AIAdopt
HomeInsightsAugust 2026: the date everyone mentioned, and what actually changed
articleApril 2026· 6 min reading time

August 2026: the date everyone mentioned, and what actually changed

2 August 2026 was never the AI Act big bang. What actually changed, what moved to 2027, and why Article 4 and Article 50 still apply under the EU AI Act.

Updated 15 August 2026. This article has been revised in light of the Digital Omnibus on AI. It was adopted by the European Parliament on 16 June 2026 and by the Council on 29 June 2026, published in the Official Journal of the EU on 24 July 2026 as Regulation (EU) 2026/1744 and entered into force on 27 July 2026. Through the Omnibus, the application of the high-risk AI requirements moves from 2 August 2026 to 2 December 2027 (stand-alone Annex III systems) and 2 August 2028 (AI in regulated products). The AI literacy obligation of Article 4 has applied since 2 February 2025. The transparency obligations of Article 50 remain applicable from 2 August 2026, with extra time until 2 December 2026 for certain technical marking obligations for systems already on the market. This article explains what that difference means.

The date that popped up everywhere, and was rarely explained well

If you have read anything about the EU AI Act in recent months, one date will have caught your eye: 2 August 2026. In webinars, in newsletters, in LinkedIn posts, everywhere that day was marked as the moment when "the AI Act really takes effect". That was already misleading at the time, and by now it is out of date. The AI Act has been in force for a long time. And the heaviest obligations, those for high-risk AI, have been moved to later by the Digital Omnibus. So what changed around 2 August 2026 was something different and narrower than the story that was going round. Understanding this distinction is vital before basing your strategy on it.

What is already in force (and since when)

For an honest picture, it helps to set the timeline straight:

1 August 2024: the EU AI Act formally enters into force. From this point the regulation is legally valid in all 27 member states, without any need for national legislation.
2 February 2025: two categories of obligation become active: the prohibited AI practices (for example emotion recognition in the workplace, social scoring) and Article 4, the obligation around AI literacy for everyone who uses or provides AI systems.
2 August 2025: obligations for providers of general-purpose AI models (such as OpenAI, Anthropic, Google) become active. For most organisations that use AI and do not build it themselves, little changes here.

In other words: the basic obligation around the AI literacy of your staff has already applied for more than a year. What demonstrably meeting Article 4 requires in practice, you can read in a separate insight. Anyone still waiting to start is already behind schedule. What the law itself asks is set out on our pillar page about Article 4.

What the Digital Omnibus has changed

For a long time, 2 August 2026 was known as the day the high-risk AI requirements would start to apply. That is no longer the case. Because the supporting standards, guidelines and national supervisory structures were not ready in time, the EU legislators have moved the application dates for high-risk AI through the Digital Omnibus on AI:

2 December 2027: the high-risk AI requirements start to apply to stand-alone AI systems that fall under Annex III (recruitment and selection, educational assessment, credit scoring, critical infrastructure, law enforcement and the like).
2 August 2028: the high-risk AI requirements start to apply to AI built into regulated products (Annex I, for example medical devices).

Important: the Omnibus was adopted by Parliament (16 June 2026) and the Council (29 June 2026), published in the Official Journal on 24 July 2026 and entered into force on 27 July 2026. The new dates are therefore legally binding. We set out separately what else the Omnibus did and did not change in the AI Act.

What did change around 2 August 2026

The postponement of the high-risk AI requirements does not mean 2 August 2026 was a non-event. A number of things did stay on that date:

The transparency obligations of Article 50 have applied since 2 August 2026. Providers must ensure that people are informed when they interact directly with an AI system, unless this is obvious. Deployers must disclose certain deepfakes and certain AI-generated text published to inform the public on matters of public interest. For the technical, machine-readable marking of AI output under Article 50(2), systems that were already on the market before 2 August 2026 get an extra period until 2 December 2026.
The AI literacy obligation of Article 4 continues to apply in full, as it has since 2 February 2025. The Omnibus has reworded that obligation slightly: providers and deployers take measures that support the AI literacy of their staff, without having to guarantee a specific level per person. Under the revised wording, this is an obligation of means, not an obligation of result.
New ban on 2 December 2026: the Omnibus adds to the prohibited practices (Article 5) a ban on AI for non-consensual intimate imagery ("nudification") and on AI that can generate child sexual abuse material.

There is a lot of confusion about the fines, so to be clear: the highest fine ceiling, up to 35 million euros or 7% of worldwide annual turnover, applies only to the prohibited AI practices of Article 5. For most other obligations, the ceiling is 15 million euros or 3%. Article 4 has no specific EU-level fine ceiling of its own in Article 99. Member states may still attach national enforcement measures to infringements, and a lack of AI literacy can weigh negatively when another AI Act infringement is assessed. For SMEs and startups, moreover, the lower of the two amounts always applies, not the higher. Our free EU AI Act Compliance Checklist takes you through what "demonstrable" means in practice.

What this means if you do not use high-risk AI

A common misconception: "We do nothing with high-risk AI, so the AI Act is not relevant to us." Incorrect. Even if your organisation only uses minimal-risk or limited-risk AI (Copilot, ChatGPT, translation tools, summarising assistants), Article 4 and, where applicable, Article 50 apply. A supervisory authority can ask: show how you support the AI literacy of your people. That obligation is already there and does not disappear with the Omnibus. We calculated separately what training delivers beyond the law. If you already use AI but get too little out of it, Effective AI at Work was made for that.

In concrete terms: if a supervisory authority comes knocking and asks about your approach, you must be able to show who followed which training, when, at what level, and with what assessed result. An internal lunch session or a circulated PDF is weak evidence. A demonstrable, structured path with certification that links the learning outcomes to the relevant articles of the regulation is not.

What this means if you do use high-risk AI

For organisations in recruitment, education, healthcare, local services or critical infrastructure, the high-risk deadline has moved to 2 December 2027 (or 2 August 2028 for AI in regulated products). That sounds like breathing room, but it is a postponement, not a cancellation. On that day you must meet all the high-risk AI obligations: not only AI literacy, but also risk management, data quality checks, human oversight, logging and documentation. You do not build that up in a few weeks. The extra time is precisely meant to do this carefully rather than in a rush. If you work in healthcare, education, public services or critical infrastructure, we have in-depth modules with the regulation and the scenarios of that sector. It is sharpest for recruitment and selection because those tools fall under Annex III, and we set out separately what that means for HR.

The right approach: start with the foundation. AI literacy of all the staff involved (general staff, management, and the specialist roles that work with the high-risk systems) is the base that all the other obligations rest on. Without literate staff, human oversight cannot work, logging cannot be properly interpreted, and a supervisory authority cannot have confidence in the organisational control.

What you can realistically do now

The deadline for the heaviest requirements is further away, the task stays the same. Those who use the time until 2027 rather than wait will be in a strong position later:

Now: inventory which AI systems are in use, including shadow AI (unapproved AI use in the organisation). Establish per role group what level of AI literacy is needed. Determine whether your organisation uses high-risk AI (look at Annex III, not at your gut feeling). The free AI Adoption Scan anonymously maps which AI chatbots your employees are using on their own. You add the AI inside existing software and vendor packages yourself. Would you rather have the inventory and risk assessment done for you? That is what an AI Adoption Assessment is for.
Now: sort out Article 4. Roll out a structured training programme for at least the three core groups: general staff, management, and specialist roles (HR, IT, and sector-specific where applicable). Make sure each training ends with an assessment and a certificate. This obligation already applies, every month of waiting is a month without a framework.
Second half of 2026: document everything. Build one central training file with certificates, dates, learning outcomes and the AI Act articles covered. Appoint a responsible person to manage the file.
Towards 2027: test your story. Could you explain to a supervisory authority what you have done and put the evidence on the table? If not, there is still time to close the gaps, provided you start now.

In closing

2 August 2026 was never the big bang it was made out to be, and the Digital Omnibus has made that even clearer. The law has been working since 2024. The heaviest requirements have moved to 2027 and 2028. What remains is this: the evidence counts. Until recently you could still say "we are working on it". More and more, the question becomes: "show what you have done." Anyone left empty-handed then risks not only a penalty, but also reputational damage that lasts far longer. We track what changes around the AI Act in the meantime every working day in the EU AI Act Monitor.

The good news: there is more time than thought to get the basics in order. That time is meant to be used, not to be spent waiting.

At AIAdopt, we have developed an audit-ready microtraining programme for this. The base package covers general staff, management, HR and IT, with sector extensions for healthcare, education, local government and critical infrastructure. Every training ends with an assessed certificate that lists the relevant AI Act articles, exactly the kind of evidence a supervisory authority will ask for.

👉 View the base package or build your own package for your organisation. Or simply get in touch.


Written by Rob Ummels in collaboration with Claude (Anthropic). Editorial responsibility: AIAdopt.

Want to know where your organisation stands?

Download our free EU AI Act Compliance Checklist or view our AI literacy training.

Want to know more?

Get in touch for a no-obligation conversation about what AIAdopt can do for your organisation.