When does the AI Act apply? Every deadline after the Digital Omnibus
Short answer
The bans and AI literacy have applied since 2 February 2025. The rules for general-purpose AI models have applied since 2 August 2025. The requirements for chatbots and labelling AI content apply from 2 August 2026. New bans on non-consensual sexual deepfakes and child sexual abuse material apply from 2 December 2026. The high-risk requirements in Annex III (for example recruitment and credit) apply from 2 December 2027, and for products in Annex I from 2 August 2028.
Every date
| Date | What applies | Who is affected? |
|---|---|---|
| 1 August 2024 | The AI Act enters into force | – |
| 2 February 2025 | Prohibited AI practices (Article 5) and AI literacy (Article 4) | Everyone who uses or builds AI |
| 2 August 2025 | Rules for general-purpose AI models, governance and fines | For example OpenAI, Anthropic, Google, Mistral |
| 27 July 2026 | The Digital Omnibus enters into force | – |
| 2 August 2026 | Transparency (Article 50), registration and most remaining rules | Chatbots, AI content, deepfakes |
| 2 December 2026 | New bans: non-consensual sexual deepfakes and child sexual abuse material. Deadline for labelling AI content in systems placed on the market before 2 August 2026 | Providers of generative AI |
| 2 August 2027 | General-purpose AI models placed on the market before August 2025 must follow the rules; national sandboxes | Providers |
| 2 December 2027 | High-risk AI in Annex III, for example recruitment, HR decisions, credit and education | Businesses that use AI for these purposes |
| 2 August 2028 | High-risk AI in products (Annex I), for example machinery and medical devices | Manufacturers |
| 2 August 2030 | High-risk AI already in use by public authorities | Public authorities |
The deadlines in GoalCube
GoalCube takes the deadlines from the same rule set that classifies your uses of AI. These are the dates shown on your AI Act status:
| Date | What applies |
|---|---|
| 25 May 2018 | GDPR applies, including Art. 22 on automated decision-making and Art. 35 on data protection impact assessments. (GDPR) |
| 2 February 2025 | The ban on prohibited AI practices and the AI literacy requirement apply. (Art. 4 and 5 AI Act) |
| 2 August 2026 | Transparency obligations for chatbots and AI-generated content apply. (Art. 50 AI Act) |
| 2 December 2027 | Requirements for using high-risk AI (e.g. recruitment and HR cases) apply. (Art. 26 and Annex III AI Act (Digital Omnibus)) |
What should you do now?
Don't wait for December 2027. The requirements that apply today – AI literacy, no prohibited AI and chatbot labelling – are the ones a regulator can ask about now. And GDPR applies in full, including when you use AI for recruitment or HR decisions.
What to do
- Check what applies now.AI literacy, the bans and chatbot labelling. These are the requirements a regulator can look at today.
- Find your high-risk uses.Recruitment, HR decisions, credit, insurance and education. Plan so you are ready before 2 December 2027.
- Put the dates in your calendar.GoalCube shows the deadlines on your AI Act status and gives you tasks in good time.
- Keep up with changes.The Commission publishes guidance on an ongoing basis. Review your register at least once a year.
What the law says
- Article 113 AI Act – entry into force and application
- Sets out when each part of the regulation applies.
- Regulation (EU) 2026/1744 – Digital Omnibus on AI
- Adopted on 8 July 2026, published on 24 July and in force from 27 July 2026. Postpones the high-risk rules.
- Article 111 AI Act – systems already in use
- Transitional rules, including 2 August 2030 for high-risk AI used by public authorities.
Questions and answers
What happens on 2 August 2026?
Most of the AI Act's remaining rules start to apply, including the duty to tell people they are talking to an AI and to label deepfakes (Article 50), and registration in the EU database. The high-risk requirements in Annex III were postponed to 2 December 2027.
Have the high-risk rules been postponed?
Yes. With the Digital Omnibus, the requirements for high-risk AI in Annex III apply from 2 December 2027, and for AI in products (Annex I) from 2 August 2028.
Does Article 22 GDPR already apply?
Yes. The right not to be subject to a decision based solely on automated processing has applied since 2018 – regardless of the AI Act's deadlines.
Sources
- Regulation (EU) 2024/1689 (AI Act) on EUR-Lex
- Regulation (EU) 2026/1744 (Digital Omnibus on AI) on EUR-Lex
Written by The GoalCube editorial team. Last updated 11 October 2026. GoalCube helps you follow the EU AI Act and GDPR. It is not legal advice.
Be among the first.
We expect to launch in November 2026. Join the waitlist and we’ll let you know when you can get started.