August 2, 2026. The date every compliance team marked.
But the Digital Omnibus changed the geometry. Here's what most coverage got wrong:
What's enforceable RIGHT NOW:
Article 50 transparency. If your AI interacts with users, you must disclose it. Emotion recognition systems need explicit labels. Synthetic content must be marked. No grace period.
Article 49 registration. Every qualifying system must be in the EU database. Not "in progress." Registered.
GPAI penalties. Active since August 2025. Your model providers should have shipped technical documentation. If they haven't, your compliance chain is broken.
What got pushed: Annex III high-risk systems moved to December 2027. That's 16 months of runway you do NOT waste.
The catch most teams miss: Only 8 of 27 EU member states have designated enforcement contacts. That doesn't mean you're safe. It means enforcement will be uneven and unpredictable — like early GDPR, where the first fines hit before anyone expected them.
And the shadow AI problem makes this worse. 80% of employees use unapproved AI tools. Only 37% of organizations have governance policies. Shadow AI adds $670,000 to average breach costs.
Fines: €35M or 7% of global turnover for prohibited practices. €15M or 3% for GPAI violations.
The move: Audit every AI system touching EU users against Article 50 TODAY. If you can't produce an inventory in 48 hours, you have a governance problem no Omnibus will fix.
The EU AI Act went live 4 days ago. Most enterprises are looking at the wrong deadline.
AI-Assisted Content — Produced with AI assistance and human editorial review.
Learn more
0 Comments