Skip to main content
FeaturedDaily
Back to all news

AI policy

EU begins enforcing the AI Act

Transparency rules, GPAI powers and penalties applied from 2 August.

By , Editor-in-Chief · FeaturedDailyVerified September 2026

The answer

The EU began enforcing the AI Act on 2 August 2026, including transparency rules and penalties.

The European Commission's AI Office, together with national authorities, began enforcing the AI Act on 2 August 2026. New transparency rules applied from the same date.

Under these rules, chatbots have to identify themselves as automated systems, deepfakes need a label, and machine-made or edited content must carry machine-readable marks so it can be detected automatically.

Source: Help Net Security · 4 August 2026

Deepfakes must be labelled. AI-generated or altered content must carry machine-readable marks so it can be detected automatically. The Commission has issued a standard icon set for the purpose.

Penalties and enforcement

Fines run to €15 million or 3% of global annual turnover for companies, with proportionality for SMEs and up to €750,000 for EU institutions. Enforcement is divided between national market surveillance authorities, the European AI Office and the European Data Protection Supervisor.

The AI Office ran a hiring round for around 40 enforcement posts. In September it began technical audits on Article 11 technical files with national data protection authorities.

General-purpose AI providers above the 10^25 FLOPs threshold were due to submit first systemic risk evaluations by 15 September 2026, covering red-teaming methods, energy disclosures and copyright training summaries.

Timeline

Date Applies
2 Aug 2026 Transparency, GPAI enforcement, penalties
2 Dec 2026 New prohibited practices
2 Dec 2027 Annex III high-risk systems
2 Aug 2028 Annex I product systems

Regulation (EU) 2026/1744, the Digital Omnibus on AI, is already in force. The forthcoming nudifier ban covers systems designed to create non-consensual intimate imagery and those marketed without reasonable safeguards against such use.

The Act applies to systems placed on the EU market or whose output is used in the EU, regardless of where the provider is established. That extraterritorial scope is why compliance work has been undertaken by US and Chinese providers as well as European ones.

The United States has moved differently. A June 2026 executive order established a voluntary framework for pre-release model access for cybersecurity and national security assessment, and a separate order seeks to preempt state AI laws. Individual states continue to legislate, producing regulatory divergence.

Brazil is voting on Bill 2338 and India is presenting an AI liability framework, leaving the EU as the only jurisdiction currently operating a comprehensive, enforceable AI regime.

Frequently asked questions

When did EU AI Act enforcement start?
2 August 2026, when transparency rules, general-purpose AI enforcement powers and the penalty regime took effect.
What are the maximum fines?
€15 million or 3% of global annual turnover for companies; up to €750,000 for EU institutions.
What is the next deadline?
2 December 2026, when new prohibited practices apply.

Sources

← All news