EU AI Act: August 2026 readiness

Why 2 August 2026 matters

The EU Artificial Intelligence Act — Regulation (EU) 2024/1689 — applies in stages rather than all at once. A key milestone is 2 August 2026, from which the obligations for high-risk AI systems take effect. This includes the provider duties set out in Articles 9–17 and the deployer duties in Article 26. Organisations with high-risk systems in scope use this date as the anchor for their readiness planning.

Phased timelines

The application of the Regulation is staged, and not every obligation lands on the same day. A 2026 amendment introduced some phased timelines for certain Annex III high-risk systems, so the precise date on which a given obligation applies can depend on the system. Because of this, it is worth confirming the applicable timeline for each high-risk system against the current text rather than assuming a single cut-off applies to everything.

What to prepare first

The most valuable early work is the work that everything else depends on. Before building controls, you need to know what is in scope:

• A complete inventory of the AI systems your organisation provides or deploys.
• A classification decision for each, identifying which are high-risk under Annex III.
• A clear split of who is acting as provider and who as deployer for each system.

With scope settled, the obligations that take longest to evidence — risk management, data governance and technical documentation — are the ones to start on early.

A six-step readiness plan

A practical sequence for working towards readiness:

• 1. Inventory — build and maintain a register of every AI system in use or development.
• 2. Classify — place each system in its risk tier and record the reasoning.
• 3. Assign roles — confirm provider and deployer responsibilities for each system.
• 4. Gap-assess — measure each high-risk system against the Article 9–15 requirements.
• 5. Remediate and evidence — close gaps and gather the documentation, logs and oversight records each obligation expects.
• 6. Maintain — keep the system under continuous risk management and monitoring, refreshing evidence as systems change.

Keep checking the source

Because timelines are phased and have been subject to amendment, the safest position is to verify the current applicable dates for your specific systems against the official sources below before committing to a plan. State internal target dates carefully and revisit them as the implementation timeline is updated.

How TrustedAIGov helps

The TrustedAIGov Readiness tooling is designed to support a readiness programme aligned to these milestones — keeping the inventory, classification and gap-assessment work in one place so your team can track progress towards the dates that apply to it. It supports your planning; it does not replace your own legal assessment of the applicable timelines.