EU AI Act
EU AI Act explained
Start with the actual task: does a tool create internal drafts, answer customer questions or assess job applicants? Then identify who provides the system and who deploys it under their authority. A purchased model and an application built on it are different layers. Supplier statements therefore do not replace assessment of your own use.
High-risk classification follows the conditions in Article 6 and the associated annexes. Marketing personalisation or profiling does not automatically establish that classification; the particular use case matters. Likewise, the specific rules for biometric applications cannot be reduced to one statement about all facial recognition. Data protection, consumer protection and other relevant rights still require assessment alongside the AI Act.
As of 11 September 2026: the AI Act entered into force on 1 August 2024. Article 50 transparency rules generally apply from 2 August 2026. Certain systems already on the market before then have a transition until 2 December 2026 for technical marking under Article 50(2). Following AI Omnibus amendments, the relevant high-risk obligations for Annex III apply from 2 December 2027 and for regulated products under Annex I from 2 August 2028. Other transitional provisions require separate consideration.
Creative Engineering connects the communication task with a traceable implementation. We take responsibility for the concept and quality. Record intended use, roles, data flows and required measures, and review changes. Support staff AI literacy according to their tasks. An internal score or generic supplier certificate does not replace a reasoned assessment of the requirements that actually apply.
Examples
Hypothetical application
A company plans a product assistant. It documents functions, data and ownership, assesses classification and makes required notices understandable. Before , it checks factual quality and handling of unresolved questions; a later functional expansion triggers renewed assessment.
Key Points
- Derive obligations from application, role and current law.
- Distinguish high-risk classification from transparency.
- Separate application dates from specific transitional rules.
Practical application
Inventory AI applications with their purpose, roles and data flows. Map specific obligations and dates, and document implementation and open questions with the responsible specialists.
Useful measures
Documented assessment
Applications with traceably recorded purpose, roles and relevant requirements.
Progress per obligation
Track required measures with owners, deadlines and verifiable evidence.
Assessment currency
Revisit classification after relevant changes to applications, suppliers or law.
Common mistakes
- Classifying every personalised recommendation as high-risk AI.
- Repeating outdated deadlines from the original text.
- Replacing assessment of individual obligations with an overall score.
Sources and context
- EUR-Lex: AI Act, konsolidierte Fassung vom 27.07.2026
Consolidated reading version of the legal framework; the published legal acts are authoritative.
- EU AI Act Service Desk: Implementation timeline
Current EU explanation of phased application, including AI Omnibus amendments.
- European Commission: AI Omnibus enters into force
Official explanation of the 2026 changes, not an assessment of a particular application.
- EUR-Lex: DSGVO / GDPR
EU legal basis, particularly purpose limitation, data minimisation, lawful bases, consent and marketing objections.
Frequently Asked Questions about EU AI Act
No. The legal conditions and specific purpose determine classification. Use for advertising or product recommendations alone is insufficient.
No. Application is phased and was partly amended in 2026. Check the particular obligation and transitions against the current EU timeline and legal text.
No. Personal data and other affected rights still require assessment under applicable rules. An AI Act classification is not general permission to use data.
Loading related terms…
All TermsArticles about EU AI Act

AI with Brand DNA: Why Generic Bots Are a Brand Risk
Off-the-shelf AI assistants can dilute your brand. Learn how strategic calibration, guardrails, and red-teaming can transform a generic bot into a powerful, on-brand ambassador that positively impacts business outcomes.

Grok Bot Skills: How to Truly Scale AI in Your Marketing
Reusable task instructions help teams organise AI work consistently. Learn how to connect briefs, data, quality checks and version control, and measure the benefits in your own workflow.

Prompt Ops: The Operating System for AI in Marketing
The uncontrolled use of AI prompts leads to chaos. Prompt Ops provides a structured approach to manage prompts like software, ensuring efficiency, quality, and scalability in marketing.