EU AI Act: Comprehensive Overview

What is the EU AI Act?

The EU AI Act (Regulation 2024/1689) is the European Union's landmark legislation establishing harmonized rules for the development, deployment, and use of artificial intelligence systems. It entered into force on August 1, 2024, with provisions being phased in through 2027.

Risk Classification System

The Act categorizes AI systems into four risk tiers:

Unacceptable Risk (Banned)

•Social scoring by governments

•Real-time remote biometric identification in public spaces (with exceptions)

•Manipulation of vulnerable groups

•Exploitation of specific vulnerabilities

High Risk

•AI in critical infrastructure (transport, energy, water)

•AI in education and vocational training

•AI in employment, worker management, and recruitment

•AI in essential services (credit scoring, insurance)

•AI in law enforcement and migration

•AI in democratic processes

Limited Risk

•Chatbots and AI content generators

•Deepfake generation

•Emotion recognition systems

•Biometric categorization systems

Minimal Risk

•AI in video games

•Spam filters

•AI-enabled inventory management

Key Compliance Requirements

For High-Risk AI Systems:

•Risk management system

•Data governance and management

•Technical documentation

•Record-keeping and logging

•Transparency and information to users

•Human oversight measures

•Accuracy, robustness, and cybersecurity

•Conformity assessment before market placement

Penalties

•Prohibited AI practices: Up to €35 million or 7% of global annual turnover

•High-risk AI non-compliance: Up to €15 million or 3% of turnover

•Incorrect information to authorities: Up to €7.5 million or 1% of turnover

Timeline

•February 2025: Prohibitions on banned AI practices take effect

•August 2025: Governance structures and codes of practice

•August 2026: Majority of provisions apply, including high-risk system requirements

•August 2027: Full enforcement for all remaining provisions

Key Points