Regulation 2024/1689 · Operational tracker

EU AI Act Tracker

Enforcement timeline and regulatory status — maintained by a security architect, updated as events happen.

Last verified18 Aug 2026
82daysuntil next milestone
5/ 10milestones in force
79controlsmapped in blueprint →
€35M / 7%max for prohibited practices

Enforcement timeline

In forceUpcoming
  1. In force

    AI Act enters into force

    Regulation 2024/1689 published in Official Journal, 20-day entry into force.

  2. In force

    Prohibited practices + AI literacy

    Art. 5 prohibitions (social scoring, subliminal manipulation, real-time biometric ID) and Art. 4 AI literacy obligation take effect.

  3. In force

    GPAI model obligations + governance

    Art. 51-56 GPAI provider obligations (technical docs, copyright, downstream info). AI Office and governance structure operational.

  4. In force

    Digital Omnibus on AI entered into force

    Regulation (EU) 2026/1744, published in the Official Journal 24 July 2026, in force the third day after. First formal amendment to the AI Act since adoption.

  5. In force

    Transparency obligations (Art. 50)

    Chatbot disclosure, deepfake/AI-content labelling, emotion-recognition and biometric notification now apply (Commission guidelines adopted 20 July 2026). The AI Office's enforcement powers over GPAI providers and prohibited practices are active; content-marking for generative AI already on the market has a transitional period to 2 Dec 2026.

  6. You are here · 11 Sept 2026
  7. Upcoming82d

    Watermarking + nudifier ban

    AI-generated content labeling for systems already on market (3-month grace). New prohibition on non-consensual intimate imagery and CSAM generation.

  8. Upcoming325d

    Regulatory sandboxes

    Deadline for national competent authorities to establish AI regulatory sandboxes.

  9. Upcoming447d

    High-risk AI systems — Annex III

    Full Art. 8-15 requirements for standalone high-risk AI systems: employment, credit scoring, law enforcement, education, critical infrastructure, biometrics, migration, justice.

    Postponed from 2 Aug 2026 to 2 Dec 2027 by the Digital Omnibus (Regulation (EU) 2026/1744, in force 27 July 2026).

  10. Upcoming691d

    High-risk AI in regulated products — Annex I

    AI systems as products or safety components under EU product safety rules: medical devices, toys, machinery, vehicles, lifts, marine equipment.

    Postponed from 2 Aug 2027 to 2 Aug 2028 by the Digital Omnibus (Regulation (EU) 2026/1744). AI in machinery moved to a sectoral track, with AI-specific requirements to follow via delegated acts by 2 Aug 2028.

  11. Upcoming1572d

    Large-scale IT systems (Annex X)

    Legacy AI systems in large-scale EU IT systems (SIS, VIS, Eurodac, etc.) must be brought into compliance.

Go deeper

EU AI Act Blueprint →79 controls mapped to the regulation. Open source on GitHub.Deep-dive articles →Implementation notes, postmortems, and analysis on the /writing page.

Powered by Buttondown.