Research Home Topics EU AI Act Countries Sources Calendar Methodology Authors

The EU AI Act Explained

The world's first comprehensive AI law, in plain terms: what it is, who it binds, how it sorts AI systems by risk, and when each part actually takes effect now that the Digital Omnibus has reshaped the timeline.

Key context
"The EU AI Act applies in all 27 member states without national transposition — unlike a Directive, it is directly binding law from the day it enters into force."
EU AI Act, Article 113 · Recital 1
A row of national and EU flags outside a government building, evoking the Union-wide, directly applicable nature of the Regulation.

Executive summary

What this means

Who this applies to

Regulatory context

Requirements

What organizations must do

  • Determine your role system by system — provider, deployer, importer, distributor, or a combination — since the obligation set and deadline both follow from that classification.
  • Classify each system's risk tier against the prohibited-practices list and the Annex III high-risk use-case list.
  • For high-risk systems: Annex III track now has until 2 December 2027, Annex I product-embedded systems until 2 August 2028 — but start design/documentation work well ahead of the deadline.
  • Don't wait for 2027/2028 to start compliance work — prohibited practices, AI literacy duties, GPAI obligations, and August 2026 transparency rules are already in force today.

Common mistakes

Treating "the AI Act" as a single deadline is a common and consequential mistake — different chapters have different application dates, and conflating them risks either premature over-investment in the wrong obligations or, more dangerously, missing an obligation that is already in force.

Organisations also sometimes assume their role is fixed — but the Act's substantial-modification and rebranding provisions mean a deployer can become a provider mid-lifecycle, which is worth checking whenever a system is materially changed or white-labelled.

A further common error is assuming the Digital Omnibus removed obligations rather than deferred them — the extended Annex III and Annex I dates give more time to prepare, but the underlying substantive requirements in Chapter III Section 2 are unchanged.

Open questions

  • Whether the Digital Omnibus changed the wording of the core Article 3 definitions. The AI Act Service Desk's own page for Article 3 carries a Commission-authored notice stating the provision "has been amended by the Digital Omnibus on AI" and that "the text displayed on this page has not yet been updated to reflect those amendments." This article cites the pre-Omnibus definitions, independently confirmed via the same official source — but whether the Omnibus altered the precise wording of any core definition has not been confirmed and should be re-checked once the Service Desk's own update is published.
  • How small mid-cap (SMC) treatment interacts with the provider/deployer distinction. Not yet fully documented in Commission guidance.
  • Where the line sits between "deployer" and "provider" for an organisation that fine-tunes or customises a GPAI-based system. Not yet settled by further Commission guidelines or delegated acts.

Frequently asked

FAQ
Did the Digital Omnibus change the wording of the core provider/deployer/importer/distributor definitions in Article 3?
Not yet confirmed — the Commission's own AI Act Service Desk states Article 3 has been amended but that its page has not yet been updated to reflect the changes.
FAQ
How does small mid-cap (SMC) status under the Digital Omnibus interact with the provider/deployer distinction?
Not yet fully documented in published Commission guidance.
FAQ
Where exactly does the line sit between "deployer" and "provider" for an organisation that fine-tunes or customises a general-purpose AI model?
Not yet settled by further Commission guidelines or delegated acts as of the verification date.

Go deeper

Apply this in practice

AGNUS Academy turns AI governance research into hands-on skills — exercises, case studies, and frameworks built on the research you just read.

Explore the Academy →