Guide
Prepare for EU AI Act high-risk obligations
Practical steps to prepare for EU AI Act high-risk AI system obligations before the 2 August 2026 deadline. Covers classification, conformity assessment, technical documentation, quality management, and post-market monitoring for UK businesses deploying high-risk AI in the EU.
The EU AI Act's high-risk AI system obligations take effect on 2 August 2026. If your business develops, deploys, or provides AI systems in the EU that fall within a high-risk category, you must be compliant by that date.
Compliance is not something you can achieve overnight. Conformity assessments, technical documentation, and quality management systems take months to prepare. Businesses that start now will be well positioned; those that wait risk disruption to their EU market access.
This guide sets out the practical steps to prepare, in the order you should tackle them.
Which AI systems are high-risk?
Before you can prepare, you need to know which of your AI systems fall within the high-risk classification. The Act defines specific categories — review your entire AI portfolio against this list.
Pay particular attention to AI used in recruitment and employment (CV screening, performance monitoring, interview assessment), creditworthiness (loan decisions, insurance pricing), and access to essential services (healthcare triage, benefits eligibility). These are the categories most likely to affect UK businesses operating in the EU.
If none of your AI systems fall within a high-risk category, you do not need to prepare for these obligations — but you should document your classification analysis in case a regulator asks.
Preparation steps
Work through these steps for each AI system you have classified as high-risk. Allow at least 6 to 12 months for full preparation, depending on the complexity of your systems and how mature your existing governance processes are.
Timeline context
Understanding the full implementation timeline helps you prioritise your preparation activities. Some obligations are already in force; others are approaching.
The high-risk deadline of 2 August 2026 is the most significant for most UK businesses. However, if you also provide general-purpose AI models in the EU, note that those obligations have been in force since August 2025.
The final phase in August 2027 covers AI embedded in products regulated under existing EU product safety legislation. If your AI is embedded in machinery, medical devices, toys, or vehicles, you have slightly more time — but the conformity assessment requirements for these products are typically more demanding.
Penalties for non-compliance
The financial consequences of missing the deadline are substantial.
Penalties are calculated on global turnover
What to do now
If you have not started preparing, begin with the AI system inventory and classification exercise. This is the foundation for everything else — you cannot prepare for compliance until you know which of your systems are in scope.
If you have already classified your systems, focus on the conformity assessment route and technical documentation. These are the most time-consuming elements and the most common cause of delays.
Consider engaging specialist legal and technical advisers with EU AI Act experience, particularly for third-party conformity assessments where notified body capacity may become constrained as the August 2026 deadline approaches.