Updated 17 October 2026. First published on 1 February 2026, when 2 August 2026 was still the date for the high-risk obligations. The Digital Omnibus on AI (Regulation (EU) 2026/1744, in force 27 July 2026) deferred the Annex III high-risk obligations to 2 December 2027 and the Annex I product-embedded obligations to 2 August 2028. These are formal postponements, not a pause. This article now follows that timeline.
2 August 2026 was meant to be the day AI governance stopped being optional for high-risk AI systems in the European market. It became a smaller milestone: the Article 50 transparency obligations applied, and the high-risk obligations moved to 2 December 2027.
What Applied on 2 August 2026
The Article 50 transparency obligations: people must be told when they are dealing with an AI system, and AI-generated or manipulated content must be disclosed as such.
What Moved to 2 December 2027
High-risk AI systems, including those used in employment, credit scoring, insurance, and critical infrastructure, must demonstrate full compliance with Articles 9-15 of the EU AI Act. For Annex III systems that obligation now applies from 2 December 2027; for AI embedded in products covered by Annex I, from 2 August 2028.
This means operational risk management systems, automatic event logging, transparency documentation, human oversight mechanisms, and accuracy/robustness guarantees.
The Enforcement Reality
Penalties for high-risk non-compliance reach €15 million or 3% of global annual turnover, whichever is higher. (The €35 million or 7% maximum applies to the prohibited practices in Article 5.) But the immediate risk isn't fines. It's market access.
Non-compliant AI systems cannot legally operate in the EU market. For global enterprises, this creates an impossible choice: achieve compliance or exit the market.
Time to Prepare, Used Well
The deferral adds time, not a reprieve. It is enough to implement proper governance infrastructure, but not enough to build it from scratch internally and prove it works before December 2027.
This is why CleanAim® exists: we built the infrastructure so you don't have to.