EU AI Act scope covers providers, deployers and Union use

The EU AI Act applies to providers that place AI systems or general-purpose AI models on the Union market or put AI systems into service there, regardless of whether they are based in the Union or a third country. It also covers Union-based deployers, third-country providers and deployers when AI output is used in the Union, importers, distributors, product manufacturers, authorised representatives of non-Union providers, and affected persons located in the Union.

The scope is narrower for some product-linked high-risk systems. For high-risk AI systems under Article 6(1) tied to products covered by Union harmonisation legislation in Section B of Annex I, only Article 6(1), Article 60a and Articles 102 to 112 apply, while Articles 57, 58 and 59 apply only where high-risk requirements have been integrated into that legislation.

The Act excludes areas outside Union law, national security competences, and AI systems used exclusively for military, defence or national security purposes. It also excludes public authorities in third countries and international organisations using AI under qualifying cooperation agreements, intermediary liability rules under Regulation (EU) 2022/2065, AI developed solely for scientific research and development, pre-market research or testing, purely personal non-professional use, and free and open-source systems unless they are high-risk or fall under Article 5 or 50.

Personal data, privacy and communications confidentiality rules continue to apply. The provision also preserves consumer protection and product safety law, allows worker-protective measures or collective agreements, and requires the Commission to adopt delegated acts by 2 August 2027 specifying limits on certain obligations for high-risk systems where equivalent or stronger protections already exist.