A focused preparation path for UK businesses affected by the EU AI Act. Understand the four risk tiers, check which deadlines have already passed, classify your AI systems, and prepare for high-risk obligations before the August 2026 deadline.
Running a BusinessUpdated 15 September 2026
references 3 guides
Does the EU AI Act apply to your business?
If your business places AI systems on the EU market, provides AI-powered services to EU customers, or develops AI models used by EU deployers, the EU AI Act applies to you — regardless of where your business is based. The Act has extraterritorial scope, meaning UK businesses cannot ignore it simply because the UK is no longer an EU member state.
This learning path takes you through the key concepts, what is already in force, and what you need to do before the next major deadline in August 2026.
Understand the full picture
Before diving into specific compliance tasks, read the comprehensive guide to understand how the EU AI Act works, how it interacts with UK domestic regulation, and the dual compliance challenge for UK businesses operating in both markets.
The complete explainer covering risk classification, extraterritorial scope, implementation timeline, high-risk obligations, GPAI rules, penalties, and how EU requirements sit alongside UK sector regulation.
Classify your AI systems and prepare for high-risk obligations
The August 2026 deadline applies to high-risk AI systems used in employment, creditworthiness, education, essential services, law enforcement, and migration. If any of your AI systems fall within these categories and you deploy them in the EU, you need conformity assessments, technical documentation, and quality management systems in place.
Practical preparation steps: classify your AI systems, determine your conformity assessment route, prepare technical documentation, implement quality management, and set up post-market monitoring.
GPAI model obligations for UK AI developers
If your business develops general-purpose AI models — including foundation models and large language models — and those models are used by deployers in the EU, you have had obligations since August 2025. This includes models made available through APIs, licensing, or open-source distribution where the model is used commercially.
Your next steps
You now understand the EU AI Act framework, what is already in force, and what is coming next. To move from understanding to action:
Inventory every AI system your business provides or deploys in the EU
Classify each system against the four risk tiers
For high-risk systems, begin conformity assessment preparation now
For GPAI models, verify your documentation and training content summaries are complete
Consider how EU requirements interact with your existing UK regulatory obligations
Verify your business meets its AI compliance obligations across data protection, equality, transparency, oversight, and record-keeping — covering both UK and EU requirements.