Artificial Intelligence Policy Tracker
Search
Menu

Supranational · Europe

AI regulation in the European Union

Verified against the official source 26 Sep 2026 · reviewed by Bhaskar Bhatt (a factual check against the official source, not a legal review or legal advice)
What this label means
Verified
— a named reviewer opened the official source and confirmed the record; the date and the reviewer are shown.
Pending review
— linked to the official source and in the queue for a reviewer to confirm.
Source-linked
— linked to the official source, not yet confirmed by a reviewer.
Verification policy and current standing · a factual check, not legal advice.
Download: JSON · Markdown2 instruments · 1 binding
On this page 11 sections

In brief

The European Union has 2 recorded AI policy instruments, 1 of them binding and 1 in force. Binding regulation in force and partially applicable. Regulators include European Commission AI Office, European Artificial Intelligence Board, European Data Protection Board. Next dated milestone: Two further Article 5 prohibitions apply (non-consensual intimate imagery and child sexual abuse material generation) on 2 December 2026.

Type
Supranational
Region
Europe
Instruments recorded
2
Binding instruments
1
In force
1
Obligations recorded
44
Regulators
European Commission AI Office, European Artificial Intelligence Board, European Data Protection Board
Next dated milestone
Two further Article 5 prohibitions apply (non-consensual intimate imagery and child sexual abuse material generation), 2 December 2026
Updates and RSS
AI policy updates for EU
Verification
Verified against the official source 26 Sep 2026

Overview

The European Union has the world's first comprehensive, binding, cross-sector AI law: Regulation (EU) 2024/1689, the Artificial Intelligence Act. It entered into force on 1 August 2024 and applies in phases between February 2025 and August 2027. The AI Act sits alongside the GDPR, product-safety law, the Digital Services Act and sector rules, all of which continue to apply to AI systems. The European Commission's AI Office supervises general-purpose AI models, while national market-surveillance authorities supervise most other obligations.

What is the current regulatory status?

Binding regulation in force and partially applicable. Prohibited practices and AI-literacy duties apply since 2 February 2025; general-purpose AI model obligations and the governance and penalties chapters since 2 August 2025; most remaining obligations, including Annex III high-risk requirements, are scheduled from 2 August 2026, with high-risk AI embedded in Annex I regulated products from 2 August 2027. A Commission "Digital Omnibus" proposal published in November 2025 would adjust some high-risk application dates; its adoption status must be checked against the official sources linked below.

Binding rules versus guidance

Binding: the AI Act, the GDPR, the Product Liability Directive (as revised in 2024), and sector legislation. Non-binding but official: Commission guidelines on prohibited practices and on general-purpose AI, the General-Purpose AI Code of Practice, and harmonised standards being drafted by CEN-CENELEC JTC 21.

Key policy instruments

European Union Regulation Partially applicable Binding

EU AI Act

Regulation (EU) 2024/1689 — Artificial Intelligence Act

The EU AI Act is a binding regulation that sets rules for developing, placing on the market and using AI systems in the European Union. It bans a small set of practices considered unacceptable, imposes detailed requirements on "high-risk" AI systems used in areas such as employment, education, credit, essential services, law enforcement and safety-critical products, requires transparency for chatbots and synthetic content, and creates separate duties for providers of general-purpose AI models. Obligations apply in phases between 2025 and 2028.

Applies from 2 Aug 2026 Pending review (a factual check against the official source, not a legal review) Official source
European Union National strategy Adopted

Apply AI Strategy

The Apply AI Strategy is a Commission communication that sets out how the EU intends to speed up use of AI across ten strategic sectors (such as healthcare, manufacturing, energy, mobility and defence) and in public administration. It combines sectoral flagship initiatives with cross-cutting support such as AI Factories, testing facilities and skills measures, and creates an Apply AI Alliance to coordinate industry, academia and public bodies. It sits within the broader AI Continent Action Plan and was presented together with a companion AI in Science strategy.

Adopted 8 Oct 2025 Verified (reviewed by Bhaskar Bhatt; a factual check against the official source, not a legal review) Official source

Instruments at a glance

Native-language names are shown where the record carries one; a blank means the source is in English or the name is not yet recorded.

AI policy instruments recorded for European Union
InstrumentTypeStatusBindingKey dateSource
EU AI Act Regulation Partially applicable Binding Official
Apply AI Strategy National strategy Adopted Voluntary Official

Timeline

Every dated event on the recorded instruments: publication, adoption, entry into force, application and deadlines. Future dates are marked.

  1. · EU AI Act adopted
  2. · EU AI Act published
  3. · EU AI Act entered into force
  4. · Prohibited practices and AI literacy apply (Chapters I and II) (EU AI Act)
  5. · General-purpose AI, governance, notified bodies and penalties apply (EU AI Act)
  6. · Apply AI Strategy adopted
  7. · EU AI Act applies from this date
  8. upcoming · Two further Article 5 prohibitions apply (non-consensual intimate imagery and child sexual abuse material generation) (EU AI Act)
  9. upcoming · General-purpose models placed on the market before 2 August 2025 must comply (EU AI Act)
  10. upcoming · High-risk obligations apply to stand-alone Annex III systems (Chapter III, Sections 1 to 3) (EU AI Act)
  11. upcoming · High-risk obligations apply to AI embedded in Annex I products (EU AI Act)
  12. upcoming · Large-scale IT systems listed in Annex X placed on the market before 2 August 2027 (EU AI Act)

Upcoming deadlines

Subscribe to these dates in your calendar: EU feed · how it works

Upcoming deadlines in European Union
DateMilestoneInstrument
Two further Article 5 prohibitions apply (non-consensual intimate imagery and child sexual abuse material generation)
confidence: medium
EU AI Act
General-purpose models placed on the market before 2 August 2025 must comply
confidence: medium
EU AI Act
High-risk obligations apply to stand-alone Annex III systems (Chapter III, Sections 1 to 3)
confidence: medium
EU AI Act
High-risk obligations apply to AI embedded in Annex I products
confidence: medium
EU AI Act
Large-scale IT systems listed in Annex X placed on the market before 2 August 2027
confidence: medium
EU AI Act

Current priorities

Harmonised standards for high-risk AI, guidance on high-risk classification, the AI Office's supervision of general-purpose models, designation of national competent authorities and notified bodies, regulatory sandboxes in every Member State, and the legislative debate on the Digital Omnibus timing adjustments.

Latest changes

All updates for EU · RSS

All updates for EU · RSS · Updates hub

Applicable sectors, use cases and obligation areas

How to use this information

  1. Confirm whether you are a provider, deployer, importer, distributor or authorised representative for each AI system you sell or use in the EU.
  2. Screen every AI use against the Article 5 prohibited practices, which already apply.
  3. Map each system to the Annex III high-risk areas and Annex I product legislation to decide which obligations and dates apply.
  4. Check whether you place a general-purpose AI model on the EU market; if so, Chapter V obligations already apply.
  5. Track the Digital Omnibus proposal and Commission guidelines, because they can change the practical timeline.
  6. Record the official source and date for every conclusion, and have counsel review high-risk classifications.

Official government and regulator sources

  1. Regulation (EU) 2024/1689 (Artificial Intelligence Act) — Official Journal
    Publications Office of the European Union · 2024-07-12 · Tier 1 source
  2. AI Act — European Commission policy page
    European Commission · Tier 1 source
  3. European AI Office
    European Commission · Tier 1 source

Cite this record

AIPolicyTracker (2026). “AI regulation in European Union”. https://aipolicytracker.org/jurisdictions/eu (accessed 27 October 2026). Data licensed CC BY 4.0.

BibTeX 
@misc{aipolicytracker2026_airegulationineuropeanun,
  author       = {{AIPolicyTracker}},
  title        = {{AI regulation in European Union}},
  year         = {2026},
  howpublished = {\url{https://aipolicytracker.org/jurisdictions/eu}},
  url          = {https://aipolicytracker.org/jurisdictions/eu},
  urldate      = {2026-10-27},
  note         = {Data licensed CC BY 4.0. Accessed 27 October 2026}
}

Frequently asked questions

Is the EU AI Act already in force?

Yes. It entered into force on 1 August 2024, but its obligations apply in stages. Prohibited practices and AI-literacy duties have applied since 2 February 2025, general-purpose AI model duties since 2 August 2025, and most other obligations are scheduled from 2 August 2026 under Article 113 of the adopted text.

Does the EU AI Act apply to companies outside the EU?

It can. Article 2 covers providers that place AI systems or general-purpose models on the EU market or put them into service in the EU, regardless of where they are established, and providers and deployers in third countries where the output of the system is used in the EU.

Which EU rules apply to AI besides the AI Act?

The GDPR applies whenever personal data is processed, including Article 22 on automated decisions. Product safety, consumer, non-discrimination, copyright and sector laws (for example for medical devices or financial services) continue to apply, and the Digital Services Act covers online platforms.

Does the European Union have an AI law?

Yes. 1 binding instrument is in force: EU AI Act.

Who regulates AI in the European Union?

European Commission AI Office (Supervises general-purpose AI models and coordinates implementation); European Artificial Intelligence Board (Coordination body of Member State authorities); European Data Protection Board (GDPR coordination; AI and data-protection guidance).

What is the status of AI regulation in the European Union?

Binding regulation in force and partially applicable. Prohibited practices and AI-literacy duties apply since 2 February 2025; general-purpose AI model obligations and the governance and penalties chapters since 2 August 2025; most remaining obligations, including Annex III high-risk requirements, are scheduled from 2 August 2026, with high-risk AI embedded in Annex I regulated products from 2 August 2027. A Commission "Digital Omnibus" proposal published in November 2025 would adjust some high-risk application dates; its adoption status must be checked against the official sources linked below.

Is there a national AI strategy in the European Union?

Yes: Apply AI Strategy (2025).

What AI compliance deadlines are coming up in the European Union?

2 December 2026: Two further Article 5 prohibitions apply (non-consensual intimate imagery and child sexual abuse material generation); 2 August 2027: General-purpose models placed on the market before 2 August 2025 must comply; 2 December 2027: High-risk obligations apply to stand-alone Annex III systems (Chapter III, Sections 1 to 3); 2 August 2028: High-risk obligations apply to AI embedded in Annex I products.

What is binding and what is only guidance in the European Union?

Binding: the AI Act, the GDPR, the Product Liability Directive (as revised in 2024), and sector legislation. Non-binding but official: Commission guidelines on prohibited practices and on general-purpose AI, the General-Purpose AI Code of Practice, and harmonised standards being drafted by CEN-CENELEC JTC 21.

Weekly digest for this jurisdiction

Get every dated, source-linked change to this jurisdiction in a weekly email.

Double opt-in; one-click unsubscribe in every email. Choose jurisdictions

Disclaimer: informational only, not legal advice. Verify every claim against the linked official sources and consult a qualified lawyer before acting.