The AI Act was sold as Europe’s attempt to regulate powerful AI systems before they became too deeply embedded in society.

2025-11-28 · Source: Pascal’s Substack · Field: Legal & Regulatory — Regulatory Affairs & Government Relations, Compliance & Risk Management, Artificial Intelligence & Machine Learning · Depth: Intermediate, medium

Summary

The European Union has provisionally agreed to simplify and delay key obligations of its AI Act, particularly for high-risk AI systems. While not a repeal, this agreement pushes back the application of high-risk AI rules from August 2, 2026, to December 2, 2027, for stand-alone systems and August 2, 2028, for AI embedded in regulated products. These high-risk systems include those used in biometrics, critical infrastructure, law enforcement, and education. The agreement also introduces carve-outs for machinery already covered by sectoral rules and adds a new prohibition on AI systems generating non-consensual sexual content, alongside mandatory watermarking for AI-generated output. This move is seen as a tactical win for industry and a partial win against deepfake abuse, but a strategic setback for the EU's original ambition to regulate AI proactively.

Key takeaway

For CTOs and VPs of Engineering assessing AI deployment strategies, the EU AI Act's delayed high-risk obligations mean a longer period of operating without full regulatory accountability. You should prioritize developing robust internal governance, documentation, and testing frameworks for AI systems now, rather than waiting for external regulations, to mitigate risks and build trust proactively.

Key insights

EU's AI Act delays high-risk obligations, balancing industry concerns with public protection.

Principles

• Regulation should not precede readiness of compliance infrastructure.
• Proactive AI governance faces timing mismatches with rapid deployment.

In practice

• Implement internal AI governance if public law is delayed.
• Build provenance, documentation, and testing for AI systems.

Topics

• EU AI Act
• High-Risk AI Systems
• AI Governance
• Deepfake Regulation
• Compliance Burden

Best for: CTO, VP of Engineering/Data, Director of AI/ML, Policy Maker, Legal Professional, AI Ethicist

Related on AIssential

• The EU AI Act, Decoded — The EU AI Act establishes a phased, risk-based regulatory framework for AI systems used within Europe.
• AI Act - EU Digital Strategy — The EU AI Act establishes a global precedent for AI regulation through a comprehensive, risk-based legal framework.
• The Digital Iron Curtain: How the EU AI Act Is Strangling European Innovation — The EU AI Act's high compliance costs and restrictive classifications are stifling European AI innovation and competitiveness.
• The EU is rapidly rewriting the AI Act. What’s changed? — The EU AI Act is being revised to balance innovation with regulation, particularly for general-purpose AI, by clarifying definitions and adjusting timelines.
• Best AI Governance Tools in 2026: 10 Platforms I Evaluated for Compliance, Risk, and Audit Readiness — AI governance tools are essential for managing AI systems, ensuring compliance, and mitigating risks in a regulated environment.
• What the EU AI Omnibus Deal Changes for the AI Act and What Lies Ahead — The EU AI Omnibus adjusts AI Act deadlines and data use, balancing industry needs with fundamental rights and safety.

Counsel's verdict on this

AIssential's Counsel cites this article in its editorial verdict on the decision it informs:

• Audit our EU AI Act deployer obligations before Aug 2? — High-risk AI compliance is delayed to 2027, but transparency and watermarking rules still take effect this August. Organizations must prepare for mandatory output marking and human oversight, or risk falling behind.

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by Pascal’s Substack.