What happens on 2 August 2026?

The Regulation applies in full, including the Annex III high-risk obligations, so organisations deploying AI in areas such as employment, credit, education, essential services and critical infrastructure become subject to the full high-risk regime.

Do existing systems get an exemption?

Not a blanket one. Article 111 provides transitional treatment for certain systems placed on the market before the relevant dates, but significant changes in design can bring a legacy system back into scope, so the position must be assessed system by system.

Are prohibitions already in force?

Yes. The prohibited-practice provisions applied from 2 February 2025, alongside the AI literacy obligation in Article 4.

Timeline

What are the EU AI Act deadlines?

The Act did not arrive on one date. It arrived in stages, and the largest stage is now.

Short answer

Regulation (EU) 2024/1689 entered into force on 1 August 2024. Prohibited practices and the AI literacy obligation applied from 2 February 2025. Obligations for general-purpose AI models, governance bodies and penalties applied from 2 August 2025. The Regulation applies in full, including Annex III high-risk obligations, from 2 August 2026, with high-risk systems embedded in regulated products under Article 6(1) following from 2 August 2027.

Reviewed 2026-08-02. General information for governance planning, not legal advice.

Key points

1 August 2024 — Regulation entered into force
2 February 2025 — prohibited practices and AI literacy obligations applied
2 August 2025 — general-purpose AI, governance and penalty provisions applied
2 August 2026 — full application, including Annex III high-risk obligations
2 August 2027 — Article 6(1) product-embedded high-risk systems
Legacy systems have their own transitional treatment under Article 111

Why 2 August 2026 is the decisive date

It is the point at which the Annex III high-risk regime becomes live for the use cases most organisations actually deploy: employment and worker management, access to essential services, creditworthiness, education, law enforcement and critical infrastructure.

Those obligations are not documentation-light. They require risk management, data governance, technical documentation, logging, human oversight, accuracy and robustness measures, and for deployers a set of use-side duties that must be evidenced continuously rather than once.

The transparency layer

Article 50 transparency duties also bite at full application. Where people interact with an AI system, where content is synthetically generated or manipulated, or where emotion recognition or biometric categorisation is used, disclosure obligations apply. These are often the cheapest obligations to meet and the most visible to fail.

What to have in place before the date

A complete inventory, including AI embedded in vendor products
A recorded role determination for each system
Classification decisions with reasoning that can be reproduced
Prohibited-practice screening completed and documented
Transparency measures implemented where Article 50 applies
Named owners, oversight arrangements and an audit trail

Frequently asked questions

What happens on 2 August 2026?: The Regulation applies in full, including the Annex III high-risk obligations, so organisations deploying AI in areas such as employment, credit, education, essential services and critical infrastructure become subject to the full high-risk regime.
Do existing systems get an exemption?: Not a blanket one. Article 111 provides transitional treatment for certain systems placed on the market before the relevant dates, but significant changes in design can bring a legacy system back into scope, so the position must be assessed system by system.
Are prohibitions already in force?: Yes. The prohibited-practice provisions applied from 2 February 2025, alongside the AI literacy obligation in Article 4.

Primary sources

How AIRAS Cloud supports this

Complete AI inventory, including embedded vendor AI

Role and applicability determination per system

Deterministic, versioned classification reasoning

Append-only audit record of every decision

Run the readiness assessment AI governance in Ireland

Turn the regulation into an operating record

AIRAS Cloud gives Irish and EU organisations one accountable place to discover AI, determine scope, classify defensibly, assign controls and evidence every decision.

No pricing commitment. No confidential information required.