Term · AI
EU AI Act (AI-verordening)
The EU AI Act, in Dutch the AI-verordening, is the European law for AI. The greater the risk of an AI application, the stricter the rules.
In short
The EU AI Act, Regulation (EU) 2024/1689, is the European law on artificial intelligence. The law classifies AI applications by risk: some are banned, others get strict requirements or rules on openness, and for most no extra rules apply. The rules come into force step by step, from 2025 to 2028.
What is the EU AI Act?
The EU AI Act is a European law with rules for building and using AI. The official name is Regulation (EU) 2024/1689. In Dutch it is called the AI-verordening. It applies directly in all EU countries.
The law applies to providers, who build AI or place it on the market. And to users: organisations that deploy AI, from government to SMEs. In the law, such a user is called a deployer.
How does the EU AI Act work?
The law looks at the risk of an application. There are four categories:
- Unacceptable risk. Banned, such as social scoring and harmful manipulation.
- High risk. Strict requirements, such as human oversight and recording what the system does. Think of AI for recruitment and selection or in education.
- Transparency risk. People must know that they are dealing with AI. For example with a chatbot or with deepfakes.
- Minimal or no risk. No extra rules. According to the European Commission, most AI in the EU falls into this category, such as spam filters.
In addition, the obligation around AI literacy (Article 4) applies to everyone who builds or uses AI.
When do the rules apply?
| Date | What comes into force |
|---|---|
| 1 August 2024 | The law enters into force. |
| 2 February 2025 | Banned applications and AI literacy. |
| 2 August 2025 | Rules for makers of general-purpose AI models, such as large language models. |
| 2 August 2026 | Most other rules, including the rules on openness. |
| 2 December 2026 | Ban on AI that creates intimate images of recognisable people without consent. |
| 2 December 2027 | Rules for high-risk AI in sensitive areas, such as work and education. |
| 2 August 2028 | Rules for high-risk AI in products, such as lifts or toys. |
The last three dates come from the digital omnibus on AI, Regulation (EU) 2026/1744. It has been in force since 27 July 2026 and also changed Article 4.
What does the EU AI Act mean for SMEs?
Do you use AI without building it yourself? Start with these questions:
- Which AI tools do we use, and for what? Put them in an AI register.
- Does an application fall into a stricter category? For example AI that assesses job applicants.
- Do people know when they are talking to AI, for example via a chatbot on the website?
- Have we taken measures for AI literacy, and made agreements in an AI policy?
You and I take those first steps together in a half-day of AI policy & training. Read more about the AI training, or about what you arrange as an employer.
This is an explanation in plain language, not legal advice.
Frequently asked questions
Does the EU AI Act also apply if we only use ChatGPT?
Yes, in part. You are then a user of an AI system. According to the European Commission, the obligation around AI literacy applies in any case. If you deploy AI for customer contact, for example, also look at the rules on openness.
What is the difference with the GDPR?
The GDPR is about personal data. The EU AI Act is about AI systems, even if they contain no personal data. If you use AI with personal data, both apply.
Sources: Regulation (EU) 2026/1744, European Commission: AI Act and the Dutch Data Protection Authority (Autoriteit Persoonsgegevens): EU AI Act (in Dutch). Consulted on 7 October 2026.
Written by Bart van Engelenhoven Founder of Uniekaiconsultancy in Ede, the Netherlands. Bart analyses how SMEs work and builds software, integrations and AI applications himself. Last updated: 7 October 2026
Read more
Term
AI literacy
AI literacy is knowing how AI works, where it goes wrong and how to use it well. What it means and what Article 4 of the EU AI Act requires.
Read moreTerm
AI register
An AI register is an overview of the AI tools in your business: what, for what, by whom and with which data. What goes in it and whether it is mandatory.
Read moreArticle · 9 min read
Is AI literacy mandatory? What you need to arrange
AI literacy is mandatory for businesses that use AI. What Article 4 of the EU AI Act has required since July 2026, and how to arrange it.
Read moreNext step
Curious what could work for you?
- The first conversation is free and without obligation
- By phone or at your premises
- You speak directly with me
Bart van Engelenhoven You tell me what takes up your time, I tell you honestly whether I can help.