EU AI Act becomes fully enforceable in August 2026: what businesses need to know
The European Union’s Artificial Intelligence Act, the world’s first comprehensive horizontal AI regulation, becomes fully enforceable in August 2026. The deadline marks the end of a phased transition that began with bans on prohibited practices in February 2025 and continued with rules on general-purpose AI models in August 2025. From this summer, all obligations on high-risk AI systems become legally binding, with non-compliance carrying fines of up to 7 percent of a company’s global annual turnover.
The risk-based approach
The AI Act distinguishes between four levels of risk. Unacceptable risk practices, including social scoring by governments and real-time biometric identification in public spaces with limited exceptions, are banned outright. High-risk systems, used in areas such as employment, education, critical infrastructure and law enforcement, face heavy obligations. Limited-risk systems must meet transparency requirements, while minimal-risk applications carry no specific obligations. Most consumer applications fall in the last two tiers.
What businesses must do for high-risk systems
Companies developing or deploying high-risk AI systems must conduct conformity assessments before placing the systems on the market, maintain detailed technical documentation, ensure human oversight throughout the AI lifecycle, and register their systems in an EU database. They must also implement risk management systems, ensure data governance and quality, log activities and provide instructions to deployers. Conformity assessments may need to be repeated when systems undergo substantial modification.
Tensions with the US and the path forward
The full enforcement of the AI Act comes amid escalating transatlantic tensions over EU tech regulation. The Trump administration has signalled it views the AI Act, alongside the DMA and DSA, as designed to harm American technology firms. The Commission has rejected this framing, arguing that the regulation applies equally to European, US and Chinese companies operating in the bloc. For businesses, the priority now is mapping their AI portfolios against the Act’s categories and ensuring compliance ahead of the August deadline. Companies that fail to act risk significant fines and reputational damage.
