EU AI Act Compliance Deadline Hits: What SMEs Need to Know Now

What Happened

Another phase of the EU AI Act has come into force this week. This stage focuses on obligations for businesses deploying AI systems classified as high-risk, which includes tools used in hiring, credit scoring, customer screening, and certain automated decision-making processes.

Who Is Affected

If your business operates in an EU country, sells to EU customers, or uses AI tools that make decisions affecting people in areas like employment or financial services, you may have new obligations. Small and medium businesses are not automatically exempt.

The rules require affected businesses to document how their AI systems work, conduct risk assessments, and in some cases register their systems with national authorities.

Why It Matters for UK Businesses

While the UK has left the EU, UK businesses selling into European markets or using EU-based software platforms must still comply. The UK government has so far taken a lighter-touch approach to AI regulation, but many UK businesses are finding that EU rules set the practical standard they need to meet anyway.

What You Should Do

First, identify whether any AI tools you use make decisions that affect people in sensitive areas. This includes automated job screening tools, AI-based credit checks, or customer risk scoring.

Second, contact the vendors of any AI tools you use and ask them directly how they are handling EU AI Act compliance. Reputable providers should have clear answers.

Third, if you are unsure whether your use cases fall into high-risk categories, get advice from a legal professional who covers technology law. The cost of early guidance is far lower than the cost of a compliance failure later.