The European Union's landmark AI Act enters full enforcement on August 1, 2026, and many companies are scrambling to comply with its requirements.
The regulation classifies AI systems by risk level and imposes strict requirements on 'high-risk' applications, including AI used in hiring, credit scoring, law enforcement, and healthcare.
Key requirements include: mandatory risk assessments, human oversight mechanisms, transparency obligations, data governance standards, and the requirement to register high-risk AI systems in an EU database.
Penalties for non-compliance are severe: up to €35 million or 7% of global annual revenue for the most serious violations. This makes the AI Act potentially more punitive than GDPR.
Large tech companies report spending between $50 million and $200 million on AI Act compliance. Smaller firms worry that the regulatory burden could stifle innovation and push AI development to less regulated jurisdictions.
The AI Act is being closely watched by regulators worldwide. Japan, South Korea, and Brazil are all developing AI regulations that draw heavily on the EU framework.