AI ACT – Final legislative text and further implementation

On 13 March 2024, a majority of MEPs sitting in the European Parliament voted in favour of the AI Regulation ("EU AI Act"), thus giving the green light for the rules on artificial intelligence (AI) to be implemented in the European Union. The final draft has now been published (and is available at: https://artificialintelligenceact.eu/the-act/).

The most important compliance dates and deadlines at a glance:

Six months after the entry into force of the AI Act:

  • Date of application of the regulations on prohibited AI systems that pose an unacceptable risk, including, for example, voice-controlled toys that have an impact on children's behaviour, biometric real-time remote identification, social scoring, etc. (Article 85).


Nine months after its entry into force:

  • Date of application of the provisions on general purpose AI systems (Article 85); this concerns AI systems that perform general functions such as image or speech recognition, the answering of questions, translations, etc. (for example, ChatGPT).
  • Annual review conducted by the Commission and possible changes to prohibited AI systems (Article 84)
  • Appointment of the competent authorities of the Member State (Article 59)


12 months after its entry into force:

  • Notification of serious incidents by providers of high-risk AI systems to the market surveillance authorities of the Member States


18 months after its entry into force:

  • Provision of practical guidelines by the Commission (including examples of use cases with high/low-risk AI systems) (Article 6)
  • Adoption of implementing acts by the Commission to establish a template for the post-market monitoring plan for providers of high-risk AI systems (Article 6)


24 months after its entry into force:

  • Date of application of the provisions of Annex III on high-risk AI systems, which include AI systems in the areas of biometrics, critical infrastructure, law enforcement, education, immigration and the administration of justice, etc. (Article 83)
  • By then, the Member States must have laid down rules on penalties (including fines) (Article 53)


36 months after its entry into force:

  • Date of application of the provisions of Annex II (List of Criminal Offences referred to in Article 5(1) first subparagraph, point (h)(iii)) on high-risk AI systems (Article 85)


By the end of 2030:

  • Date of application of provisions for certain AI systems that form part of the large-scale IT systems created by EU law in the areas of justice, freedom and security (Article 83)