The EU AI Act (Regulation (EU) 2024/1689) entered into force on 1 August 2024, and its provisions apply in phases through 2027 under Article 113. Key milestones: prohibitions on 2 February 2025, general-purpose AI obligations on 2 August 2025, general application on 2 August 2026, and Annex I high-risk systems on 2 August 2027.
The EU AI Act (Regulation (EU) 2024/1689) entered into force on 1 August 2024, twenty days after its publication in the Official Journal of the European Union. Article 113 of the regulation sets out a phased application across several milestones.
Two milestones have already passed. 2 February 2025: the prohibitions in Chapter II (Article 5) — unacceptable-risk AI practices — began to apply. 2 August 2025: obligations for general-purpose AI models (Chapter V) and several other chapters listed in Article 113(b) began to apply.
2 August 2026: general application of the regulation under Article 113. This includes the obligations for high-risk AI systems listed in Annex III (recruitment, credit scoring, access to essential services, law enforcement, and others) — Articles 9 to 15 and the associated obligations for providers and deployers.
2 August 2027: application of Article 6(1) and its associated obligations — that is, high-risk AI systems embedded in products covered by EU harmonisation legislation (Annex I). For Swiss companies, the EU AI Act applies as soon as they place an AI system on the EU market, or where the system output is used in the EU.
Anchor your roadmap to 2 August 2026: that is when the high-risk obligations most organisations will feel start to bite, so inventory and classification work should be finishing, not starting, by then.
This ISO/IEC 42001 Lead Auditor training prepares audit, risk, and compliance professionals to assess Artificial Intelligence Management Systems (AIMS) in a structured, defensible way. The course focuses on planning, conducting, and closing ISO/IEC 42001 audits in real organizational environments, addressing governance, ethical use of AI, risk management, and regulatory expectations shaping 2024–2025. Participants learn to interpret ISO/IEC 42001 requirements from an auditor’s perspective, evaluate objective evidence, and formulate audit conclusions that stand up to certification scrutiny and executive review.
View courseThis Lead AI Risk Manager training prepares professionals to design, operate, and defend an AI risk management program aligned with regulatory and governance expectations. The course focuses on practical risk identification, decision traceability, and defensible mitigation strategies across the AI.
View courseISO/IEC 27001 formation and certification is no longer a differentiator but a baseline expectation. This training prepares professionals to implement and manage an Information Security Management System that actually works in operational environments.
View courseAIMS scope defines which AI activities, systems, and organizational units are covered. Context analysis examines stakeholders, legal requirements, and organizational objectives to ensure the AIMS is fit for purpose.
A Statement of Applicability documents which controls are selected for the AIMS and why they apply, creating traceability between risks, requirements, and controls.
Leaders and managers who oversee program accountability and governance decisions.
EU AI Act obligations depend on two variables: your role (provider, deployer, importer, distributor) and your system’s classification (unacceptable risk is banned; then high, limited and minimal risk). Most companies are deployers — they use AI systems supplied by third parties.
ISO 27001 gives you a head start on ISO 42001, not a free pass. Here is what carries over, what is new, and how to extend your ISMS to an AIMS, step by step.
Regulation (EU) 2024/1689 is the EU's first comprehensive risk-based horizontal AI law, applying in stages from 2025 to 2027 (with Article 6(1) deferred to 2027). Complete guide.
Browse all FAQs →
Full knowledge base
Necessary cookies are always active. You can accept, reject non-essential cookies, or customize your preferences.