The EU AI Act is the European Union's law regulating artificial intelligence, set out in Regulation (EU) 2024/1689. It entered into force on 1 August 2024 and takes a risk-based approach, banning certain AI practices, setting strict duties for high-risk systems and imposing transparency obligations on others. It can apply to UK businesses serving EU markets.
What it means
The Act sorts AI uses by risk. Prohibited practices have applied since 2 February 2025. Rules for general-purpose AI models applied from 2 August 2025, and the Act's general application date was 2 August 2026, with exceptions.
Following the AI Omnibus, which entered into force on 27 July 2026, the European Commission states that high-risk rules for certain sensitive areas, such as employment and education, apply from 2 December 2027, and for AI embedded in regulated products from 2 August 2028.
How it works in a UK business
The UK has no equivalent single AI law, but the EU Act can reach UK firms that place AI systems on the EU market or whose AI outputs are used in the EU. A UK business using AI in recruitment for EU roles, for example, should check whether that use is high-risk.
A sensible first step is an inventory of AI systems, a classification of each by risk and a gap analysis against the relevant obligations.
Frequently asked questions
Does the EU AI Act apply to UK businesses?
It can. The Act applies to providers placing AI systems on the EU market and to providers and deployers outside the EU where the AI system's output is used in the EU. A UK firm with EU customers, users or staff should map its AI use and take legal advice where it may be in scope.
When do the high-risk rules apply?
According to the European Commission, following the AI Omnibus, high-risk rules for systems in sensitive areas listed in Annex III, such as employment, education and biometrics, apply from 2 December 2027. Rules for high-risk AI embedded in regulated products listed in Annex I apply from 2 August 2028.
Last updated: 5 November 2026