Implementation Timeline

Date

12 July 2024

Date

1 August 2024

Application: Date of entry into force of the AI Act. At this stage, none of the Act’s requirements apply—they will begin to apply gradually over time.

Date

2 November 2024

Member States: Deadline for Member States to identify and publicly list the authorities / bodies responsible for fundamental rights protection, and to notify the Commission and other Member States.

Date

2 February 2025

Application: Prohibitions on certain AI systems and requirements on AI literacy start to apply (Chapter 1 and Chapter 2 , with the exception of Article 5(1), first subparagraph, points (ba) and (bb), and Article 5(1a) and (1b), namely the prohibition on AI systems that generate non-consensual intimate imagery and child sexual abuse material (CSAM).

Date

2 May 2025

Commission: Codes of practice on general-purpose AI models shall be ready by this date.

Date

2 August 2025

Application: The following rules start to apply:

• Notified bodies (Chapter III, Section 4),
• GPAI models (Chapter V),
• Governance (Chapter VII),
• Confidentiality (Article 78)
• Certain penalty provisions (Articles 99 and 100)

Date

2 August 2025

Providers: Providers of GPAI models that have been placed on the market before this date need to be compliant with the AI Act by 2 August 2027.

Date

2 August 2025 (and every two years thereafter)

Member States: Deadline for Member States to report to the Commission on the status of the financial and human resources of the national competent authorities.

Date

2 August 2025

Member States: Deadline for Member States to designate national competent authorities (notifying authorities and market surveillance authorities), communicate them to the Commission, and make their contact details publicly available.

Date

2 August 2025 (based on date of application of Articles on ‘Penalties’)

Member States: Deadline for Member States to lay down rules for penalties and fines, notify them to the Commission, and ensure that they are properly implemented.

Date

2 August 2025

Commission: (If code of practice cannot be finalised, or if the AI Office deems it is not adequate) Commission may provide common rules for the implementation of the obligations for providers of GPAI models via implementing acts.

Date

2 August 2025 (and every year thereafter)

Commission: Deadline for annual Commission review and possible amendments on prohibitions.

Date

2 August 2025

Commission: Deadline for developing dedicated guidance to facilitate compliance with the obligation to report serious incidents to market surveillance authorities imposed on providers of high-risk AI systems.

Date

2 February 2026

Commission: Deadline for Commission to provide guidelines specifying the practical implementation of Article 6.

Date

27 July 2026

Application: Articles 102 to 110, amending other pieces of EU legislation, start applying.

Date

2 August 2026

Application: The remainder of the AI Act starts to apply, unless specified otherwise.

Date

2 August 2026

Providers: Providers of AI systems, including GPAI systems, generating synthetic audio, image, video or text content, that have been placed on the market before this date need to be compliant with Article 50(2) by 2 December 2026.

Date

2 December 2026

Application: The prohibitions on AI systems that generate non-consensual intimate imagery and child sexual abuse material (CSAM), included in Article 5(1), first subparagraph, points (ba) and (bb), and Article 5(1a) and (1b), become applicable.

Date

2 December 2026

Providers: Providers of AI systems, including GPAI systems, generating synthetic audio, image, video or text content, that have been placed on the market before 2 August 2026 must have taken the necessary steps to comply with Article 50(2) by this date.

Date

1 August 2027

Commission: Deadline for the publication of guidelines on the practical implementation of Articles 8(2), 9(10) and 17(3).

Date

2 August 2027

Providers: Providers of GPAI models placed on the market before 2 August 2025 must have taken the necessary steps to comply with the obligations laid down in this Regulation by this date.

Date

2 August 2027

Large-scale IT Systems: AI systems which are components of the large-scale IT systems listed in Annex X and that were placed on the market / put into service before this date shall be brought into compliance with this Regulation by 31 December 2030.

Date

2 August 2027

Member States: Member States shall ensure that their competent authorities have established at least one AI regulatory sandbox at national level. It should be operational by this date.

Date

2 September 2027

Commission: The Commission, taking into account the opinion of the Board, shall adopt guidance (including a template) on the post-market monitoring plans that inform the post-market monitoring systems set up by providers of high-risk AI systems.

Date

2 December 2027

Application: Chapter III, Sections 1, 2, and 3, with the exception of Article 6(5), start applying as regards AI systems classified as high-risk pursuant to Article 6(2) and Annex III.

Date

2 December 2027

Operators: This Regulation shall apply to operators of high-risk AI systems classified as such under Annex III (other than those systems referred to in Article 111(1)), placed on the market / put into service before this date. However, this only applies to systems which are subject to significant changes in their designs from this date onwards.

Date

28 January 2028

Notified bodies: Notified bodies which have been notified under the Union harmonisation legislation in Section A of Annex I, shall apply for designation in accordance with Section 4 of Chapter III.

Date

2 August 2028

Application: Chapter III, Sections 1, 2, and 3, with the exception of Article 6(5), start applying as regards AI systems classified as high-risk pursuant to Article 6(1) and Annex I.

Date

2 August 2028

Operators: This Regulation shall apply to operators of high-risk AI systems classified as such under Annex I (other than those systems referred to in Article 111(1)), placed on the market / put into service before this date. However, this only applies to systems which are subject to significant changes in their designs from this date onwards.

Date

2 August 2028

Commission: Commission shall evaluate the functioning of the AI Office.

Date

2 August 2028 (and every three years thereafter)

Commission: Commission shall evaluate the impact and effectiveness of voluntary codes of conduct.

Date

2 August 2028 (and every four years thereafter)

Commission: Commission shall evaluate and report to the European Parliament and to the Council on the need for amendments to:

• Area headings in Annex III,
• List of AI systems requiring additional transparency measures in Article 50,
• The supervision and governance system.

Date

2 August 2028 (and every four years thereafter)

Commission: Commission shall submit a progress report on ‘standardisation deliverables’ which cover the topic of energy-efficient development of general-purpose AI models. This report must be submitted to the European Parliament and Council, and made public.

Date

1 November 2028 (which is 9 months prior to 1 August 2029)

Commission: Commission must draw up a report on the delegation of power conferred for a period of five years from 1 August 2024, outlined in Article 97.

Date

1 August 2029

Commission: The Commission’s power to adopt delegated acts referred to in the following articles expires—unless this period is extended:

• Article 6 (6) and (7),
• Article 7 (1) and (3),
• Article 11 (3),
• Article 43 (5) and (6),
• Article 47 (5),
• Article 51 (3),
• Article 52 (4),
• Article 53 (5) and (6)

The delegation of power will, by default, be extended for recurring 5-year periods unless the European Parliament or the Council opposes such extension three months or more before the end of each period.

Date

2 August 2029 (and every four years thereafter)

Commission: Commission shall submit a report on the evaluation and review of this Regulation to the European Parliament and to the Council.

Date

2 August 2030

Providers & Deployers: Providers and deployers of high-risk AI systems intended to be used by public authorities must have taken the necessary steps to comply with the requirements and obligations of this Regulation by this date.

Date

27 October 2030 (which is 9 months prior to 27 July 2031)

Commission: Commission must draw up a report on the delegation of power conferred for a period of five years from 27 July 2026, outlined in Article 97.

Date

31 December 2030

Large-scale IT Systems: Deadline for AI systems which are components of the large-scale IT systems listed in Annex X and that were placed on the market or put into service before 2 August 2027 to be brought into compliance with this Regulation.

Date

27 July 2031

Commission: The Commission’s power to adopt delegated acts referred to in the following articles expires—unless this period is extended:

• Article 2(13)

• Article 30(2)

The delegation of power will, by default, be extended for recurring 5-year periods unless the European Parliament or the Council opposes such extension three months or more before the end of each period.

Date

2 August 2031

Commission: Commission shall carry out an assessment of the enforcement of this Regulation and shall report on it to the European Parliament, the Council and the European Economic and Social Committee.