EU AI Act / Key dates
What applies now, and what is confirmed
The AI Act phases in over several years. Here is the honest picture: what is already in force, and which future dates are confirmed in enacted law.
Current as of September 2026.
Already in force
Settled, and not moving
- 1 August 2024in force
The law entered into force
The EU AI Act became law across all 27 member states. As a regulation, it applies directly, with no national laws needed to bring it in.
- 2 February 2025in force
Banned practices and AI literacy went live
The short list of outright-banned AI uses took effect, and so did the duty to take measures to support AI literacy for staff who use AI at work. That duty does not require a guaranteed level for any one person.
- 2 August 2025in force
General-purpose AI rules and governance began
Duties for the general-purpose models behind tools like ChatGPT started, together with the EU bodies that oversee the Act and the framework for penalties.
- 2 August 2026in force
Transparency duties are in force
People must be told when they are dealing with AI or looking at AI-generated content. This has applied since 2 August 2026, and the Digital Omnibus did not delay it.
- 2 August 2026in force
Literacy and general-purpose enforcement powers are on
These duties already existed. Since 2 August 2026 the authorities can enforce them.
The full timeline
2024 to 2028, milestone by milestone
Every milestone below carries a status: in force today, or a confirmed future date. Stand-alone high-risk systems apply from December 2027, not 2026. That distinction is often confused, and it matters.
- 1 August 2024in force
The AI Act enters into force
The regulation becomes EU law. The countdown to each set of duties starts here.
- 2 February 2025in force
Banned AI practices and the AI literacy duty apply
A short list of AI uses is prohibited outright. Any organisation whose staff use AI at work must take measures to support their AI literacy: how the tools work and where they fail. The duty does not require a guaranteed level for any one person.
- 2 August 2025in force
Rules for general-purpose AI models, plus governance and penalties, apply
Duties begin for the general-purpose models behind tools like ChatGPT, along with the EU bodies that oversee the Act and the framework for penalties.
- 2 August 2026in force
Transparency duties apply (chatbots and AI-generated content)
People must be told when they are dealing with AI or looking at AI-generated content. In force since 2 August 2026, and not delayed by the Digital Omnibus.
- 2 August 2026in force
Enforcement powers for the AI literacy duty and general-purpose models switch on
These duties already existed. Enforcement powers have applied since this date.
- 2 December 2026confirmed
Watermarking grace period ends for older generative systems
Providers of generative AI systems placed on the market before 2 August 2026 must comply with the machine-readable marking duty in Article 50(2) by this date. Enacted in Regulation (EU) 2026/1744.
- 2 December 2026confirmed
New ban on AI-generated non-consensual intimate imagery
New prohibited practices cover AI-generated non-consensual intimate material and child sexual abuse material. They apply from this date under Regulation (EU) 2026/1744.
- 2 August 2027in force
Grandfathering deadline for existing general-purpose AI models
Providers of general-purpose models already on the market must be fully in line by this date. This deadline is already fixed in law and unaffected by the reform.
- 2 December 2027confirmed
Stand-alone high-risk systems (the eight high-risk categories) apply
The core rules for high-risk AI, such as hiring or credit-scoring tools sold on their own, apply from this date. Moved from the original 2 August 2026 date by Regulation (EU) 2026/1744.
- 2 August 2028confirmed
High-risk AI built into already-regulated products applies
High-risk AI embedded in products that already carry EU safety rules, like medical devices or machinery, applies from this date. Set by Regulation (EU) 2026/1744.
The Digital Omnibus
Why some dates are moving, explained honestly
The EU concluded that the original deadlines for high-risk AI were too tight. The detailed technical standards that companies need in order to comply were not going to be ready in time, so it pushed those deadlines back through a reform known as the Digital Omnibus.
The sequence, in plain terms: the European Commission proposed the change in November 2025. The Parliament and Council reached political agreement on 7 May 2026. The Parliament held its final vote on 16 June 2026, passing it by a large majority. The Council formally adopted it on 29 June 2026.
Regulation (EU) 2026/1744 is published in the Official Journal and is in force. That is what makes the new dates legally binding. Stand-alone high-risk rules apply from 2 December 2027. High-risk AI embedded in already-regulated products applies from 2 August 2028.
Status: in force
As of September 2026, Regulation (EU) 2026/1744 is in force. The high-risk dates on this page are the enacted ones. The original 2 August 2026 high-risk deadline no longer applies.
Confirmed no matter what
The transparency duties are not delayed
The Digital Omnibus only touches the high-risk track: the eight high-risk categories and high-risk AI built into already-regulated products. It does not delay the transparency duties.
Chatbot disclosure and AI-content labelling have applied since 2 August 2026. If you run a customer-facing chatbot or publish AI-generated content, that duty is already in force.
One narrow transition remains ahead: providers of generative AI systems placed on the market before 2 August 2026 have until 2 December 2026 to comply with the machine-readable marking duty in Article 50(2). That transition is enacted in Regulation (EU) 2026/1744.
Enacted dates
Confirmed in Regulation (EU) 2026/1744
These dates are fixed by Regulation (EU) 2026/1744, which is in force. The obligations themselves apply on the dates below, not before.
- confirmed
The high-risk delay dates (December 2027 and August 2028)
The move of stand-alone high-risk systems to 2 December 2027, and of high-risk AI embedded in already-regulated products to 2 August 2028.
- confirmed
The watermarking grace period (December 2026)
The extra time for generative AI systems already on the market before August 2026 to mark their output as machine-readable AI.
- confirmed
New bans on AI-generated non-consensual intimate imagery and child sexual abuse material (December 2026)
New prohibited practices cover AI-generated non-consensual intimate material and child sexual abuse material.
Set by Regulation (EU) 2026/1744.
Not sure which of these dates apply to you?
The dates that matter depend on what your business actually does with AI. Take the free Exposure Check for a personal answer in about five minutes.
Frequently asked questions
Is the EU AI Act already in force, or is it still coming?
Both. The law entered into force in August 2024, and several parts are already live, including the banned practices, the duty to support AI literacy, and the rules for general-purpose AI models. Other parts, especially the high-risk rules, phase in later on dates set by Regulation (EU) 2026/1744.
What is the Digital Omnibus, and does it cancel the AI Act?
No. The Digital Omnibus, Regulation (EU) 2026/1744, adjusts some deadlines, mainly delaying the high-risk rules. It does not cancel the Act or the duties already in force. It is published and in force.
When do I actually need to comply, given the delays?
The duties already in force apply now. Transparency duties for chatbots and AI-generated content have applied since 2 August 2026, and the high-risk delay did not move that date. Stand-alone high-risk rules apply from 2 December 2027.
Why do these dates keep changing?
The main reason is that the technical standards companies need in order to comply with the high-risk rules were not going to be ready in time, so the EU agreed to push those deadlines back. The transparency and prohibition dates are not affected.
Where can I check the latest official date myself?
The authoritative source is the EU's Official Journal on EUR-Lex, including Regulation (EU) 2026/1744. We update this page when the law changes, and note the date it was last current at the top.
Your next step
Does the EU AI Act affect you?
Take the free check and get an indicative report on your exposure and where to start. If you work with a cybersecurity consultant, share it with them.
This page is general information, not legal advice. For an answer specific to your business, take the free Exposure Check or ask your cybersecurity consultant.