TLDR: The European Union’s Artificial Intelligence Act (AI Act), the world’s first comprehensive legal framework for AI, officially entered into force on August 1, 2024. This groundbreaking legislation aims to foster responsible AI development and deployment within the EU by adopting a risk-based approach, categorizing AI systems from unacceptable to minimal risk. While the Act is now law, its provisions will be phased in over the next two years, with some critical rules on prohibited AI practices and AI literacy becoming applicable as early as February 2025. Non-compliance could lead to significant fines, comparable to those under GDPR.
The European Union has ushered in a new era for artificial intelligence governance with the formal entry into force of its Artificial Intelligence Act (AI Act) on August 1, 2024. Heralded as the world’s first comprehensive legal framework for AI, this landmark legislation is designed to ensure that AI systems developed and deployed within the EU are safe, transparent, traceable, non-discriminatory, and respectful of fundamental rights. The overarching goal is to build greater public confidence in AI technologies while simultaneously fostering innovation.
At the core of the AI Act is a proportionate, risk-based approach that categorizes AI systems into four distinct levels: unacceptable, high, limited, and minimal or no risk. Systems deemed to pose an ‘unacceptable risk’ are outright banned. This includes practices such as cognitive behavioral manipulation of individuals or vulnerable groups, social scoring by governments, and real-time and remote biometric identification systems in public spaces. These prohibitions began to apply on February 2, 2025.
‘High-risk’ AI systems, which encompass applications in critical sectors like medical software, recruitment, law enforcement, and critical infrastructure, face stringent requirements. Developers and deployers of these systems must implement robust risk-mitigation measures, ensure high-quality data sets, provide clear user information, and maintain human oversight. The full applicability of rules for high-risk AI systems embedded in regulated products has an extended transition period until August 2, 2027.
For ‘limited risk’ AI systems, the Act mandates specific transparency obligations. For instance, users interacting with chatbots must be clearly informed that they are communicating with a machine. Similarly, certain AI-generated content, particularly deepfakes and text intended to inform the public on matters of public interest, must be visibly labeled as such. Most AI systems, such as spam filters or AI-enabled video games, fall under the ‘minimal or no risk’ category and face no specific obligations, though companies are encouraged to adopt voluntary codes of conduct.
While the Act entered into force on August 1, 2024, its provisions will be rolled out incrementally. Beyond the immediate prohibitions, February 2, 2025, also marked the application of AI literacy obligations, requiring companies to ensure their staff possess the necessary skills and understanding to make informed decisions about AI use and be aware of its opportunities and risks. Governance rules and obligations for general-purpose AI models (GPAI) are set to become applicable on August 2, 2025. The majority of the Act’s provisions will become fully applicable on August 2, 2026.
Non-compliance with the AI Act carries substantial penalties, with fines reaching up to 35 million euros or 7% of a company’s total annual global sales from the previous fiscal year, whichever amount is higher. These sanctions are comparable to those stipulated under the General Data Protection Regulation (GDPR), underscoring the EU’s commitment to rigorous enforcement.
Also Read:
- Texas Enacts Comprehensive AI Governance Law, TRAIGA Set for 2026 Implementation
- Europe’s AI Sector Sees Significant Investment Growth in H1 2025
To facilitate the transition and encourage early adoption, the European Commission has launched initiatives such as the AI Pact, a voluntary program inviting AI providers and deployers to comply with key obligations ahead of time. The Act is part of a broader package of policy measures aimed at fostering trustworthy AI, including the AI Innovation Package and the Coordinated Plan on AI, positioning Europe as a global leader in ethical AI development.
