EU AI Act Timeline: Key Dates From 2025 to 2027

What's Already in Effect (February 2025)

Two major provisions are already live. First, the AI literacy obligation (Article 4) requires all businesses using AI to ensure their staff have sufficient understanding of the AI tools they use. Second, the prohibition on certain AI practices has taken effect — banned uses include social scoring, manipulative AI, real-time biometric identification in public spaces (with limited exceptions), and emotion recognition in workplaces and schools.

If you haven't addressed these requirements yet, you're already behind. The good news is that for most businesses, implementing basic AI literacy training and confirming you're not using any prohibited AI practices is straightforward.

Coming in 2025-2026

By August 2025, rules for general-purpose AI models (like the models behind ChatGPT) take effect. This primarily affects AI developers rather than business users, but it means the tools you use should become more transparent as providers comply with these requirements.

The big milestone is August 2, 2026, when the full requirements for high-risk AI systems become enforceable. This is the deadline for implementing risk management systems, data governance, technical documentation, transparency measures, human oversight, and all other high-risk AI obligations.

Full Enforcement by 2027

By August 2027, all remaining provisions take effect, including requirements for AI systems that are safety components of products regulated under other EU legislation. At this point, the full enforcement framework will be operational, with national authorities fully staffed and empowered to investigate and impose penalties.

This phased approach gives businesses time to prepare, but don't use it as an excuse to delay. The earlier you start, the smoother your compliance journey will be.

Your Preparation Timeline

Right now: ensure AI literacy, audit for prohibited uses. By mid-2025: identify any high-risk AI uses and begin planning compliance. By early 2026: implement all high-risk requirements and document your compliance. By mid-2026: test your compliance processes and fix any gaps before the August deadline. Ongoing: monitor for regulatory updates and adjust as needed.

This article is for informational purposes only and does not constitute legal advice. Regulatory requirements change frequently — verify current rules with official sources. Built by Sawai Gyoseishoshi Office, Hiroshima, Japan.