From the journal

EU Council and Parliament Agree to Simplify AI Act and Delay High-Risk Deadlines, May 2026

On 7 May 2026, the Council of the EU and European Parliament negotiators reached a provisional political agreement on the Digital Omnibus on AI Regulation. The agreement delays mandatory high-risk AI compliance dates to 2 December 2027 and 2 August 2028, extends simplified obligations to small mid-cap companies, and introduces a new ban on AI-generated non-consensual intimate imagery.

2 min read

EU Council and European Parliament negotiators reached a provisional political agreement on 7 May 2026. The instrument is the Digital Omnibus on AI Regulation, part of the EU Omnibus VII simplification package. It amends the EU AI Act (Regulation (EU) 2024/1689), which entered into force on 1 August 2024. The agreement remains provisional; formal adoption by both institutions and Official Journal publication are still pending.

The EU AI Act is the controlling regulation. Article 6 sets classification rules for high-risk AI systems. Annex III lists the covered use cases. The Omnibus agreement introduces two new fixed application dates for high-risk obligations: 2 December 2027 for stand-alone high-risk AI systems covered by Article 6(2) read with Annex III; and 2 August 2028 for high-risk AI systems that are safety components of products listed in Annex I subject to EU harmonisation legislation. The agreement also extends to small mid-cap companies the simplified technical documentation requirements previously available only to SMEs under existing AI Act provisions.

AI system providers and deployers classified as high-risk gain additional time before mandatory compliance begins. Developers at small mid-cap companies can now use the simplified technical documentation formats previously available only to SMEs. Developers seeking real-world testing conditions gain access to an EU-level regulatory sandbox alongside existing national sandboxes. A new prohibited practice is added to Article 5 of the AI Act. It bans AI systems from generating non-consensual sexual and intimate content or child sexual abuse material.

The Commission is separately consulting on draft guidelines for high-risk AI classification under Article 6(5). That consultation closes 23 June 2026. The Omnibus also resolves a duplication between the AI Act and the Machinery Regulation (EU) 2023/1230, aligning conformity assessment obligations for AI embedded in machinery. Formal adoption and Official Journal publication remain pending, so the application dates agreed here are not yet in force.

Licentium advises on EU AI Act compliance and maintains a partner network covering affected EU jurisdictions. Work we undertake includes AI Act obligation scoping for high-risk system providers and deployers, regulatory sandbox access applications, technical documentation preparation, and AI governance review for enterprise teams.

Source: Council of the EU, Artificial Intelligence: Council and Parliament agree to simplify and streamline rules, 7 May 2026

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.