Topic starter
18/08/2026 2:25 pm
TL;DR: The EU AI Omnibus delays high-risk AI Act deadlines to 2027 and 2028, but transparency, GPAI enforcement, and market surveillance still begin on August 2, 2026, according to BigID. The result is not a rollback but a split compliance timetable that rewards inventory, classification, and data governance work now.
Editorial analysis by NHI Mgmt Group, based on content published by BigID: “EU AI Act vs. AI Omnibus: What You Need to Know”.
Key questions
Q: How should teams govern AI compliance when transparency and high-risk deadlines split?
A: Treat the obligations as separate programmes.
Q: Why does AI inventory matter more after the Omnibus delay?
A: Because inventory is the only reliable way to classify systems against transparency, GPAI, prohibited, and high-risk obligations.
Q: What breaks when Article 50 disclosure is not in place for customer-facing AI?
A: Users lose visibility into whether they are interacting with AI, and organisations lose the ability to demonstrate transparency compliance.
Practitioner guidance
- Inventory every AI system in use Include approved platforms, embedded third-party models, and shadow AI discovered outside procurement records so classification starts from reality rather than assumption.
- Re-baseline obligations by clock Separate Article 50 disclosure work, GPAI enforcement readiness, and high-risk conformity planning into distinct workstreams with independent owners and dates.
- Verify customer-facing disclosure and labeling Test chatbot notices, synthetic-content markers, and deepfake labeling across all front-end journeys, including vendor-managed features and copied UI components.
Bottom line: The EU AI Omnibus delays some high-risk AI Act dates, but it does not pause the compliance model that sits underneath them.
Explore further
View Full Forum → | NHI Foundation Course → | Our Services → | Read the full analysis →
18/08/2026 3:16 pm
AI compliance has moved from a single-date problem to a multi-clock governance problem. The Omnibus does not remove obligations, it separates them into immediate transparency, medium-term enforcement, and deferred high-risk conformity streams. That means programme design has to reflect different control horizons instead of one generic AI deadline. The practitioners who treat this as a timing relief will fall behind when the shorter clock keeps running.
A question worth separating out:
Q: What should organisations do when AI systems are embedded in products but not yet high-risk?
A: Do not assume they are outside governance. Product-embedded systems may have later conformity deadlines, but they still need inventory, ownership, data lineage, and any applicable transparency controls now. The practical test is whether the system touches EU users or customer-facing interactions, not whether it feels low risk internally.
👉 Read our full editorial: EU AI Omnibus delays high-risk deadlines but keeps enforcement live