The EU AI Act Enters Into Force
By Satwik ยท May 19, 2026
The European Union's AI Act entered into force on 1 August 2024, the first comprehensive, horizontal law governing artificial intelligence. It takes a risk-based structure. Practices deemed unacceptable, such as social scoring and certain manipulative or biometric-categorization uses, are banned. High-risk systems, in areas like employment, credit, education, and critical infrastructure, face obligations on risk management, data governance, transparency, human oversight, and conformity assessment. Limited-risk systems carry transparency duties, such as disclosing AI-generated content and chatbot identity.
Why it mattered: it set a global reference point. As with data protection before it, the EU's rules exert a "Brussels effect," pushing multinational providers toward compliance well beyond Europe. It also created a dedicated regime for general-purpose AI models, with heavier obligations for those posing "systemic risk," including model evaluation, adversarial testing, incident reporting, and cybersecurity measures, addressing frontier models directly rather than only their applications.
The timeline is phased, which is the practical detail to remember: the prohibitions and AI-literacy provisions applied first (from early 2025), general-purpose model obligations followed, and the bulk of high-risk requirements phase in over roughly two to three years. So entry into force in August 2024 started a clock rather than flipping a switch.
For our work, the Act is significant because it writes several security-adjacent practices into law: adversarial testing, incident reporting, and cybersecurity for the most capable models. That aligns regulation with much of what safety researchers already advocate, and it makes evaluation and red-teaming compliance obligations rather than voluntary commitments. The open questions we track are enforcement capacity, how "systemic risk" thresholds are operationalized, and whether the phased obligations keep pace with a capability curve that, as 2024 showed repeatedly, does not wait for legislators.