Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

The EU’s 9 December 2023 AI deal was a provisional political agreement—not the moment the law took effect. The AI Act later entered into force in 2024, and its rules have been taking effect in stages. As of 30 September 2026, the 2026 AI Omnibus has also changed parts of the timetable, with some high-risk rules scheduled for 2027 and 2028.

What is the EU AI Act?

The AI Act is a European Union law that sets obligations for certain AI systems and general-purpose AI models. Its organizing principle is risk: systems considered more capable of causing harm face stricter requirements. The rules cover different roles in the AI supply chain, including providers and deployers, rather than treating every AI tool as subject to identical obligations.

The Council of the EU described that risk-based approach when negotiators reached their provisional agreement in December 2023. The final legal requirements are those in the enacted regulation, as subsequently amended—not every detail in the negotiators’ announcement.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What did the EU agree on in December 2023?

After three days of talks, negotiators for the Council and European Parliament announced a provisional agreement on 9 December 2023. It addressed high-risk AI systems, high-impact general-purpose models that could create systemic risk, EU-level governance and enforcement powers, and an expanded set of prohibited practices. It also included a requirement for deployers of high-risk systems to conduct a fundamental-rights impact assessment before use.

The agreement clarified that certain areas were outside its scope, including matters outside EU law, national security, exclusively military or defence use, research and innovation, and non-professional personal use. These were features of the provisional deal; the regulation’s precise wording governs the current legal scope.

Carme Artigas, Spain’s secretary of state for digitalisation and artificial intelligence at the time, called the agreement “a historical achievement” and said it balanced innovation with respect for fundamental rights. That was her political characterization of the deal, not an independent assessment of its effects.

When do the EU AI rules take effect?

The Act entered into force on 1 August 2024, but its obligations do not all apply on one date. The European Commission’s implementation timeline, updated to reflect the AI Omnibus, gives these milestones:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Date What the timeline says
2 February 2025 General provisions, definitions, AI literacy requirements and prohibitions began applying.
2 August 2025 Rules for general-purpose AI and governance began applying.
2 August 2026 The majority of rules and enforcement for applicable provisions began. The Commission identifies the AI Office and national authorities as responsible for implementation, supervision and enforcement from this date for those provisions.
2 December 2027 Scheduled application date for high-risk AI use cases in Annex III.
2 August 2028 Scheduled application date for high-risk AI embedded in regulated products covered by Annex I.

The table reflects the Commission’s timeline as of 30 September 2026. The dates are not a claim that every obligation for every system applies then: which requirements matter depends on the provision and the system or use case involved.

What did the 2026 AI Omnibus change?

The Commission says the AI Omnibus entered into force on 27 July 2026. It revised parts of the Act’s implementation schedule, including the later dates for the two categories of high-risk rules shown above. The Council’s May 2026 account of the provisional agreement on the Omnibus also described several other changes:

  • A ban on AI-generated non-consensual sexual or intimate content and child sexual abuse material.
  • A shorter grace period for transparency marking of synthetic content.
  • A later deadline for national regulatory sandboxes.
  • Clarified AI Office jurisdiction, with exceptions.
  • Adjustments for small mid-cap companies and industrial sectors.

Those points summarize the amendments described by the Commission and Council; the applicable legal text determines their exact scope and operation.

What does the Act mean for high-risk AI?

“High-risk” is not a synonym for every AI system that could cause concern. The Act uses defined categories and requirements, and the relevant obligations depend on the system’s classification and role. The original provisional deal highlighted requirements for high-risk systems and a fundamental-rights impact assessment by deployers before use. The Omnibus-adjusted dates also show why organizations should check the applicable provision and schedule rather than assume all high-risk requirements started together.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

For implementation and current dates, the European Commission’s AI Act timeline is the primary reference. Organizations assessing a particular system should consult the enacted and amended regulation, since a political announcement or general summary cannot establish how a specific use case is classified.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How does the EU approach differ from U.S. AI regulation?

The defensible meaning of “racing ahead” is that the EU adopted a comprehensive Union-wide AI statute before the United States adopted sweeping federal AI rules. It does not mean that the U.S. had no AI policy or regulation. In an Axios interview published 4 September 2026, European Commission tech chief Henna Virkkunen said that U.S. safeguards often emerge through state laws and court cases. Axios also described executive actions, voluntary frameworks, national-security restrictions and other policy as parts of Washington’s approach. That is a dated, attributed comparison, not a complete survey of U.S. law.

Comparison European Union United States, as described by Axios on 4 September 2026
Level and form A Union-wide statute, the AI Act. A more distributed mix of state laws, court cases, executive actions, voluntary frameworks, national-security restrictions and other policy.
Organizing approach Risk-based obligations within the Act, including provisions for high-risk AI and general-purpose AI. The cited report describes multiple policy channels; it does not establish one comparable, unified federal framework.
Implementation Phased statutory dates, with implementation, supervision and enforcement shared between EU-level and national authorities for applicable rules. The cited report does not provide a single U.S. implementation timetable comparable to the EU schedule.

Virkkunen told Axios: “We see when it comes to technologies that in the USA the culture is different. So often it’s coming via court cases, but often very similar things anyway, very similar concerns.” This is her reported view, not a finding that the two systems produce identical protections.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.