Slow our EU AI Act prep now the deadline's moved to 2027?
While high-risk obligations defer to December 2027, Article 50 transparency duties and their EUR 15 million fines remain fixed for August 2026, catching systems regardless of risk tier. Failing to re-inventory and mark existing AI by December 2026 exposes your organization to immediate enforcement.
The question
The EU AI Act's high-risk deployer obligations (Article 26) look set to move from August 2026 to December 2027, but the deferral is not yet formally enacted and the transparency obligations still apply from August 2, 2026. Do we slow our compliance program to the new timeline, hold the original schedule to stay safe, or take a middle path?
Counsel's position
Adopt a middle path: prioritize immediate transparency and marking obligations, while strategically pacing high-risk compliance to the likely deferred timeline.
Verdict
The verdict: Adopt a middle path: prioritize immediate transparency and marking obligations, while strategically pacing high-risk compliance to the likely deferred timeline.
How the criteria decide
3 of 3 criteria resolved on cited evidence.
| Criterion | Favours | Evidence |
|---|---|---|
| EU AI Act deployer compliance scope and timelines | Take a middle path | Article 50 transparency and enforcement powers remain fixed for August 2026 The single most broadly applicable obligation in the entire Act - the **Article 50 transparency duties** - is not deferred. Global Privacy Laws & Compliance Frameworks | ComplianceHub.Wiki Article 50 transparency duties attach to system behavior rather than risk tier **Article 50 applies regardless of risk classification.** It attaches to specific system behaviours, not to a risk tier Global Privacy Laws & Compliance Frameworks | ComplianceHub.Wiki Machine-readable marking transition for existing AI systems ends December 2026 **2 December 2026:** This date marks the end of the transition period for the machine-readable marking requirements for AI-generated content. |
| AI inventory and risk-tier classification workflows | Take a middle path | Article 50 transparency and enforcement powers remain fixed for August 2026 The single most broadly applicable obligation in the entire Act - the **Article 50 transparency duties** - is not deferred. Global Privacy Laws & Compliance Frameworks | ComplianceHub.Wiki Article 50 transparency duties attach to system behavior rather than risk tier **Article 50 applies regardless of risk classification.** It attaches to specific system behaviours, not to a risk tier Global Privacy Laws & Compliance Frameworks | ComplianceHub.Wiki The Digital Omnibus defers Annex III high-risk obligations by 16 months High-risk AI (Annex III stand-alone systems – e.g. employment, education, law enforcement) | 2 August 2026 | 2 December 2027 (16-month deferral) |
| AI compliance as enterprise sales enablement | Take a middle path | Article 50 transparency and enforcement powers remain fixed for August 2026 The single most broadly applicable obligation in the entire Act - the **Article 50 transparency duties** - is not deferred. Global Privacy Laws & Compliance Frameworks | ComplianceHub.Wiki Article 50 transparency duties attach to system behavior rather than risk tier **Article 50 applies regardless of risk classification.** It attaches to specific system behaviours, not to a risk tier Global Privacy Laws & Compliance Frameworks | ComplianceHub.Wiki Machine-readable marking transition for existing AI systems ends December 2026 **2 December 2026:** This date marks the end of the transition period for the machine-readable marking requirements for AI-generated content. |
Article 50 transparency and enforcement powers remain fixed for August 2026
The Digital Omnibus delays high-risk obligations but leaves transparency duties and their associated EUR 15 million or 3% turnover fines on the original timeline.
Article 50 transparency duties attach to system behavior rather than risk tier
Systems previously excluded from high-risk inventories—like support chatbots, voice agents, and AI note-takers—are subject to immediate transparency requirements.
Machine-readable marking transition for existing AI systems ends December 2026
While high-risk obligations are delayed, the enforcement machinery for general-purpose AI and transparency requirements is now operational.
The Digital Omnibus defers Annex III high-risk obligations by 16 months
The delay is intended to allow harmonized standards to be completed, but it does not pause enforcement for transparency or general-purpose AI rules.
High-risk AI provisions are product safety obligations that resist retrofitting
The extended deadline to December 2027 provides necessary time to build detailed technical documentation and conformity assessments into the development lifecycle.
Read another verdict
- Start with a small test, or take on the whole process at once?
- Our competitors advertise AI and we don't — match them, or hold the line?
- Our people already put client files into ChatGPT — ban it, frame it, or supply a tool?
- Our most experienced person retires in two years — how do we keep what they know?
- We can't hire the experienced people we need — automate, train up, or outsource?
- Use AI to flatten middle management this year?
- Let an AI agent act on its own — or keep a human in the loop?
- Invest in pre-build costing or post-deployment ROI tracking?