From the journal

EU AI Act Omnibus Postpones High-Risk System Requirements to December 2027 and August 2028

The EU AI Act Omnibus Regulation entered into force in July 2026, deferring the application of high-risk AI system requirements from August 2026 to 2 December 2027 for standalone systems and 2 August 2028 for AI systems embedded in products, following the Council's final approval on 29 June 2026.

3 min read

The AI Act Omnibus Regulation entered into force in July 2026 following the Council of the European Union's final approval on 29 June 2026. The Regulation amends Regulation (EU) 2024/1689 (the AI Act) by deferring the application of Chapter III obligations for high-risk AI systems. The Commission first proposed the deferral in November 2025 under the Digital Omnibus legislative package, citing delays in harmonised standards development and the incomplete establishment of national competent authorities across member states.

The amended AI Act postpones the application dates for high-risk AI system obligations established by the transitional provisions of Regulation (EU) 2024/1689. For standalone high-risk AI systems listed in Annex III, covering areas including biometrics, critical infrastructure management, education, employment, migration, asylum, and border control, obligations now apply from 2 December 2027. For high-risk AI systems embedded in products subject to EU product safety legislation (Annex II systems), obligations apply from 2 August 2028. The Omnibus also extends the deadline for national competent authorities to establish AI regulatory sandboxes to 2 August 2027.

Developers, deployers, and importers of high-risk AI systems gain additional time to prepare conformity assessments, build quality management systems under Article 17, finalise technical documentation under Article 11, and register systems in the EU database under Article 71. Organisations that aligned compliance timelines to August 2026 should revise their internal programs. The deferral does not affect the transparency obligations under Article 50, which entered into application on 2 August 2026, nor the general-purpose AI model obligations enforceable from the same date.

The Commission stated the postponement was warranted by delays in harmonised standards preparation under the mandate issued to CEN/CENELEC and the incomplete readiness of national market surveillance infrastructure. Whether the Commission will issue alternative common specifications under Article 40(3) before 2 December 2027 or will rely on voluntary harmonised standards remains open. Providers of high-risk AI systems should monitor the Commission's standardisation workplan and guidance from the European AI Office for progress on technical specifications required for conformity assessment.

Licentium advises businesses on EU AI Act compliance across all risk categories, including classification under Annexes II and III, conformity assessment preparation, technical documentation review, and engagement with national competent authorities. Work we undertake includes EU AI Act advisory, high-risk AI system classification, GPAI model compliance, conformity assessment support, AI regulatory sandbox applications, and EU digital regulation advisory.

Source: Council of the European Union, Artificial Intelligence: Council gives final green light to simplify and streamline rules, 29 June 2026

AI Regulatory

More from the journal

See all

Hong Kong SFC and FSTB Conclude Consultation on Virtual Asset Advisory and Management Regimes, 26 May 2026

On 26 May 2026, Hong Kong's Securities and Futures Commission and Financial Services and the Treasury Bureau published consultation conclusions on proposed licensing regimes for virtual asset advisory and management service providers. The regimes apply the same business, same risks, same rules principle and align SFC licensing requirements with those for securities advisory and management businesses. A bill implementing the regimes is planned for introduction into the Legislative Council in 2026.

OCC Grants Circle Final Charter for First National Digital Currency Bank N.A., 9 July 2026

The Office of the Comptroller of the Currency granted final approval on 9 July 2026 for Circle Internet Group to establish First National Digital Currency Bank, N.A., operating as Circle National Trust. The bank opened 24 July 2026 under direct OCC oversight and will manage USDC reserves on a directed basis, act as collateral trustee for USDC holders, and provide digital asset custody services to Circle affiliates.

Manitoba Enacts Public Sector AI and Cybersecurity Governance Act June 2026

On 1 June 2026, Bill 51, The Public Sector Artificial Intelligence and Cybersecurity Governance Act (S.M. 2026, c. 43), received Royal Assent in Manitoba, Canada. The Act mandates transparency, accountability structures, and cybersecurity incident reporting for public sector entities using AI systems. Substantive obligations take effect only through regulations yet to be made.