Key Developments

The Council of the European Union has reached agreement on significant amendments to the EU AI Act timeline through its Digital Omnibus VII proposal. The most substantial change extends compliance deadlines for high-risk AI systems to December 2, 2027 for standalone systems and August 2, 2028 for AI embedded in products - a pragmatic shift acknowledging the need for proper standards and support tools before enforcement begins.

The Council has also introduced new prohibitions targeting AI practices involving generation of non-consensual sexual content and child sexual abuse material, responding to growing concerns about deepfakes and synthetic content harms. Additionally, regulatory exemptions originally designed for SMEs are being extended to small mid-caps, while reinstating requirements for providers to register AI systems in the EU database.

Industry Context

This development reflects the EU’s attempt to balance ambitious AI regulation with practical implementation realities. The original timeline was proving challenging for organizations struggling to comply without finalized standards and certification processes. The Digital Omnibus represents a broader streamlining effort across the EU’s digital regulatory landscape, covering AI, data access, privacy, and cybersecurity.

Meanwhile, the European Commission continues recruiting AI technology specialists for the European AI Office, with applications closing March 27, 2026, highlighting the institutional commitment to technical oversight capability.

Practical Implications

For Irish and European AI developers, this timeline extension provides crucial breathing room. Organizations building high-risk AI systems now have 18-24 additional months to prepare compliance frameworks, though they should use this time strategically rather than delaying preparation efforts.

The new content generation prohibitions will require immediate attention from companies developing generative AI tools, particularly those in creative, entertainment, or content creation sectors. These firms need to implement robust safeguards against misuse of their technologies.

The transparency rules still take effect in August 2026, meaning companies must focus on content marking and labeling requirements as the Commission finalizes its Code of Practice by June 2026.

Open Questions

Key uncertainties remain around the specific technical standards that will govern high-risk AI systems and how the expanded SME exemptions will be implemented in practice. The exact scope and enforcement mechanisms for the new content generation prohibitions also require clarification as the legislative process continues.

Source: EU Council