What UK organisations need to know about the EU AI Act

The EU AI Act is a risk-based regulatory framework for AI systems in the European Union. It was adopted by the European Parliament in March 2024 and entered into force on 1 August 2024, with rules phased in over several years. The Act classifies systems into four risk categories: unacceptable risk, high risk, limited risk and minimal risk.

UK organisations may be affected if they place AI systems on the EU market, deploy AI systems that make decisions affecting people in the EU, or contribute components or data to EU supply chains. Purely domestic UK operations are not directly covered, though organisations may still want to monitor EU developments and the UK government’s evolving approach through the Department for Science, Innovation and Technology.

Key obligations are already taking effect. Prohibitions on unacceptable-risk AI have applied since 2 February 2025, general-purpose AI model obligations since 2 August 2025, and high-risk system obligations begin to apply from 2 August 2026. High-risk AI embedded in products covered by existing EU product safety law applies from 2 August 2027.

Practical preparation includes mapping AI use, identifying systems that serve the EU, classifying risk levels and closing compliance gaps. Most UK SMEs using mainstream internal productivity tools are expected to see minimal practical impact, while providers of AI systems in high-risk domains face the most significant work.