Three deadline changes are the story everyone covered. One grace period compression is the story compliance teams actually need.
The EU Digital Omnibus on AI provisional agreement, closed May 7, 2026, confirmed the headline numbers: standalone high-risk AI systems under Annex III face a December 2, 2027 compliance deadline, extended 16 months from the original August 2, 2026, date. High-risk AI systems embedded in products under Annex I move to August 2, 2028, a 12-month postponement. EU Member States get until August 2, 2027, to establish national regulatory sandboxes, also a 12-month extension from the original August 2, 2026, requirement. Formal adoption of the Omnibus text is expected by July 2026, per Latham & Watkins reporting.
Those facts are confirmed. What’s less settled, and more operationally significant for GenAI providers, is Article 50(2).
Who This Affects
According to reporting on the provisional agreement text, the Article 50(2) synthetic content disclosure deadline may be extended to December 2, 2026, from August 2, 2026. That’s a four-month extension. The catch is what the extension reportedly trades away: the grace period is reportedly compressed from six months to three. GenAI providers who assumed they had a six-month runway after the August deadline should recheck that assumption. At least one legal analysis from Gecić Law suggests August 2, 2026, may still be relevant for some Article 50 obligations – the full provisional text hasn’t been formally published, and at least one interpretation holds that the original deadline applies to systems already in service. The Article 50(2) picture won’t be definitive until the formal text clears.
The agreement also reportedly extends Article 5 prohibitions. Prior reporting confirmed the nudifier and non-consensual intimate imagery ban as part of the Omnibus package. The provisional text reportedly adds AI systems that generate child sexual abuse material to that prohibition, building on the NCII framework that prior TJS coverage established as a distinct compliance category.
Warning
The Article 50(2) grace period compression is the detail most compliance teams haven't accounted for. A four-month deadline extension paired with a three-month grace period shortens the effective compliance runway compared to what most providers planned. The formal text will settle the question, but waiting for it may cost time GenAI providers don't have.
Three things separate this brief from what you’ve already read. First, the Annex III and sandbox deadline dates are confirmed at source level, not just reported. Second, the Article 50(2) grace period compression is a detail the headline deadline coverage skipped, and it materially tightens the compliance window for synthetic content disclosure. Third, the Article 5 CSAM addition is new as of this reporting cycle, though it hasn’t been independently verified against the provisional text, treat it as consistent with prior reporting, not confirmed.
The real question is whether GenAI providers who built their Article 50 rollout plans around a six-month post-deadline grace period need to revise those plans before the formal text is published. The answer depends on which interpretation of the provisional agreement holds. Don’t expect clarity until the Commission publishes the formal adoption text, currently expected by July 2026.