If you’ve been quietly worrying about the EU AI Act, you may have breathed a sigh of relief this summer. The toughest deadlines moved.
With more than a decade of helping businesses deal with technology and change behind it, Digitus Consulting’s view is that a deadline moving back is rarely a good reason to stop preparing. So here’s what actually changed, and what is worth doing with the extra time.
What Actually Changed
The EU’s Digital Omnibus on AI came into force on 27 July 2026. It postponed the rules for so-called high-risk AI systems. For stand-alone systems, which includes AI used for recruitment, credit scoring and education, the new date is 2 December 2027. For AI built into regulated products, it’s 2 August 2028.
Two things are worth noticing. First, only the high-risk rules were delayed. The AI Act itself hasn’t gone anywhere, and parts of it already apply. Second, if you use AI to screen applicants or monitor employees, you’re closer to the high-risk category than you might think.
The Real Problem Is Usually Visibility
Experience shows that the hard part usually isn’t the regulation. It’s knowing what you’re actually using.
Most small businesses have AI in more places than anyone has written down. A chatbot on the website. A screening feature in the recruitment software. A writing assistant someone signed up for with a personal account. None of that is necessarily wrong, but if nobody has a list, nobody can manage it.
Four Questions to Start With
You don’t need a consultant to begin. Sit down with your team and answer these:
- Where are we using AI today, officially and unofficially?
- Who is responsible for each tool?
- What company or customer data goes into it?
- What happens when it gets something wrong?
If you can answer all four for every tool, you’re in a far stronger position than if you can’t.
Keep It Practical
Last month’s post looked at turning AI into measurable business value. This is the other side of the same coin. The clarity that helps you measure results also helps you manage risk.
For a small or medium-sized business, that doesn’t mean a 50-page policy. A one-page overview, a named owner for each tool and a habit of asking “why are we buying this?” will take you a long way.
One honest note: this article is technology and business advice, not legal advice. For the legal detail on your own situation, speak to your legal adviser.
Want a clearer view of where AI fits in your business?
Digitus Consulting’s Unternehmensberatung service starts with a straightforward conversation about your goals and your current set-up. Get in touch to start that conversation.
