AI Regulation, Governance & Ethics

May 31, 2024

2 min

Understanding the Timeline for the EU AI Act’s Implementation

As artificial intelligence continues to reshape industries, the European Union (EU) has taken a significant step to regulate its development and deployment. The AI Act, a comprehensive regulatory framework, aims to ensure that AI systems are safe, transparent, and aligned with fundamental rights. For US startups looking to operate in the EU market, understanding the timeline and key dates for the AI Act’s implementation is crucial for maintaining compliance and avoiding hefty penalties.

Jan Czarnocki

Co-Founder & Managing Partner

Table of contents

The Timeline for the AI Act’s Implementation

The AI Act was approved by the European Parliament on March 13, 2024, and was accepted by the Council of the European Union on 21st of May 2024. The Act will officially enter into force 20 days after its publication, which would be in June 2024. Here is a precise timeline of the key dates and phases of implementation:

Entry into Force: Early June 2024

  • 6 Months After Entry into Force (November/December 2024): Provisions on prohibited AI practices become applicable. These include bans on AI systems that exploit vulnerabilities, employ subliminal techniques, or are used for social scoring, among other high-risk uses.
  • 9 Months After Entry into Force (February/March 2025): Codes of practice for General Purpose AI (GPAI) systems must be finalized. These codes will be developed with input from industry stakeholders, civil society, and academia, and will be evaluated and possibly approved by the AI Office and the AI Board.
  • 12 Months After Entry into Force (May/June 2025): Several governance-related provisions will come into effect. This includes the establishment of Member State competent authorities and the operationalization of the European AI Board. Rules related to GPAI systems will also begin to apply, and penalties (excluding fines for GPAI providers) will be enforced.
  • 18 Months After Entry into Force (November/December 2025): The European Commission will issue implementing acts to create a template for high-risk AI providers’ post-market monitoring plans.
  • 24 Months After Entry into Force (May/June 2026): The Act becomes fully applicable across the EU. Obligations on high-risk AI systems, such as those listed in Annex III, including biometrics, critical infrastructure, education, and law enforcement, will be enforced. Member States must have implemented rules on penalties and established at least one operational AI regulatory sandbox.
  • 36 Months After Entry into Force (May/June 2027): Obligations for certain high-risk AI systems, including those used as safety components or standalone safety products, will apply. GPAI models placed on the market before the entry into force must be brought into compliance within this period.

Conclusion

Navigating the regulatory landscape of the EU AI Act can be complex, but it is essential for US startups aiming to succeed in the European market. By understanding the timeline and key dates for the AI Act’s implementation, startups can take proactive steps to ensure compliance, avoid significant penalties, and build trust with their European customers. At White Bison, we specialize in helping startups navigate these complexities and achieve regulatory compliance. Contact us today to learn how we can support your journey in aligning with the AI Act and other EU digital laws.

Let us take care of your legal needs

Book your call
30 min free consultation

Download our free
E-Books

Get Expert Legal Guidance Today

Solve your regulatory challenges fast, build trust, avoid regulatory and reputational risks and gain a competitive advantage.

Book your call
30 min free consultation