EU AI Act 2026: Key Deadlines and What Happens If You Miss Them

The EU AI Act has been law since 2024, and its obligations apply in phases, with transparency duties in force since 2 August 2026 and Annex III high-risk obligations from 2 December 2027. For UK businesses, the consequences of missing them are significant.

Here’s a clear breakdown of the key dates and what they mean for you.

The first provisions to take effect banned the highest-risk uses of AI outright. These include AI systems that manipulate people subconsciously, social scoring systems, and real-time biometric identification in public spaces. If your business uses any of these, it is already non-compliant.

Rules governing General Purpose AI models, including large language models like GPT-4, came into force. Providers of these models must publish technical documentation and comply with copyright law. If you are building products on top of AI APIs, these rules may affect you as a deployer.

Article 50 transparency duties have applied since 2 August 2026, so where you use chatbots or publish AI generated content, disclosure is already expected. Annex III high-risk obligations apply from 2 December 2027, and Annex I high-risk obligations from 2 August 2028. The AI literacy duty under Article 4 has applied since 2 February 2025. Not every obligation applies to every business: what reaches you depends on your AI use and your EU exposure.

For a UK SME turning over £2 million, a 3% fine would be £60,000. For a £10 million business, that rises to £300,000.

• Prohibited AI practices: up to €35 million or 7% of global turnover.
• Non-compliance with obligations: up to €15 million or 3% of global turnover.
• Providing incorrect information to regulators: up to €7.5 million or 1% of global turnover.

At minimum, most UK businesses using AI need:

• An AI Acceptable Use Policy.
• AI Literacy records for relevant staff.
• Transparency disclosures where AI interacts with customers or employees.

Businesses using AI in hiring, healthcare, finance, credit scoring, education, or law enforcement need significantly more, including risk management and conformity documentation from their AI providers, human oversight procedures of their own, and, only if they're a public body, a public-service provider, or using AI for credit or insurance risk scoring, a Fundamental Rights Impact Assessment.

With Clausely, your tailored compliance pack is generated within the hour. You complete a short intake form, we generate your documents against the regulation’s required structure, and you receive a ready-to-present pack by email, from £399.

The transparency duties are already live and the high-risk timetable runs to 2027 and 2028, so the sensible order is baseline documentation first.

Check your compliance risk for free at clausely.co.uk/compliance-checker, or get your compliance pack at clausely.co.uk/pricing.