Navigating the EU AI Act
08/02/2025
Navigating the EU AI Act
Compliance, timelines and what your business needs to know
The European Union’s groundbreaking AI Act is set to reshape how organisations develop, deploy and manage artificial intelligence. With phased compliance deadlines starting as early as 2025, businesses across industries must act now to avoid penalties and align with global standards for ethical AI. Here’s your roadmap to understanding the law’s implications.
Why the EU AI Act matters
The EU AI Act is the world’s first comprehensive regulatory framework for AI. Its goal? To ensure AI systems are safe, transparent and accountable while fostering innovation. Non-compliance risks fines of up to 7% of global revenue or €35 million (whichever is higher), making this a critical priority for any organisation operating in the EU – regardless of where they’re headquartered.
Key deadlines. What happens when?
The Act’s requirements roll out in phases. Here’s what to expect:
Phase 1
6 Months Post-Enactment (Likely Late 2024)
Prohibited AI Systems Banned:
- Social scoring by governments.
- Manipulative AI designed to distort behavior (e.g., subliminal techniques).
- Real-time facial recognition in public spaces (with narrow exceptions).
Phase 2
12 Months Post-Enactment (Mid-2025)
General-Purpose AI (GPAI) Rules:
- Developers like OpenAI and Meta must disclose training data sources and meet transparency standards.
Phase 3
24 Months Post-Enactment (2026)
High-Risk AI Systems Compliance:
- Strict requirements for AI used in healthcare, hiring, law enforcement, and critical infrastructure.
Note: Dates assume the Act enters force in mid-2024. Monitor official EU channels for updates.
Who Must Comply?
The Act casts a wide net. Affected parties include:
- Providers: Developers of AI systems (e.g., tech firms, startups).
- Deployers: Businesses using AI in operations (e.g., HR screening tools, customer service chatbots).
- Importers/distributors: Entities bringing AI systems into the EU market.
Even non-EU companies fall under the law if their AI tools are used in the EU.
The AI literacy mandate: Beyond buzzwords
A cornerstone of the Act is ensuring “AI literacy” across organizations. While the law doesn’t prescribe specific training programs, it mandates that staff handling high-risk AI have the competence to use these systems responsibly.
What does this mean in practice?
- Tailored Training: Role-specific programs (e.g., engineers vs. executives).
- Our gen AI user course trains general staff on ethical AI use, while our C-suite programs focus on risk governance.
- Documentation: Proof of training and competency assessments.
- Governance frameworks: Clear accountability structures for AI decision-making.
Banned AI systems: Red flags for your business
Avoid these prohibited practices starting in late 2024:
- Emotion Recognition in workplaces or schools.
- Biometric Categorization based on sensitive traits (e.g., race, religion).
- Predictive Policing systems that profile individuals.
Enforcement: Who’s watching?
European AI Office: Oversees GPAI models and cross-border coordination.
- National Authorities: Each EU country will designate a regulatory body to investigate violations and levy fines.
- Third-Party Auditors: Independent assessors may verify compliance for high-risk systems.
3 Steps to Prepare Now
- Conduct an AI Inventory: Map all AI tools in use, categorizing them by risk level.
- Build a Literacy Program: Partner with experts to design training that fits your industry and workforce.
- Appoint an AI Governance Lead: Designate a team or individual to oversee compliance and risk assessments.
Implementing robust information management practices is crucial for compliance. Our comprehensive Information Management Services are designed to support your organisation in meeting these standards.
The road ahead
While the EU AI Act introduces complexity, it also offers a competitive edge: organisations that prioritise ethical AI will earn stakeholder trust and avoid costly penalties.
Navigating these regulations can be challenging. To assist, we offer a complimentary Information Management Strategy Session to help you align with the EU AI Act requirements.
Stay Ahead: Subscribe to our newsletter for updates on AI regulation, or contact our team for a compliance readiness assessment.
Need help setting up AI capability in your organisation?
