EU AI Act Receives Timeline Relief and Targeted Simplifications

On May 7, 2026, EU negotiators reached provisional agreement on the Digital Omnibus on AI. The amendments postpone Annex III high-risk AI systems deadlines from August 2, 2026 to December 2, 2027, and Annex I high-risk systems from August 2, 2027 to August 2, 2028. New prohibitions on AI generating non-consensual intimate material take effect December 2, 2026. Breaches of Article 25(2) or Article 25(4) carry fines up to 3% of worldwide annual turnover or €15 million.

Compliance deadline extensions

• ▪On May 7, 2026, negotiators from the Council of the European Union, the European Parliament, and the European Commission reached a provisional agreement on the terms of the Digital Omnibus on AI
• ▪The EU AI Act compliance deadline for Annex III high-risk AI systems (use-based) was postponed from August 2, 2026 to December 2, 2027, a deferral of 16 months
• ▪The EU AI Act transparency obligations under Article 50(2) for AI systems generating or manipulating synthetic content placed on the EU market before August 2, 2026 were postponed from August 2, 2026 to December 2, 2026, a deferral of 4 months
• ▪The EU AI Act obligation for Member States to establish at least one regulatory sandbox at the national level was postponed from August 2, 2026 to August 2, 2027, a deferral of 1 year
• ▪The EU AI Act compliance deadline for Annex I high-risk AI systems (product-regulated, including radio equipment, lifts and medical devices) was postponed from August 2, 2027 to August 2, 2028, a deferral of 1 year
• ▪The Digital Omnibus on AI marks the first set of amendments to the EU AI Act since the EU AI Act's adoption in June 2024

Sectoral regulation alignment

• ▪The amended EU AI Act deletes Annex VIII, Section B, points 7 and 9, streamlining the information that providers must submit for systems self-assessed as non-high-risk under Article 6(3)
• ▪The EU Machinery Regulation ((EU) 2023/1230) was moved from Annex I Section A to Section B of the EU AI Act, shifting AI-enabled machinery from a dual-compliance model to one where sector-specific laws are paramount
• ▪The European Commission must adopt delegated acts amending Annex III of the Machinery Regulation to incorporate AI-specific health and safety requirements by August 2, 2028

Intimate imagery prohibitions

• ▪The EU AI Act amendments introduce a prohibition on AI systems that generate or manipulate non-consensual intimate material and child sexual abuse material (CSAM), taking effect on December 2, 2026
• ▪Under the amended EU AI Act, AI systems generating or manipulating synthetic content placed on the EU market or put into service after August 2, 2026 must comply with transparency obligations from the date they are placed on the market or put into service

Bias detection data use

• ▪Under the EU AI Act Article 4a, providers and deployers of non-high-risk AI systems and deployers of high-risk AI systems may use special category data for bias detection only where the bias is likely to affect health or safety, have a negative impact on fundamental rights, or lead to discrimination prohibited under EU law
• ▪Under the EU AI Act Article 4a, special category data used for bias detection must be deleted once the bias has been corrected or the retention period expires, whichever comes first
• ▪Under the EU AI Act Article 4a, providers of high-risk AI systems may process special category data for bias detection only where the bias detection cannot be achieved using alternative data such as synthetic or anonymized data

AI Office supervisory powers

• ▪The European Commission may delegate pre-market assessments of high-risk AI systems to designated notified bodies, which act on the Commission's behalf, with fees borne by the provider

Value chain information obligations

• ▪Under the amended EU AI Act Article 25(2), an initial provider must make available technical documentation sufficient for a downstream provider to assess the AI system's compliance with Article 16 requirements
• ▪Under the amended EU AI Act Article 25(2), an initial provider must provide a downstream provider with targeted technical access to the AI system, including for testing and validation
• ▪Under the amended EU AI Act Article 25(4), AI models supplied by a third party for use or integration in a high-risk AI system must be covered by a written agreement specifying the necessary information, capabilities, technical access, and other assistance
• ▪Under the amended EU AI Act Article 99(4), breaches of Article 25(2) or Article 25(4) carry fines of up to 3% of worldwide annual turnover or €15 million
• ▪Under the amended EU AI Act Article 25(2), an initial provider must inform a downstream provider about known limitations and failure modes of the AI system