What applies now

The European Commission says enforcement is shared among its AI Office, the European Data Protection Supervisor, and national authorities. Since August 2, 2026, enforcement powers cover areas including prohibited practices, obligations for general-purpose AI model providers, and transparency requirements for certain AI systems. The Commission also says some high-risk system rules arrive later, with different dates for listed use cases and AI embedded in regulated products.

Do not flatten the timeline

The easiest mistake is to turn the AI Act into one deadline and one checklist. Duties vary by role, system, and risk. A company using a third-party model may have different obligations from the model provider, while a chatbot disclosure is a different problem from documentation for a high-risk system. The first operational task is classification: what systems exist, who supplies them, what they do, and which decisions they influence.

The evidence file

A useful minimum file contains the system owner, vendor and model version, intended use, affected users, data sources, human review point, known limitations, release decision, incident contact, and the location of logs. Add the exact user disclosure where required. This will not answer every legal question, but it turns compliance from a slogan into retrievable evidence.

Where product work meets policy

The best compliance work will appear inside the product: clear AI disclosure, meaningful human control, records of consequential actions, and a route for complaints or correction. Teams that leave those details for a policy page will struggle when users, customers, and authorities ask how the system actually behaves.

What to watch next

  • Guidance and enforcement decisions that clarify how transparency is tested in practice.
  • National authorities publishing complaint and supervision procedures.
  • Procurement questionnaires converging around common evidence requirements.

Reporting notes

Sources and further reading

Primary sources are preferred. Vendor claims are identified as such and should not be read as independent verification.

  1. The enforcement framework of the AI ActEuropean Commission

    Official enforcement roles and timeline; updated October 6, 2026.

  2. Commission starts enforcing AI Act rules and new transparency requirements on 2 AugustEuropean Commission

    Official summary of transparency requirements; published July 31, 2026.