The EU AI Act.
Reviewed
Short answer
The EU AI Act, Regulation (EU) 2024/1689, is the EU’s law on artificial intelligence: it bans a short list of AI practices, sets strict rules for high-risk AI, imposes transparency duties such as labelling deepfakes, and regulates general-purpose AI models. It entered into force on 1 August 2024 and applies in stages: prohibitions from 2 February 2025, general-purpose AI rules from 2 August 2025, most other rules from 2 August 2026, and high-risk rules from 2 December 2027 or 2 August 2028 after the 2026 Digital Omnibus.
Official sources: AI Act, Article 113 (consolidated) · Regulation (EU) 2026/1744 (EUR-Lex)
The AI Act at a glance
| Part | What it does | Applies from | Guide |
|---|---|---|---|
| Prohibited practices (Article 5) | Bans manipulative AI, social scoring, untargeted face scraping, emotion recognition at work and school, and more | 2 February 2025; two new bans from 2 December 2026 | Article 5 |
| AI literacy (Article 4) | Providers and deployers support the AI literacy of their staff | 2 February 2025 (reworded 27 July 2026) | Article 4 |
| General-purpose AI models (Articles 51–55) | Documentation, copyright policy, training-data summary; more for systemic-risk models | 2 August 2025; earlier models by 2 August 2027 | GPAI |
| Transparency (Article 50) | Tell people they talk to an AI, mark AI output, disclose deepfakes and certain AI text | 2 August 2026; marking for systems already on the market by 2 December 2026 | Article 50 |
| High-risk AI, Annex III areas | Risk management, documentation, human oversight, registration, conformity assessment | 2 December 2027 | High-risk AI |
| High-risk AI in regulated products (Annex I) | The same requirements, through product safety law | 2 August 2028 | High-risk AI |
| Penalties (Articles 99–101) | Fines up to €35 million or 7% of worldwide turnover | Penalty chapter 2 August 2025; Commission fines on GPAI providers 2 August 2026 | Fines |
Who it applies to
Providers that place AI systems or general-purpose AI models on the EU market, deployers that use AI systems in the EU, importers, distributors and authorised representatives, and providers and deployers anywhere in the world when the output of their AI system is used in the EU (Article 2(1)). It does not apply to purely personal, non-professional use, to research before a system is placed on the market, or to military, defence and national security uses. Details: who must comply.
Who enforces it
Each member state designates market surveillance authorities that supervise AI systems. The European Commission’s AI Office supervises general-purpose AI models and, since the Digital Omnibus, has exclusive competence for AI systems built on a general-purpose AI model by the same provider and for AI systems in very large online platforms and search engines (Article 75(1), as amended by Regulation (EU) 2026/1744). The European Data Protection Supervisor covers EU institutions. The country table below lists what we found for each member state.
Where to read the law
- The Official Journal text of Regulation (EU) 2024/1689 and of the amending Regulation (EU) 2026/1744.
- The Commission’s AI Act Explorer, which shows the consolidated text as at 27 July 2026 and marks what the Omnibus added or amended.
- The Commission’s AI Act Service Desk questions and answers.
The AI Act by country
The AI Act applies directly in every member state; each designates its own authorities and may pass an implementing law. National authorities, implementing laws and drafts, and official guidance relevant to the AI Act’s transparency rules, one page per country, each item quoted from an official source.
| Germany | KI-MIG: market surveillance authority; KI-MIG: enactment and entry into force; Bundesnetzagentur guide on Article 50 | 3 |
| Finland | Traficom: supervision of transparency obligations; Traficom guidance: what the obligations require | 1 |
| Poland | The Act: title and status; The Act: provisions entering into force later; Market surveillance authority | 2 |
| Italy | Designation of authorities; No new obligations | 2 |
| Denmark | Act no. 467: scope; National competent authorities | 1 |
| Spain | AESIA: Article 50 Code of Practice FAQs; Draft organic law, May 2026; Earlier draft, March 2025: labelling | 4 |
| Netherlands | Draft act: supervisory model; RDI as single point of contact | 2 |
| Ireland | General Scheme: distributed model; General Scheme: AI Office of Ireland | 1 |
| Sweden | SOU 2025:101: PTS as main authority; SOU 2025:101: proposed system | 1 |
| France | Draft designation of authorities | 2 |
Also: Austria and Switzerland
- AI Act in Austria: the RTR AI Service Desk and authorities: The AI Act applies in Austria directly; the RTR’s AI Service Desk is the national information point, and the Commission’s list showed no Austrian market surveillance contact on 7 September 2026.
- The EU AI Act and Switzerland: Switzerland is outside the EU and has no overarching AI law yet; the EU AI Act still reaches Swiss companies that place AI systems on the EU market or whose AI output is used in the EU.
How countries are chosen
- An entry exists only if we found the statement on the vendor’s, platform’s or regulator’s own page and quoted it. Entries we could not confirm that way are left out rather than guessed.
- Every quoted sentence was re-checked against the live page on 6 October 2026 by script. Pages that block scripted fetches were read from an Internet Archive snapshot of the same page, and the entry says so.
- We report what a source says, nothing more. “Not documented” means we did not find it in the pages we read; it is not a statement that something is absent.
- A country gets a page only if we found country-specific, official content: a designated authority, an implementing law or draft, or official guidance. Countries where we found none are not listed.
- Several items are drafts or were true on the date of the source. Each page says which, and we did not follow later steps.
Questions
- Is the EU AI Act in force?
- Yes. It entered into force on 1 August 2024, and most of it applies from 2 August 2026. The prohibitions and AI literacy have applied since 2 February 2025, the rules for general-purpose AI models since 2 August 2025, and the high-risk rules apply from 2 December 2027 or 2 August 2028.
- Does the AI Act apply to companies outside the EU?
- Yes, in two cases: when they place AI systems or general-purpose AI models on the EU market, and when the output of their AI system is used in the EU (Article 2(1)(a) and (c)). Providers of high-risk systems and of general-purpose AI models established outside the EU must appoint an authorised representative in the EU.
Sources
- Regulation (EU) 2024/1689 (AI Act) — Articles 50, 99 and 113EUR-Lex / Official Journal of the EURead on 2 November 2026 from the EU Publications Office’s copy of the Official Journal text (publications.europa.eu, same act); EUR-Lex blocks scripted fetches.read
- Regulation (EU) 2026/1744 (Digital Omnibus on AI) — Article 111(4) transition, Article 50(7)EUR-Lex / Official Journal of the EURead on 2 November 2026 from the EU Publications Office’s copy of the Official Journal text (publications.europa.eu, same act); EUR-Lex blocks scripted fetches.read
- AI Act, Article 113: Entry into force and applicationEuropean Commission, AI Act Service Desk (AI Act Explorer)Consolidated text as at 27 July 2026 (includes the Digital Omnibus, Regulation (EU) 2026/1744), shown in the Commission’s AI Act Explorer.read
- AI Act, Article 2: ScopeEuropean Commission, AI Act Service Desk (AI Act Explorer)Consolidated text as at 27 July 2026 (includes the Digital Omnibus, Regulation (EU) 2026/1744), shown in the Commission’s AI Act Explorer.read
- AI Act, Article 22: Authorised representatives of providers of high-risk AI systemsEuropean Commission, AI Act Service Desk (AI Act Explorer)Consolidated text as at 27 July 2026 (includes the Digital Omnibus, Regulation (EU) 2026/1744), shown in the Commission’s AI Act Explorer.read
- AI Act, Article 54: Authorised representatives of providers of general-purpose AI modelsEuropean Commission, AI Act Service Desk (AI Act Explorer)Consolidated text as at 27 July 2026 (includes the Digital Omnibus, Regulation (EU) 2026/1744), shown in the Commission’s AI Act Explorer.read
- AI Act — the Commission’s overview (risk levels and dates)European Commissionread
- European AI OfficeEuropean Commissionread
- AI Act Service Desk — frequently asked questionsEuropean Commission, AI Act Service Deskread
Last reviewed by Volkan Çatak, Founder, Proofcan.
Not legal advice. This page explains official texts in plain words and links each one; check the sources, or a lawyer, before relying on it for a decision.