The Regulation (EU) 2024/1689, commonly known as the AI Act, is the world's first comprehensive legal framework dedicated to artificial intelligence. Adopted on 13 June 2024 by the European Parliament and the Council, it aims to foster trustworthy AI that respects safety and fundamental rights.
A risk-based approach
Rather than regulating the technology itself, the AI Act governs the uses of AI according to the level of risk they pose. It places different obligations on providers (those who develop AI systems) and deployers (those who use them professionally). Most AI systems carry limited or minimal risk, but certain uses are strictly regulated or even banned.
A staggered application timeline
According to the European Commission, the regulation entered into force on 1 August 2024 and becomes fully applicable two years later, on 2 August 2026, with several exceptions:
- the prohibited practices and the AI literacy obligations have applied since 2 February 2025;
- the governance rules and the obligations for general-purpose AI (GPAI) models have applied since 2 August 2025;
- most of the remaining rules apply from 2 August 2026.
For high-risk AI systems, the timeline has shifted. Following a political agreement of 7 May 2026 on a simplification of the regulation (the « AI omnibus »), the Commission indicates (May 2026 update) that the rules will apply from 2 December 2027 for certain high-risk areas (biometrics, critical infrastructure, education, employment, migration, asylum and border control) and from 2 August 2028 for AI embedded in regulated products (such as lifts or toys).
Who oversees it?
Implementation, supervision and enforcement of the regulation rest with the European AI Office, within the Commission, and with the authorities designated in each Member State. An AI Board, a scientific panel and an advisory forum steer this governance.
A framework still in motion
These deadlines may still evolve as implementing measures and simplification texts are adopted. It is therefore prudent to always check the update date of official sources. The reference text remains the regulation as published in the Official Journal of the European Union, complemented by guidance from the Commission and the European AI Office.
In practice, an organisation that designs or uses AI should map its systems, identify those likely to be high-risk, and prepare gradually rather than wait for the final deadlines.