From the journal

EU Parliament and Council Reach Provisional Agreement on AI Act Simplification, 7 May 2026

The European Parliament and Council reached a provisional political agreement on 7 May 2026 to streamline Regulation 2024/1689 laying down harmonised rules on artificial intelligence. The agreement, part of the EU Omnibus VII simplification package, extends application deadlines for high-risk AI systems, broadens exemptions to small mid-cap companies, and bans AI systems that generate non-consensual intimate images. Formal adoption by both institutions is expected before 2 August 2026.

3 min read

The European Parliament and the Council of the EU reached a provisional political agreement on 7 May 2026 on a proposal to streamline rules under Regulation 2024/1689 laying down harmonised rules on artificial intelligence, the AI Act. The proposal forms part of the Omnibus VII legislative simplification package. Formal adoption by both institutions is required before the text becomes law. Co-legislators intend to complete adoption before 2 August 2026, when existing high-risk AI system obligations take effect under the current text.

The agreement amends Regulation 2024/1689. The new application date for stand-alone high-risk AI systems is 2 December 2027; for high-risk AI systems embedded in products, 2 August 2028. Regulatory exemptions available to small and medium-sized enterprises are extended to small mid-cap companies. Permitted processing of sensitive personal data for bias detection and mitigation is broadened. The powers of the European AI Office are reinforced and governance fragmentation across national competent authorities is reduced. A new prohibition under Article 5 covers AI systems that generate child sexual abuse material or non-consensual intimate images of identifiable persons. The deadline for establishing AI regulatory sandboxes at national level is extended to 2 August 2027.

Providers of stand-alone high-risk AI systems gain a compliance window extended to 2 December 2027 before mandatory conformity assessment and registration obligations apply. Manufacturers embedding high-risk AI in regulated products gain until 2 August 2028. Small mid-cap companies gain access to SME conformity assessment exemptions, reducing their pre-market obligations. Providers of AI systems capable of generating non-consensual intimate imagery must withdraw or reconfigure those systems regardless of deployment model. The European AI Office's reinforced authority directly affects providers of general-purpose AI models under Chapter V of the AI Act.

The provisional agreement is not yet law and may change before formal adoption. Obligations on general-purpose AI model providers under Chapter V of the AI Act are not addressed by this proposal and remain on their existing schedule. Member states that have already begun establishing national AI regulatory sandboxes should assess how the new August 2027 deadline applies to their implementation steps.

Licentium advises operators, providers, importers, and deployers of AI systems on AI Act obligations and compliance readiness. We may be able to assist directly or identify appropriate support through our partner network. Work we undertake includes AI Act conformity assessment support, high-risk system classification, general-purpose AI model compliance under Chapter V, provider obligations under Article 16, and AI governance documentation for regulated sectors.

Source: European Council, Press Release 299/26, Artificial Intelligence: Council and Parliament agree to simplify and streamline rules, 7 May 2026

AI Regulatory

More from the journal

See all
Illia Prokopiev

From Cloud Concentration to AI Dependence: The UK’s Critical Third Parties Regime

The United Kingdom now directly oversees designated technology suppliers whose service failures could threaten financial stability. The question is whether the first cloud designations show a legal expansion toward AI-model providers, and what the present regime requires. This analysis assumes the quoted statement concerns the UK financial-services Critical Third Parties regime and assesses the law through 14 July 2026.

Alberta Regulated iGaming Market Launched on 13 July 2026 with 22 Operators

Alberta's regulated private iGaming market launched on 13 July 2026, making Alberta the second Canadian province to permit private online gambling operators after Ontario. The Alberta Gaming, Liquor and Cannabis Commission serves as market regulator and the Alberta iGaming Corporation oversees commercial operations and operator contracts. Twenty-two operator sites went live on day one, including FanDuel, DraftKings, BetMGM, and BetRivers. Operators must fully launch or exit the Alberta market by 13 October 2026.

European Commission Presents Cybersecurity and AI Action Plan on 7 July 2026

On 7 July 2026, the European Commission presented an Action Plan on Cybersecurity and Artificial Intelligence. The plan directs the Commission and ENISA to evaluate advanced AI models before they reach the EU market, establish a secure testing platform for critical-sector organisations, and launch an EU Grand Challenge on AI-powered cybersecurity solutions. It operates alongside the AI Act, NIS2 Directive, DORA, Cyber Resilience Act, and Cyber Solidarity Act, and introduces no new directly binding obligations.