From the journal

EU Council Formally Adopts AI Omnibus, Extending High-Risk AI Deadlines to December 2027

On 29 June 2026, the Council of the European Union formally adopted the AI Omnibus regulation, completing co-legislative passage following the European Parliament's plenary vote on 16 June 2026. The regulation amends Regulation (EU) 2024/1689 to extend compliance deadlines for high-risk AI systems, introduce new prohibited AI practices, and establish a transitional watermarking period for systems already on the market. The act enters into force on the third day after publication in the Official Journal.

3 min read

On 29 June 2026, the Council of the European Union formally adopted the AI Omnibus regulation, completing the co-legislative process after the European Parliament's plenary vote on 16 June 2026. The regulation forms part of the EU Digital Omnibus legislative simplification package. It amends Regulation (EU) 2024/1689, the EU AI Act, and enters into force on the third day following publication in the Official Journal of the European Union.

The AI Omnibus extends the application dates for obligations on providers and deployers of high-risk AI systems under Articles 9 to 49 of Regulation (EU) 2024/1689. Stand-alone high-risk AI systems listed in Annex III must now comply by 2 December 2027, extended from August 2026. High-risk AI systems embedded in regulated products listed in Annex II must comply by 2 August 2028. The Omnibus adds two new prohibited practices to Article 5: AI systems generating non-consensual intimate imagery and AI systems generating child sexual abuse material are now explicitly banned. For AI systems placed on the market before 2 August 2026, the machine-readable marking obligation under Article 50(2) applies from 2 December 2026. Systems entering the market on or after 2 August 2026 must mark from placement.

Providers and deployers of high-risk AI systems in financial services, healthcare, employment, and education gain additional time to implement conformity assessments, technical documentation, quality management systems, and human oversight measures required under Articles 9 to 49. General-purpose AI model providers remain subject to Article 53 obligations and the ongoing Code of Practice process, which the Omnibus does not affect. AI deployers covered by Article 50 transparency requirements, including human interaction disclosure and synthetic content marking, remain on the original 2 August 2026 schedule for new systems.

The Omnibus delays the obligation for national competent authorities to establish AI regulatory sandboxes under Article 57 from 2 August 2026 to 2 August 2027. The precise entry-into-force date depends on the Official Journal publication date, which was not confirmed as of 29 June 2026. Open questions remain about the timeline for implementing measures under the extended deadlines and whether further amendments will follow through subsequent Digital Omnibus packages.

We may advise on EU AI Act compliance and have a partner network covering EU regulatory affairs and AI governance advisory. Contact us to discuss the impact of the Omnibus deadline changes on your compliance programme. Work we undertake includes EU AI Act high-risk system classification, conformity assessment support, GPAI model obligations analysis, Article 50 transparency implementation, and AI governance policy design.

Source: Council of the European Union, Artificial intelligence: Council gives final green light to simplify and streamline rules, 29 June 2026

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.