EU AI Act
The short answer · 15 words
In short
The EU AI Act regulates AI systems risk-based and distributes duties among different actor roles.
Flow-alerta.cab (2026): EU AI Act. https://flow-alerta.cab/en/glossar/ai-act. Editorially reviewed on: 10 October 2026.
How much detail would you like?
Practical
The AI Act concerns the procurement, development and deployment of AI; it does not replace case-by-case assessment or legal advice.
Hypothetical example: A company inventories AI systems, roles, purposes, data, vendor information, and human oversight.
SMEs should first clarify inventory, roles, risk class, transparency, competence and supplier documentation.
At a glance
- Core
- The regulation distinguishes prohibited practices, high-risk systems, transparency obligations and rules for general purpose AI. Duties depend on the role, system and context of deployment.
- Use
- The AI Act concerns the procurement, development and deployment of AI; it does not replace case-by-case assessment or legal advice.
- Example
- Hypothetical example: A company inventories AI systems, roles, purposes, data, vendor information, and human oversight.
- Limits
- Classify every AI tool as a high risk; make deadlines obsolete; ignore GDPR and specialist law; create documentation only once.
In context
Questions about this term
Has it been fully applicable since August 2026?
Many rules apply, but staggered exceptions remain.
Is every LLM high risk?
No; role and context of use decide.
All details and background
The regulation distinguishes prohibited practices, high-risk systems, transparency obligations and rules for general purpose AI. Duties depend on the role, system and context of deployment.
ELI5 – Explained simply
For certain risky applications, stricter requirements apply; in addition, obligations depend on your role and the specific system.
Why it matters in practice
The AI Act concerns the procurement, development and deployment of AI; it does not replace case-by-case assessment or legal advice.
Example
Hypothetical example: A company inventories AI systems, roles, purposes, data, vendor information, and human oversight.
Pitfalls and limits
- Classify every AI tool as a high risk; make deadlines obsolete; ignore GDPR and specialist law; create documentation only once.
Origin & history
The Regulation entered into force on 1 August 2024. The original prohibitions and AI competence obligations apply since 2 February 2025, governance/GPAI since 2 August 2025 and transparency obligations under Article 50 since 2 August 2026. According to AI Omnibus, which entered into force on 27 July 2026, the rules for high-risk use cases set out in Annex III apply from 2 December 2027 and for corresponding product-integrated systems set out in Annex I apply from 2 August 2028; special and transitional rules shall be examined on a case-by-case basis.
Use in mid-sized companies
- SMEs should first clarify inventory, roles, risk class, transparency, competence and supplier documentation.
Related terms
- AI governance
- High-risk AI
- GPAI
- Transparency obligation
- GDPR
Matching Flow-alerta service
AI opportunity analysis & roadmapAI consulting: clarify AI inventory, roles and organizational requirements; have legal questions examined professionally.Matching tool / use case
View use casesUse Case: AI inventory with role, risk and action review; no legal adviceSources
Quellenprüfung: 10.10.2026. Definition und dokumentierte Einordnung abgeglichen; Beispiele beschreiben mögliche Anwendungen.
Editorially reviewed on: