Five months. That’s the window organizations have before the EU AI Act’s high-risk AI system obligations take full effect on August 2, 2026.
The compliance picture isn’t as straightforward as a single deadline, though. The European Commission’s Digital Omnibus proposal from November 2025 may conditionally extend enforcement timelines for certain categories, with backstop deadlines pushing to December 2027 or August 2028 depending on the system classification. The operative word is “may.” The Omnibus is a proposal, not enacted law. Organizations building compliance programs around the assumption of an extension are taking a calculated risk.
Finland moved first among EU member states, activating national enforcement authority on January 1, 2026. Other member states are expected to follow, but activation timelines vary and not all have published their implementation schedules. The Commission’s Article 6 implementation guidelines were due February 2, though publication status remains unconfirmed as of this writing.
For compliance teams, the practical question is which deadline to plan against. The conservative approach is August 2, 2026. If the Digital Omnibus passes and your system qualifies for extension, that’s a bonus. If it doesn’t, you’re already compliant. Planning against the backstop dates (December 2027 or August 2028) assumes the Omnibus passes, your system qualifies, and no member state implements stricter timelines. That’s a lot of assumptions.
The EU AI Act high-risk registration portal opened February 27 for Article 49 filings. Organizations deploying high-risk systems should begin documentation now regardless of which deadline they’re targeting.
Source: EU Digital Strategy | Feb 27, 2026