The AI Act Duties That Reach a Deployer on 2 August 2026
The chatbot notice belongs to your supplier and the high-risk delay belongs to companies you are not. Three duties reach a deployer on 2 August 2026.
The chatbot notice belongs to your supplier and the high-risk delay belongs to companies you are not. Three duties reach a deployer on 2 August 2026.
Spain fined Amadeus 14.4M for reusing booking data it could collect but not repurpose. Plus Vodafone, Emirates, and July’s deadline pileup before 2 August.
Last updated: 29 June 2026 Eight EU regulations now set the compliance workload for most mid-sized European companies, and they share no deadline, no penalty cap and no single enforcer between them. This EU compliance regulations comparison puts GDPR, NIS2, the AI Act, DORA, CSRD, CBAM, the Cyber Resilience Act and EUDR side by side,…
Commission published the AI labelling Code of Practice on 10 June. CBAM adds 180 downstream products. Elkjøp fined €1.85M for loyalty programme consent.
The Commission published 148 pages on AI Act high-risk classification. CNIL fined IQVIA €5M for health data warehouses. Finland passed the first CRA law.
Parliament and Council extended AI Act high-risk by 16 months to 2 December 2027, but formal adoption must clear before 2 August. Also: ESRS cut 70%, Yango fined €100M.
Ten Article 21 measures, a 24-hour incident clock and personal liability for the board. What in-scope entities have to do, and by when, in 2026.