The EU AI Act's High-Risk Rules Are Delayed to 2027 and 2028

Correction and update: an earlier report in this series (August 15, 2026) stated that a proposed delay to the EU AI Act's high-risk obligations had not been enacted into law. That has changed. The Council of the EU and European Parliament finalized a delay as part of the Digital Omnibus initiative — high-risk obligations now apply from December 2, 2027 for standalone high-risk AI systems and August 2, 2028 for high-risk AI systems embedded in regulated products, not August 2, 2026 as originally scheduled.

What Actually Happened, In Order

• The original AI Act, adopted in 2024, set August 2026 as the enforcement date for standalone high-risk system obligations
• In late 2025, the European Commission proposed delaying that timeline as part of its Digital Omnibus initiative, citing insufficient supporting technical standards and business preparation time
• On May 7, 2026, the Council and Parliament reached a provisional agreement on the delay
• On June 29, 2026, the Council gave its final green light, formally finalizing the new dates: December 2, 2027 for standalone high-risk systems, August 2, 2028 for high-risk systems embedded in products

What Did Not Change

The delay applies specifically to the high-risk system obligations under Articles 9 through 17 and Article 26 — the risk management, data governance, technical documentation, and deployer obligations. It does not affect the Article 50 transparency and content-labeling requirements, which took effect as scheduled on August 2, 2026 and are already driving changes like Anthropic's worldwide Claude watermarking, covered separately in this batch. Organizations should not assume the whole Act was pushed back — only the high-risk provisions were.

Why This Correction Matters

Our earlier report reflected the accurate status as of its publication date, when the delay was a live legislative proposal, not yet finalized — and said so explicitly at the time. Regulatory timelines that are actively being negotiated can and do change; this is exactly why compliance planning should track a regulation's actual legislative status on an ongoing basis, not treat any single snapshot as permanent. If your organization began high-risk compliance work under the original August 2026 deadline, that work is not wasted — the same obligations still apply, just against a later hard deadline, giving more runway to do it properly.