If the board slide you built last year says EU AI Act high-risk obligations bite on 2 August 2026, it is now wrong. The digital omnibus moved those to December 2027. What actually lands on 2 August 2026 is the Article 50 transparency duty — and nothing else.
Who this is for
- Anyone who briefed a board or an audit committee in 2025 on an AI Act timeline with “2 August 2026 — high-risk obligations” on it.
- Compliance and legal leads maintaining a regulatory deadline tracker that pre-dates the omnibus.
- Technology leaders who scoped a conformity-assessment programme against the old calendar and are now spending against it.
What actually lands on 2 August 2026
On 2 August 2026 the Article 50 transparency obligations become applicable. That is disclosure that a user is interacting with an AI system, labelling of synthetic audio, image and video, and marking of deepfakes. It is a real duty with a real date, and it applies to a lot of chatbots and content tools that firms have quietly shipped over the past two years.
What does not land on 2 August 2026 is the Annex III high-risk regime. The digital omnibus deferred those obligations to 2 December 2027. GPAI legacy models and the national sandboxes sit at 2 August 2027, and Annex I embedded high-risk runs to 2 August 2028. So the single line most board slides carried last year — “high-risk obligations apply from August 2026” — describes a deadline that no longer exists.
Free · 4 minutes
Do you know where AI is already being used in your business — and what it can see?
Fourteen questions on shadow AI, data exposure, oversight, and governance debt — the gap between how fast AI is arriving and how much control you have over it. Banded finding on screen, full sheet by email.
Why the old slide bites
A stale deadline does two kinds of damage, and they pull in opposite directions. If the board still believes high-risk hits in August, someone is either burning budget on a conformity-assessment sprint eighteen months early, or — worse — has already decided the firm “can’t make August” and is treating the whole thing as missed. Both are wrong for the same reason: the date moved and the slide didn’t.
The transparency duty is the part people are most likely to under-scope, precisely because it looks small next to the high-risk machinery everyone was bracing for. It isn’t a documentation set; it’s a change to live products — disclosure in the interface, provenance marking on generated media. That is engineering work with a fixed date, sitting under a heading the board has been told to ignore until 2027.
The one thing to do before 2 August
Reopen last year’s slide and split the one AI Act line into two. Keep a dated line for 2 August 2026 — Article 50 transparency, tied to a named list of your customer-facing AI systems and who owns the disclosure change for each. Move everything else to its correct 2027–2028 date. If you maintain a deadline tracker, do the same edit there before it feeds a plan. I keep a consolidated view of these dates in the 2026–2028 EU digital-law deadline calendar, and the detail on what the omnibus actually moved is in this piece on the deferrals.
If you would rather not re-derive the whole timeline yourself, correcting a board’s regulatory calendar and mapping the live obligations to named systems is the kind of thing I do under advisory.
Advisory is a fixed monthly fee, not a day rate, so a “please sanity-check our AI Act slide” question does not turn into a project.
If you want a second pair of eyes on the slide before it goes in front of the board, that is exactly what advisory is for. Either way, get the edit done before 2 August 2026.
Free interactive tool
Website compliance checklist
What your site has to do, based on what it actually does
Answer as much or as little as you like — the list builds as you go. Nothing is stored against your name and no email is required.
Everything that applies
Ordered by what to do first: legal requirements you can close quickly, then larger pieces of work, then what is expected rather than required. Not exhaustive, and not a legal audit.
Dated PDF, yours to keep or circulate.
Free interactive tool
Interactive deadline calculator
Check which regulations apply to you and when
Regulation across the EU, UK, US and Asia-Pacific has moved considerably in the past eighteen months, and several headline dates have shifted more than once. Twelve questions, about three minutes.
Results are shown on screen — no email required. A dated summary is available to download, and can be sent on if that's more useful. What we do with your answers.
Most technology problems are not technology problems. They are control problems.
The systems exist. The investment has been made. The question is whether leadership can understand, direct, evidence, and sustain what those systems produce. Find out where control exists — and where it only appears to.
Full Governance by Sixteen Pillars
Govern your business. Prove your compliance.
A board assurance cockpit for EU-regulated financial firms — tamper-evident, hash-chained proof of governance across DORA, GDPR, NIS2, ISO 27001, the EU AI Act and MiCA. In development.
See what's coming