BuildAIPolicy Research · 4 entries · Last checked 27 October 2026
High-risk AI systems listed in Annex III, such as those used in employment, credit, education and access to essential services, will have to meet requirements including risk management, human oversight and documentation. Deployers have their own duties, such as following instructions for use and monitoring the system.
People must be told when they interact with an AI system such as a chatbot, unless it's obvious, and AI-generated content such as deepfakes must be disclosed. Providers of generative AI already on the market before 2 August 2026 have until 2 December 2026 to mark its outputs.
Regulation (EU) 2026/1744 amended the AI Act. Obligations for high-risk AI listed in Annex III (such as AI in hiring or credit) now apply from 2 December 2027, and for AI in regulated products (Annex I) from 2 August 2028. It also adds a ban on AI that creates non-consensual intimate images or child sexual abuse material, from 2 December 2026.
Certain AI practices, such as manipulative techniques and some uses of biometric categorisation, have been banned since 2 February 2025. Providers and deployers of AI systems must also take measures to support AI literacy among their staff (Article 4, as amended by the 2026 Digital Omnibus).
A general summary of public information, checked against the sources listed on the date shown. It isn't legal advice and may not cover every rule that applies to you. Check the sources, and get professional advice for your situation.
