{{ p.category }}

{{ t }}

{{ p.title }}

{{ p.excerpt }}

U{{ author.name }} {{ p.readMins }} min read

{{ p.category }}

{{ p.title }}

{{ mo.sub }}

{{ m.tag }}

{{ m.t }}

{{ m.d }}

{{ m.left.t }}

✕{{ x.t }}

{{ m.right.t }}

✓{{ x.t }}

{{ m.big }}{{ m.label }}

{{ x.t }}

{{ m.label }}

✓{{ x.t }}

{{ x.t }}

{{ m.label }}
{{ x.t }}
{{ m.status }}

{{ m.label }}

{{ x.t }}{{ x.n }}

{{ x.t }}

{{ m.label }}{{ m.stepTxt }}

{{ x.t }}

{{ m.btn }}

{{ x.t }}

{{ m.q }}

{{ m.a }}

{{ x }}

{{ k.n }}

{{ k.v }}

{{ m.label }}

{{ m.status }}

{{ m.label }}

{{ st.n }}{{ st.t }}

{{ m.hub }}

{{ nd.t }}

AaAaAaAa

ButtonInput fieldTag

THE SHORT ANSWER

{{ p.answer }}

KEY TAKEAWAYS

✓{{ k }}

RELATED SERVICES

{{ b.t }}

{{ g.t }}{{ g.t }}

{{ g.t }}

{{ b.label }}:{{ b.t }}

{{ c.ini }}

{{ c.t }}

{{ c.d }}

{{ s.n }}

{{ s.t }}

{{ s.d }}

{{ h }}
{{ c.t }}

{{ b.alt }}

{{ g.alt }}

{{ b.title }}

{{ c.t }}

{{ c.s }}

{{ i }}

{{ c.t }}{{ c.s }}

{{ b.caption }}

{{ s.v }}

{{ s.l }}

{{ s.s }}

{{ b.caption }}

{{ b.title }}

{{ b.unit }}

{{ r.l }}{{ r.d }}

{{ b.caption }}

{{ b.title }}

A{{ b.a.t }}

{{ i }}

B{{ b.b.t }}

✓{{ i }}

{{ b.caption }}

{{ b.title }}

{{ t.d }}

{{ t.t }}

{{ b.caption }}

“

{{ b.t }}

{{ b.by }}

{{ b.title }}

{{ r.d }}

{{ r.l }}

{{ b.caption }}

{{ b.title }}

{{ m.n }}

{{ b.lo }}{{ b.hi }}

{{ m.n }}

{{ m.l }}

{{ m.d }}

{{ b.caption }}

{{ b.cs.client }} case study

Case study · {{ b.cs.client }} {{ b.cs.title }} {{ b.cs.text }}

{{ f.v }}{{ f.l }}

View case study →

SOURCES AND FURTHER READING

Frequently asked questions

{{ f.a }}

U

Written by {{ author.name }}

{{ author.role }}

Keep reading

More articles from across design, AI and marketing.

All articles

{{ r.category }} · {{ r.readMins }} min{{ r.title }}

Special Offer

25% Off Your Startup’s First Project

No Obligation
Quick Response
Exclusive for Startups

EU AI Act explained for businesses: timeline and checklist

The EU AI Act is the European Union’s law regulating artificial intelligence by risk level. Bans on prohibited practices have applied since February 2025, rules for general-purpose AI models since August 2025 and transparency duties since August 2026. The 2026 Digital Omnibus moved most high-risk obligations to 2 December 2027, or 2 August 2028 for AI built into regulated products. It can apply to businesses outside the EU, including in the UAE and India, if their AI is used in the EU.

What is the EU AI Act?

The EU AI Act (Regulation (EU) 2024/1689) is the first comprehensive law regulating AI. Rather than treating all AI the same, it sets rules according to risk: some uses are banned, some are allowed with strict requirements, some need transparency, and most face no new obligations. It sits alongside existing laws such as the GDPR.

Who does it apply to?

Providers: organisations that develop an AI system or model and place it on the EU market
Deployers: organisations that use AI systems in their work, such as an employer using AI screening
Importers and distributors of AI systems in the EU
Companies outside the EU whose AI systems, or their outputs, are used in the EU

That last point matters for businesses in the UAE, India and elsewhere. If you sell a SaaS product with AI features to European customers, or your AI produces results used in the EU, the Act may apply to you.

What are the risk categories?

What is the timeline after the Digital Omnibus?

In 2026 the EU adopted the Digital Omnibus on AI, Regulation (EU) 2026/1744, which entered into force on 27 July 2026 and moved several deadlines, according to Cooley and Technology.org.

What are the penalties?

The most serious breaches, such as using prohibited AI, can lead to fines of up to €35 million or 7% of worldwide annual turnover, whichever is higher. Lower tiers apply to other breaches. National authorities and the EU AI Office share enforcement.

What do the transparency rules mean in practice?

Tell users when they are talking to a chatbot or voice agent, unless it is obvious
Label deepfakes and AI-generated images, audio and video
Providers of generative AI must mark outputs in a machine-readable way
Disclose AI-generated text published to inform the public, unless a person has reviewed and taken editorial responsibility for it

These rules affect interface design directly: disclosure labels, content credentials and clear AI indicators. Our UX principles for AI design cover how to do this without cluttering the experience, and our guide to AI voice agents covers disclosure on calls.

What should businesses do now?

Build an AI inventory: List every AI system you develop or use, including features inside third-party tools.
Classify each by risk: Identify prohibited, high-risk, transparency and minimal uses.
Confirm your role: Are you a provider, deployer or both for each system?
Meet transparency duties now: Add disclosures and content labelling where needed.
Plan for high-risk obligations: If you have Annex III uses, start on risk management, documentation and human oversight ahead of December 2027.
Train your staff: Make sure people using AI understand its limits and your policies.
Review suppliers: Ask AI vendors how they comply and update contracts.

Human oversight is a recurring requirement; our guide to human-in-the-loop AI covers practical approval designs.

What does it mean for SaaS companies?

Most AI features in SaaS products, such as writing assistants or recommendations, fall into the minimal or transparency categories. Features used for hiring, credit decisions or access to essential services may be high-risk, which brings substantial obligations. Our guide to AI in SaaS products covers how to design those features responsibly.

How does the AI Act relate to the GDPR?

The two laws apply side by side. The GDPR governs personal data, including data used to train or run AI systems, while the AI Act governs the AI systems themselves. A recruitment tool, for example, must meet GDPR rules on processing candidates’ data and, from December 2027, AI Act rules for high-risk systems. The Digital Omnibus also clarified when personal data can be used to detect and correct bias in AI systems. Businesses that already have good GDPR records, data maps and impact assessments have a head start.

For a practical example of transparency duties in video, see AI avatars and talking-head videos.

For how transparency rules affect creative work, read is AI-generated video copyrightable?.

Sector guides apply these rules in practice: AI in recruitment and HR covers high-risk hiring tools, and AI for lawyers and legal teams covers professional duties.

To compare the EU approach with other markets, see AI regulation around the world, and use our AI usage policy template to set internal rules.

How UIUX Studio helps

We help teams map their AI systems, design compliant disclosure and oversight experiences, and build the documentation and controls they need. Our technology advisory team supports governance decisions, and our Agentic AI & Automation team builds compliant AI features. This article is general information, not legal advice.

Frequently asked questions

Does the EU AI Act apply to companies outside the EU?

Yes, if their AI systems are placed on the EU market or their outputs are used in the EU.

When do high-risk rules apply?

From 2 December 2027 for Annex III systems and 2 August 2028 for AI in regulated products, after the 2026 Digital Omnibus.

Do I need to label AI-generated content?

Often, yes. Transparency duties apply from August 2026, with some marking deadlines in December 2026.

Is a customer service chatbot high-risk?

Usually not, but you must tell people they are talking to AI.

What are the maximum fines?

Up to €35 million or 7% of global annual turnover for the most serious breaches.

Related articles