that assessment. Map where your systems are made available and where their outputs are used. Our UK business scope guide explains the starting questions.

A revised EU AI Act timetable does not postpone separate UK data protection or employment responsibilities. For example, if proposed personal data processing is likely to pose a high risk to people, assess the DPIA requirement before it begins.

Transparency duties depend on the system, use, role and applicable exceptions. Do not turn Article 50 into a rule that every AI output must carry the same label. The transparency guide provides a starting point for review.

The Commission describes a simplified AI literacy approach, with a stronger role for the Commission and Member States in promoting literacy. Do not rely on the former Article 4 company wording as a blanket description of the amended law.

Helping staff understand approved tools, data restrictions, limitations and escalation routes remains useful governance. A policy or briefing record can support that work without being presented as proof that an unchanged universal legal duty applies.

Choose documentation around your actual activities. These are useful governance measures; they are not a universal statutory checklist for every UK SME.

• List AI tools, uses, data flows and accountable owners.
• Set rules for approved tools and confidential or personal data.
• Define human review and escalation where the workflow needs it.
• Assess supplier terms, retention and relevant privacy risks.
• Record briefings and implementation actions that actually happened.
• Review legal scope, applicable duties and future dates as systems change.

Clausely prepares documentation from your declared business information. Packs start at £399 and standard outputs are usually ready within the hour after completed intake and verified payment, ready for your review and implementation.

Start with the free assessment or compare packs. Complex legal or technical questions need the appropriate professional review; buying documents does not certify a system or guarantee compliance.