Notifications
Clear all
Topic starter
18/08/2026 2:14 pm
TL;DR: The Digital Omnibus pushed high-risk EU AI Act obligations into 2027 and 2028, but Article 50 transparency rules and general-purpose AI enforcement still begin on 2 August 2026, according to Holistic AI. The practical message is that the regulatory clock split, not stopped, and most organisations still need inventory, classification, and evidence-ready governance now.
NHIMG editorial — based on content published by Holistic AI: The EU AI Act's deadline moved to 2027. Yours didn't
By the numbers:
- The fines for non-compliance can reach €15 million or 3% of global annual turnover, whichever is higher.
- Standalone high-risk systems under Annex III move from 2 August 2026 to 2 December 2027.
- High-risk AI baked into Annex I regulated products shifts to 2 August 2028.
Questions worth separating out
A: They should manage the Act as two or more concurrent programmes, not one delayed deadline.
Q: Why do delayed AI regulation dates still require active governance?
A: Because delay changes timing, not scope.
Q: What do organisations get wrong about AI transparency obligations?
A: They often focus on model descriptions and miss the operational evidence underneath them.
Practitioner guidance
- Build a dual-clock AI compliance register Separate systems subject to Article 50 and GPAI obligations from those that fall into Annex III or Annex I high-risk categories, then assign deadlines to each group.
- Document AI system classification rationale Record why each system is provider, deployer, importer, or distributor scoped, and keep the evidence that supports its risk category.
- Treat synthetic content marking as a governed control Define who approves machine-readable labels, where markers are applied, and how exceptions are reviewed for AI-generated or edited output.
What's in the full article
Holistic AI's full blog post covers the operational detail this post intentionally leaves for the source:
- Step-by-step explanation of how Holistic AI maps provider, deployer, importer, and distributor obligations across AI systems
- Detailed breakdown of Article 50 transparency and labelling requirements for different content and system types
- Operational walkthrough of the EU AI Act readiness workflow, including inventory, classification, gap analysis, and evidence generation
- Practical examples of how the platform handles shadow AI discovery and role-specific assessments
👉 Read Holistic AI's analysis of the EU AI Act deadline shift and compliance timeline →
EU AI Act deadlines shifted, but what changes for practitioners?
Explore further
18/08/2026 3:06 pm
Compliance deferral creates governance debt, not compliance relief. The delay reduces immediate deadline pressure, but it does not reduce the number of systems, controls, or evidence artefacts organisations must manage. In practice, deferral often encourages split ownership, stalled inventories, and inconsistent classification decisions. The practitioner lesson is straightforward: delayed dates still require active governance baselines.
A question worth separating out:
Q: Who is accountable when an AI system misses EU AI Act requirements?
A: Accountability follows the role the organisation actually plays, not just the contract wording. A provider, deployer, importer, or distributor can each carry different duties, and some organisations occupy more than one role across different systems. Legal responsibility should be mapped to system ownership, operational control, and the evidence trail, not assumptions about who bought the tool.
👉 Read our full editorial: EU AI Act timelines moved, but compliance pressure did not
