The EU AI Act - Part 2: What's Changed, What Applies Now, What To Do Next

Webinar Overview

The EU AI Act is already in force and its obligations are landing in stages, not all at once. Some duties, like bans on prohibited AI practices and transparency requirements for AI-generated content already apply or take effect later in 2026. Others, including the high-risk system obligations under Annex III, were recently postponed from August 2026 to December 2027 following the EU's Digital Omnibus agreement. That extra runway is useful, but it isn't a reason to wait: classification, documentation, and governance work takes months to do properly, and non-compliance can still expose organisations to fines of up to €35 million or 7% of global turnover.

Part 1 covered the foundations of the EU AI Act. Part 2 builds on that with the practical steps SMEs need to take right now, including:

• Whether your organisation is a provider or a deployer under the Act, and what that means for your obligations

• How to identify high-risk AI systems, what documentation and governance they require, and how to prepare for conformity assessments

• How the AI Act interacts with GDPR, and where the gaps and tensions sit

• A concrete action plan - not just a theoretical overview

What You Will Gain

• A clear picture of where your organisation currently sits on the AI Act compliance journey

• Clarity on when key obligations come into force, including the impact of the recently agreed changes to the Act's timeline at EU level

• Practical understanding of the high-risk classification process and what triggers enhanced obligations

• Confidence in spotting which AI tools already in use may need immediate attention

• Guidance on how to conduct or commission an AI risk assessment

• Awareness of the overlap between the AI Act and GDPR, including implications for DPIAs

Two practical takeaways upon request following this session:

1. A Risk Classification Decision Tree

2. An AI Act vs GDPR Gap Analysis Template

By the End of This Session, You'll Be Able To

• Identify where your organisation sits in the AI Act's role framework (provider or deployer) and what obligations apply to each

• Classify AI systems according to the Act's risk tiers and determine whether systems in use are likely to be high-risk

Who Should Watch

SME leaders, compliance and legal teams, and anyone responsible for AI governance or data protection who needs a practical not just theoretical path to compliance.