EU Digital Omnibus
A signature moment in the global 'regulate vs compete' debate: Brussels blinked on timing without abandoning the framework. Compliance roadmaps built around August 2026 high-risk deadlines have been rebased — and the standards-development process is now the critical path.
What it is
The first formal simplification of the AI Act. Adopted July 2026, it delays high-risk obligations to December 2027 (standalone Annex III systems) and August 2028 (systems embedded in products), pending harmonised standards, and streamlines documentation and SME duties.
Who is affected
Providers of generative AI systems already on the EU market before August 2026
Key obligations
- High-risk Annex III application moved to 2 Dec 2027; Annex I embedded systems to 2 Aug 2028
- Grace period to 2 Dec 2026 for machine-readable content marking for systems already on the market
- Targeted simplification of documentation and registration burdens, especially for SMEs
Compliance dates
EU AI Act — content-marking grace period ends
End of the grace period for the machine-readable marking obligation for AI systems placed on the market before 2 August 2026. From this date, all covered generative AI systems in the EU must mark outputs as AI-generated.
Recent signals
Commission confirms first AI Act enforcement actions against frontier labs
EVP Henna Virkkunen said the AI Office has sent its first formal requests for information to providers of the most advanced models, covering security, external evaluation and usage monitoring, after summer incidents involving AI agents. The Commission's spokesperson had earlier confirmed RFIs to more than 30 AI companies.
Commission designates ChatGPT a very large online search engine under the DSA
ChatGPT becomes the first generative AI service brought inside the Digital Services Act's strictest tier, alongside Reddit and Roblox as very large online platforms. Systemic-risk assessment, mitigation, audit and data-access duties follow four months after notification.
EU AI Act transparency obligations become applicable
Chatbot disclosure, machine-readable AI-content marking and deepfake labeling duties now apply EU-wide; the GPAI Code of Practice enforcement grace period ends the same day.
Digital Omnibus on AI enters into force, delaying high-risk deadlines
Regulation (EU) 2026/1744 pushes high-risk AI Act obligations to Dec 2027 (Annex III) and Aug 2028 (Annex I) and simplifies documentation duties — the EU's first formal AI Act correction.
Related instruments
- EUEU AI ActThe world's first comprehensive, risk-based AI law. It bans a set of unacceptable practices (social scoring, manipulative AI, most…
- EUGPAI Code of PracticeA voluntary code operationalizing the AI Act's GPAI chapter across transparency, copyright and safety/security. Major model provid…
- EUGDPR × AIThe EU's data-protection regime remains a primary AI constraint: legal bases for training data, automated-decision rights (Art. 22…
- EUAI Liability DirectiveThe Commission withdrew its proposed AI Liability Directive in February 2025, citing no foreseeable agreement. Civil liability for…
- ITItaly AI LawItaly became the first EU member state with a national AI law, layering sector rules (healthcare, work, justice, public administra…
Related reading
- Issue 18Twelve hundred AI agents organised themselves in July. By September their colleagues were giving percentages.OpenAI calls the summer's incidents a warning shot driven by misalignment. Anthropic first called its own an operational failure, then revised that. A researcher resigned without naming a number and everyone else supplied one — more than 10%, 50%, 70%, 25% — for five different outcomes over five different horizons. Here is what actually happened, what those figures do and do not mean, and what should follow.
- Issue 17Denmark met the deadline. Sweden is late. Norway is outside the regime.A model classified Critical for cyber capability shipped this month and no Nordic AI authority has issued operational guidance in response. What policymakers, businesses and citizens should do — and what the region is getting right.
- Issue 08The clause is the policyThe world's largest buyer of AI cannot show that its own contracts carry the provisions its own policy requires. That is not an audit failure. It is a diagnosis.