Search pages, courses, and articles
The EU AI Act is a stack: Article 4 literacy, Article 5 prohibited practices, Articles 6 to 49 high-risk obligations, Article 26 deployer duties, Article 27 fundamental rights impact assessment, Article 50 transparency, Article 71 EU database registration, Article 72 post-market monitoring, Article 73 incident reporting, Article 99 penalties. This pillar walks the stack end to end with deadlines, documentation, and the audit trail.
Compliance is where the EU AI Act stops being a regulation and starts being a programme. The headline is Article 99 penalties at EUR 35 million or 7% of turnover, but the operational reality is documentation, dates, and roles. The 2 February 2025 prohibited-practice clock is live. Article 4 literacy is live. GPAI Articles 50-55 are live since 2 August 2025. Article 6 high-risk Annex III obligations land 2 December 2027 (delayed from 2 August 2026 by the Omnibus deal of 7 May 2026); Annex I embedded high-risk AI lands 2 August 2028. This page indexes our writing on Compliance, plus the tools that compress the 90 day implementation plan into a working programme.
A practical 10-step compliance checklist for the EU AI Act. From AI inventory to ongoing monitoring: everything your business needs before enforcement begins.
A practical 90-day AI strategy for business leaders. From audit to pilot to scale: the step-by-step framework used by organisations across Europe to implement AI responsibly.
AI adoption is accelerating across every industry. Businesses that delay risk falling behind competitors, losing talent, and facing regulatory penalties. Here is what the data says.
A practical guide to AI incident response under the EU AI Act. 6-step response plan, Article 26(5) reporting obligations, whistleblower protections, and real incident examples.
Article 27 requires certain deployers of high-risk AI systems to run a fundamental rights impact assessment (FRIA) before deployment. Who's actually in scope is narrower than most read it. This guide covers the 6 things a FRIA must cover, how it differs from a GDPR DPIA, the notification step, and how to scope your first FRIA without over-engineering it.
Article 55 of the EU AI Act binds providers of general-purpose AI models with systemic risk: model evaluations, adversarial testing, serious incident reporting under Article 55(1)(c), and cybersecurity. The 10^25 FLOP compute threshold triggers classification. Full Commission enforcement starts 2 August 2026. The Omnibus deal did not change this regime.
On 7 May 2026 the EU Council and Parliament reached a provisional agreement to delay the high-risk AI deadlines. Annex III standalone systems now apply from 2 December 2027, Annex I embedded systems from 2 August 2028. Article 4 literacy and Article 5 prohibited practices are unchanged and still live.
EU AI Act penalty tiers explained. Article 99 fines up to EUR 35 million or 7% of turnover, enforcement mechanisms, civil liability, and how to avoid penalties. Series finale.
Recruitment AI, CV screening, performance scoring, promotion and termination AI, gig allocation, and worker monitoring all sit in Annex III(4) high-risk territory under the EU AI Act. This guide covers what HR teams need to do under Article 26, when an Article 27 FRIA is required, and how to scope a 90-day HR AI compliance ramp.
Healthcare AI sits at the intersection of two regimes: the EU AI Act + sectoral product law (MDR / IVDR). This guide covers Annex I embedded high-risk classification, the dual conformity assessment route, Article 73 incident reporting on top of MDR vigilance, and the 2 August 2028 deadline post-Omnibus.
Credit-scoring AI is one of the few use cases that REQUIRES an Article 27 FRIA under the EU AI Act. This guide covers Annex III(5)(b) classification, the FRIA process, GDPR Article 22 automated-decision rights, the Consumer Credit Directive interaction, and the 2 December 2027 deadline.
Score yourself 0 to 100 against the 10 steps. Foundation 60%, scaling 40%. Returns a readiness tier and the next-step priority.
OpenReal Article 99 penalty math. SME relief applied automatically. Sourced to EUR-Lex.
OpenArticle 73 in three questions. Reporting deadline, authorities, draft notification.
OpenEU AI Act compliance lives across four pillars. Compliance is one of them. Browse the others for the full picture.
