AI Regulation in European Union
European Union has 98 tracked AI regulatory updates across 5 frameworks. This page provides an overview of the current regulatory landscape, upcoming deadlines, and recent enforcement activity.
Upcoming Deadlines
Article 5 prohibitions on realistic intimate synthetic content and CSAM-related AI practices apply
Digital Omnibus on AI amends the EU AI ActProviders of AI systems generating synthetic audio, image, video or text must comply with Article 50(2) marking steps if placed on market before 2 Aug 2026
Digital Omnibus on AI amends the EU AI ActCommission deadline to publish AI Act guidance on complementarity and proportionality for Annex I-sector AI systems
Digital Omnibus on AI amends the EU AI ActGeneral application date for Chapter III Sections 1-3 high-risk AI rules under the amended timetable
Digital Omnibus on AI amends the EU AI ActHigh-risk AI rules for regulated products apply
EU AI Act implementation timeline and support instrumentsHigh-risk AI embedded in regulated products has extended transition period end
AI Act and European AI Office implementation and enforcementPre-existing GPAI models must comply with AI Act obligations
Commission guidelines on obligations for general-purpose AI providersCommission deadline to publish guidance and template for post-market monitoring plans
Digital Omnibus on AI amends the EU AI ActRecent Regulatory Updates
AI Act Guidelines Implementation Update
The Commission says it is preparing additional AI Act guidelines, including on high-risk systems, the AI value chain, substantial modification, post-market monitoring and interplay with other EU laws.
AI Act Fact Page
The fact page presents the AI Act’s risk-based structure, GPAI transparency and systemic-risk obligations, and the AI governance architecture.
EU AI Act: draft implementing act for AI regulatory sandboxes
The Commission opened feedback on a draft implementing act that would set common rules for establishing and operating AI regulatory sandboxes under the AI Act.
EU AI Act: draft guidelines on classification of high-risk AI systems
The Commission opened a consultation on draft guidelines to help providers, deployers, and market surveillance authorities assess whether an AI system is high-risk.
CNIL recommendations on AI system development under the GDPR
CNIL published recommendations explaining how the GDPR applies to the development of AI systems that process personal data, including purpose definition, lawful basis, data minimization, transparency, security, rights handling, and DPIA expectations.
ESAs publish Annual Work Programme for 2027
The European Supervisory Authorities published their 2027 work programme, which keeps digital operational resilience and DORA oversight of critical ICT third-party service providers as key priorities for the EU financial sector.
AEPD repository page for AI and age-assurance resources
The AEPD’s resource repository surfaces multiple AI, children-safety, and age-assurance materials, including guidance on chatbots and verification of age, but the page itself is only an index of documents.
AEPD innovation and technology resources page updated with AI/privacy materials
The AEPD’s innovation-and-technology portal lists updated resources on AI, risk management, privacy by design, and age assurance, signaling where the agency is directing compliance attention.
CNIL AI and GDPR guidance on transparency for training data
The CNIL states that organisations building or reusing AI training datasets with personal data must inform data subjects, with detailed requirements depending on whether data was collected directly, indirectly, or reused.
AEPD explains the right not to be subject to solely automated decisions
The AEPD states that individuals have a right not to be subject to decisions based solely on automated processing, subject to limited exceptions and safeguards including human intervention and contestability.
CNIL topic page on artificial intelligence
The CNIL’s AI topic page points readers to its AI compliance materials and states that it has an action plan for deploying privacy-respecting AI systems.
AP guidance on generative AI and the GDPR
The Dutch DPA published initial guidance on the lawful development and deployment of generative AI models under the GDPR for organisations that develop or deploy such models.
European AI Office and AI Act governance framework
The European AI Office is established within the European Commission to support, enforce, and coordinate AI Act governance, especially for general-purpose AI.
ESAs warn on external dependencies, cyber threats and private credit risks
The ESAs identify external dependencies, cyber threats linked to capable AI models, and private credit as key vulnerabilities for the EU financial system and call for stronger preparedness and monitoring.
AI Act consultations and implementation guidance for GPAI, sandboxes, and transparency
The Commission has opened or advanced multiple AI Act implementation workstreams for GPAI, high-risk classification, transparency, and regulatory sandboxes, meaning providers and deployers must now align their implementation plans to the emerging guidance rather than wait for finalised national practice.
Applicable Frameworks
Key Topics
Weekly digest
Leave your email to get each issue in your inbox. Free, no account required.
We use your email only for the digest. Privacy policy