The AI Act provides for a graduated framework for the temporal scope of the provisions. The different dates take into account the risk potential of certain practices and the necessary adaptation effort.
1.8.2024 (20th day following publication in the Official Journal of the European Union)
6 months after the AI Act comes into force (as of 2.2.2025), the practices classified as "prohibited" may no longer be used. The regulations on AI competence ("literacy") also apply. This means that providers and operators of AI systems are obliged to take measures to ensure that their staff and other persons involved in the operation and use of AI systems on their behalf have sufficient knowledge.
The provisions on general purpose AI must be applied 12 months after the AI Act (as of 2.8.2025) comes into force.
Furthermore, the regulations on notification bodies also apply. Member States are obliged to designate at least one notifying authority that is responsible for setting up and carrying out the necessary procedures for the assessment, designation and notification of conformity assessment bodies and for their monitoring.
The governance provisions also apply, requiring the Commission at Union level and the Member States at national level to set up or designate the authorities and institutions provided for.
In addition, the penalty provisions apply from this date.
24 months after the AI Act comes into force (as of 2.8.2026), all obligations apply in principle. This means that the requirements for high-risk AI systems in accordance with Annex III (but not Annex I) and AI systems with low and minimal risk must be complied with. Furthermore, AI regulatory sandboxes must be operational and the provisions on the right to lodge a complaint pursuant to Art. 85 AIA as well as the right to an explanation of individual decision-making pursuant to Art. 86 AIA apply.
36 months after the AI Act comes into force (as of 2.8.2027), the requirements for high-risk AI systems in accordance with Annex I apply.