You’re sitting at the breakfast table, taking your first sip of espresso, your body not quite sure yet whether to gear up for work or mowing the lawn—and then you stumble upon the term “EU AI Act.” A law, then. It sounds like a very dry theater performance, with one legal provision after another stumbling over each other to explain just how dangerous they are. But far from it: This law is so much more. It’s drama, opera, and sometimes even a cabaret of bureaucracy. And yet: It affects us all.
It began, as so many things do: with good intentions. In 2021, the European Commission thought it would be nice if artificial intelligence—which at the time was already capable of more than an average third-year apprentice—were somehow regulated. There was much discussion, fine-tuning, praise, criticism, and revision. Until finally , on July 12, 2024, the final version appeared in the Official Journal of the European Union. A monumental text. A regulatory monolith. And yes—also a bit of a masterpiece of legal poetry.
The actual impact, however, did not take effect until August 1, 2024. It went into effect, but not with a bang. Rather, the EU AI Act crept into the legal system like a cat into an unguarded living room—at first curiously, then permanently.
| Date | Regulation |
|---|---|
| August 1, 2024 | Effective Date |
| Feb. 2, 2025 | Prohibition of Certain Unacceptable Risks, Mandatory AI Literacy |
| Aug. 2, 2025 | Requirements for GPAI models, enforcement by the AI Office, sanctions, and regulatory structure clarified |
| Aug. 2, 2026 | Regulation Fully in Effect (Start of Transition Periods for High-Risk Systems) |
| Aug. 2, 2027 | Obligations for high-risk AI are binding |
This phased approach allows companies to avoid rushing headlong into a panic. No, you can make a plan. And tea. Lots of tea.
The first phase of the law is already having an impact: Unacceptable risks, such as manipulative systems, social scoring, or real-time biometric recognition in public spaces, are strictly prohibited. Emotion recognition, on the other hand, remains subject to nuanced regulations: It is prohibited in sensitive contexts such as the workplace or educational institutions for the purpose of performance evaluation. In other contexts, such as market research (e.g., at trade shows), it remains permissible provided there is appropriate transparency.
Another new development is AI literacy. Employees need to learn what they’re actually using. It’s a step that was as logical as it was long overdue.
Starting in August 2025, extensive obligations will apply to general-purpose AI models (GPAI). Transparency, disclosure of data sources, copyright issues, and documentation requirements will take center stage. In addition, the first enforcement mechanisms will be implemented by the central EU authority, the AI Office—which has been active since February 2024 and has been working on standards and guidelines ever since. Member states must also designate their national supervisory authorities, which will be responsible for oversight.
For the first time, sanctions, new confidentiality requirements, and the new roles of notifying authorities for conformity assessments are also taking effect. This marks the beginning of the operational phase of the EU AI Act’s governance structure.
Now, one might be tempted to sit back with a mixture of resignation and chamomile tea. But as strict as the EU AI Act may seem—it is not just a warning, but also an invitation. An invitation to integrate AI into business practices in a responsible, transparent, and future-proof manner. Those who review the new requirements early on, categorize their systems, and document their processes thoroughly will not only gain regulatory certainty but often a genuine competitive advantage as well. Compliance becomes a calling card—an invitation to new customers and partners seeking trust in a world full of algorithms and uncertainties.
Here, so to speak, right in the heart of this new AI world. We guide companies through the pitfalls and fine print of the EU AI Act. We translate legal provisions into practical action, establish frameworks, clarify responsibilities, and assist with the risk-based classification of your AI systems. Between AI literacy, GPAI obligations, and the subtle nuances of transparency rules, you need someone who not only knows the theory but also understands the day-to-day operational challenges.
And if, one morning, that term—the EU AI Act—pops into your head again with your first sip of espresso, you can sit back and relax. We’ve got it covered.
