The EU AI Act is the world’s first comprehensive, legally binding regulation governing the development, deployment, and use of artificial intelligence across the European Union. It became law on 1 August 2024 and establishes a risk‑based framework to ensure AI systems are safe, trustworthy, transparent, and respectful of fundamental rights.
The Act aims to:
Encourage the uptake of safe and trustworthy AI across the EU
Protect citizens’ health, safety, and fundamental rights
Regulate AI systems based on their risk level
Ban harmful AI practices
Impose strict requirements on high‑risk AI systems
Introduce transparency rules for general‑purpose AI (GPAI) models
Support innovation through regulatory sandboxes and SME‑friendly measures
The EU AI Act categorises AI systems into four risk levels, each with different obligations:
AI systems that pose a clear threat to safety, rights, or livelihoods, including:
Manipulative or deceptive AI
Exploitation of vulnerable groups
Social scoring
Emotion recognition in workplaces or schools
Untargeted scraping for facial recognition databases
Real‑time biometric identification in public spaces (with narrow exceptions)
AI systems used in critical areas such as:
Recruitment
Credit scoring
Healthcare diagnostics
Autonomous robots
Biometric identification These must meet strict requirements:
Risk‑mitigation systems
High‑quality datasets
Logging and documentation
Human oversight
Robustness, accuracy, and cybersecurity controls
Systems like chatbots or AI‑generated content must follow transparency obligations, e.g., informing users they are interacting with AI. Deepfakes must be clearly labelled.
Most AI systems (e.g., spam filters, recommender systems) fall here and face no regulatory obligations.
The Act introduces obligations for GPAI models, including:
Transparency
Documentation
Risk management
Additional requirements for systemic‑risk GPAI models (high‑capability models)
The Act applies to providers, deployers, distributors, and importers of AI systems inside and outside the EU, as long as the AI system is used or placed on the EU market. Exemptions include:
Military/defence AI
Research and prototyping before market release
The EU AI Act sets a global benchmark for AI regulation, similar to how GDPR shaped global data privacy standards. It aims to:
Build public trust
Prevent harmful AI outcomes
Ensure accountability
Provide legal clarity for businesses
Protect democracy, rule of law, and fundamental rights