The EU AI Act establishes a risk-based regulatory framework for AI systems and general-purpose AI, with phased obligations and important exceptions.
What it is
The EU AI Act is a risk-based legal framework for developing, providing, deploying and governing artificial intelligence in the European Union. Requirements differ according to the type of AI system, the organisation’s role and the risk category.
What it covers
The framework covers prohibited practices, AI literacy, transparency, general-purpose AI and high-risk AI systems. Obligations for providers and deployers are not identical; organisations should first establish their own role and the relevant category of AI use.
Why it matters for digital autonomy
Responsible AI adoption depends on human oversight, traceability, supplier accountability and informed decision-making. These are governance capabilities that support digital autonomy beyond the minimum legal requirements.
Dates and status
Application is phased. Selected prohibitions and AI-literacy provisions began applying in February 2025, with other rules from August 2025 and August 2026. Under the consolidated text dated 27 July 2026, certain high-risk provisions apply later, including December 2027 and August 2028. Always verify the latest consolidated text before stating a deadline.
Practical questions for organisations
- Inventory AI systems, suppliers, users and intended purposes.
- Distinguish developer/provider responsibilities from deployer responsibilities.
- Set proportionate policies for AI literacy, procurement, oversight and incident escalation.
Official reference
Read the source document on the issuing organisation’s website.
This is an educational reference, not legal advice, certification or a determination of applicability. Check the authoritative text and relevant national rules before making decisions.