EU AI Act Compliance Deadline Approaches for High-Risk AI Systems

What Happened

The European Commission has published updated compliance guidance for businesses using high-risk AI systems under the EU AI Act. The August 2026 deadline is now firm, and regulators across EU member states are beginning to set up enforcement bodies. UK businesses selling into the EU market are also affected if their AI tools touch EU customers.

What Counts as High Risk

The EU AI Act defines high-risk AI as systems used in areas including recruitment and hiring decisions, loan and credit scoring, education assessment, border control, and critical infrastructure. If your business uses any AI tool in these areas, even a third-party tool, you may have compliance obligations.

What Businesses Need to Do

The core requirements for high-risk AI include keeping records of how AI systems make decisions, ensuring human oversight is in place, and being able to explain AI decisions to affected individuals. You also need to conduct a conformity assessment before deploying the system.

For most small businesses, the practical first step is to audit which AI tools you currently use and identify whether any fall into high-risk categories. Many off-the-shelf tools used for CV screening or customer credit checks will be in scope.

UK Businesses

The UK has not adopted the EU AI Act directly but UK companies selling to EU customers or operating in the EU must still comply. The UK's own AI regulatory approach remains sector-based and lighter touch for now, but this may change.

If in doubt, speak to a legal advisor with technology experience. Getting this wrong carries significant fines of up to 30 million euros or 6 percent of global turnover.