1 Aug 2024
Entry into force
Regulation (EU) 2024/1689 enters into force across the EU. The clock starts.
2 Feb 2025
Prohibitions apply
Article 5 (prohibited practices) and Article 4 (AI literacy) become binding. Six months after entry into force. Since 27 July 2026, Article 4 requires providers and deployers to take measures to support AI literacy, without guaranteeing a specific level.
2 Aug 2025
Governance + GPAI obligations apply
Chapter III §4 (notification), Chapter V (GPAI), Chapter VII (governance), Chapter XII (penalties) become binding.
27 Jul 2026
AI Omnibus enters into force
Regulation (EU) 2026/1744 amends the AI Act: it moves the high-risk dates, softens Article 4 AI literacy, and adds a prohibition on AI that generates non-consensual intimate content or child sexual abuse material.
2 Aug 2026
General application
Most of the Regulation applies, including Article 50 transparency duties. Two years after entry into force.
2 Dec 2027
Annex III high-risk applies
Stand-alone high-risk systems in the Annex III areas, including education, employment, credit and essential services, must meet the high-risk requirements. Originally 2 August 2026.
2 Aug 2028
Annex I (regulated-product) high-risk applies
AI systems that are safety components of products already regulated under Annex I. Originally 2 August 2027.
What this means for your roadmap
If you have any system that could land in Annex III, you have until 2 December 2027 to be fully audit-ready. That window is shorter than it looks once enterprise procurement, review and evidence cycles are counted.