Implementation Timeline

Date

12 July 2024

Date

1 August 2024

Application: Date of entry into force of the AI Act. At this stage, none of the Act’s requirements apply—they will begin to apply gradually over time.

Date

2 November 2024

Member States: Deadline for Member States to identify and publicly list the authorities / bodies responsible for fundamental rights protection, and to notify the Commission and other Member States.

Date

2 February 2025

Application: Prohibitions on certain AI systems start to apply (Chapter 1 and Chapter 2).

Date

2 May 2025

Commission: Codes of practice shall be ready by this date.

Date

2 August 2025

Application: The following rules start to apply:

• Notified bodies (Chapter III, Section 4),
• GPAI models (Chapter V),
• Governance (Chapter VII),
• Confidentiality (Article 78)
• Penalties (Articles 99 and 100)

Date

2 August 2025

Providers: Providers of GPAI models that have been placed on the market / put into service before this date need to be compliant with the AI Act by 2 August 2027.

Date

2 August 2025 (and every two years thereafter)

Member States: Deadline for Member States to report to the Commission on the status of the financial and human resources of the national competent authorities.

Date

2 August 2025

Member States: Deadline for Member States to designate national competent authorities (notifying authorities and market surveillance authorities), communicate them to the Commission, and make their contact details publicly available.

Date

2 August 2025 (based on date of application of Articles on ‘Penalties’)

Member States: Deadline for Member States to lay down rules for penalties and fines, notify them to the Commission, and ensure that they are properly implemented.

Date

2 August 2025

Commission: (If code of practice cannot be finalised, or if the AI Office deems it is not adequate) Commission may provide common rules for the implementation of the obligations for providers of GPAI models via implementing acts.

Date

2 August 2025 (and every year thereafter)

Commission: Deadline for annual Commission review and possible amendments on prohibitions.

Date

2 February 2026

Commission: Deadline for Commission to provide guidelines specifying the practical implementation of Article 6, including post-market monitoring plan.

Date

2 August 2026

Application: The remainder of the AI Act starts to apply, except Article 6(1).

Date

2 August 2026

Operators: This Regulation shall apply to operators of high-risk AI systems (other than those systems referred to in Article 111(1)), placed on the market / put into service before this date. However, this only applies to systems which are subject to significant changes in their designs from this date onwards.

Date

2 August 2026

Member States: Member States shall ensure that their competent authorities have established at least one AI regulatory sandbox at national level. It should be operational by this date.

Date

2 August 2027

Application: Article 6(1) and the corresponding obligations in the Regulation start to apply.

Date

2 August 2027

Providers: Providers of GPAI models placed on the market before 2 August 2025 must have taken the necessary steps to comply with the obligations laid down in this Regulation by this date.

Date

2 August 2027

Large-scale IT Systems: AI systems which are components of the large-scale IT systems listed in Annex X and that were placed on the market / put into service before this date shall be brought into compliance with this Regulation by 31 December 2030.

Date

2 August 2028

Commission: Commission shall evaluate the functioning of the AI Office.

Date

2 August 2028 (and every three years thereafter)

Commission: Commission shall evaluate the impact and effectiveness of voluntary codes of conduct.

Date

2 August 2028 (and every four years thereafter)

Commission: Commission shall evaluate and report to the European Parliament and to the Council on the need for amendments to:

• Area headings in Annex III,
• List of AI systems requiring additional transparency measures in Article 50,
• The supervision and governance system.

Date

2 August 2028 (and every four years thereafter)

Commission: Commission shall submit a progress report on ‘standardisation deliverables’ which cover the topic of energy-efficient development of general-purpose AI models. This report must be submitted to the European Parliament and Council, and made public.

Date

1 December 2028 (which is 9 months prior to 1 August 2029)

Commission: Commission must draw up a report on the delegation of power outlined in Article 97.

Date

1 August 2029

Commission: The Commission’s power to adopt delegated acts referred to in the following articles expires—unless this period is extended:

• Article 6 (6) and (7),
• Article 7 (1) and (3),
• Article 11 (3),
• Article 43 (5) and (6),
• Article 47 (5),
• Article 51 (3),
• Article 52 (4),
• Article 53 (5) and (6)

The delegation of power will, by default, be extended for recurring 5-year periods unless the European Parliament or the Council opposes such extension three months or more before the end of each period.

Date

2 August 2029 (and every four years thereafter)

Commission: Commission shall submit a report on the evaluation and review of this Regulation to the European Parliament and to the Council.

Date

2 August 2030

Providers & Deployers: Providers and deployers of high-risk AI systems intended to be used by public authorities must have taken the necessary steps to comply with the requirements and obligations of this Regulation by this date.

Date

31 December 2030

Large-scale IT Systems: Deadline for AI systems which are components of the large-scale IT systems listed in Annex X and that were placed on the market or put into service before 2 August 2027 to be brought into compliance with this Regulation.

Date

2 August 2031

Commission: Commission shall carry out an assessment of the enforcement of this Regulation and shall report on it to the European Parliament, the Council and the European Economic and Social Committee.