EU AI Act (Regulation (EU) 2024/1689)

Summary

The regulation lays down harmonised rules on artificial intelligence in the Union: prohibited AI practices, requirements for high-risk AI systems and obligations for their operators, transparency rules, rules for general-purpose AI models, market surveillance and enforcement, and innovation support. It was amended by Regulation (EU) 2026/1744 (Digital Omnibus on AI), which adds new prohibitions on non-consensual sexual deepfakes and child sexual abuse material and staggers the application of high-risk rules to Dec 2, 2027 and Aug 2, 2028.

Who it applies to

Applies to providers placing AI systems or general-purpose AI models on the Union market, deployers located in the Union or whose output is used in the Union, importers, distributors, product manufacturers, authorised representatives and affected persons in the Union. Excludes military, defence and national security uses and pure scientific research.

Key points

• Prohibits certain AI practices under Article 5, including, from Dec 2, 2026, AI generating non-consensual intimate imagery and child sexual abuse material.
• Providers of high-risk AI systems must have risk management, data governance, technical documentation, human oversight and a quality management system.
• Certain deployers must perform a fundamental rights impact assessment before deploying high-risk AI systems under Article 27.
• Affected persons have a right to explanation of decisions based on high-risk AI output under Article 86.
• Member States must establish at least one AI regulatory sandbox operational by Aug 2, 2027.

Key dates

Signed / adopted

Jun 13, 2024

Published (official journal)

Jul 12, 2024

Effective

Aug 1, 2024

Compliance date

Feb 2, 2025

Compliance date

Dec 2, 2026

Compliance date

Dec 2, 2027

Compliance date

Aug 2, 2028