EU AI Act Guides
All articles in the EU AI Act category
Best EU AI Act compliance software 2026: A buyer's guide
Updated October 2026. EU AI Act compliance software splits into four categories: GRC automation, enterprise AI governance, LLM observability, and runtime control planes. How to choose, where to buy and what it costs for GDPR and AI Act work, with vendor claims checked in October 2026 and an evaluation worksheet.
EN 18286 cited in the Official Journal: what changes for Article 17
Implementing Decision (EU) 2026/2274 cites EN 18286:2026, the first harmonised AI Act standard. What it changes for the Article 17 QMS, and what it leaves open.
ACPR as AI market surveillance authority for credit and insurance from December 2027
The ACPR is set to supervise high-risk credit and insurance AI from 2 Dec 2027. The designation, the fairness consultation, and the CNIL note on agentic AI.
EU AI Act standards: preparing agent controls and evidence
Prepare agent risk controls, cybersecurity tests and decision records for EN 18286, prEN 18228, prEN 18282 and prEN 18229-1.
EU AI Act Fines: Article 99 Penalties by Violation and Liable Role
EU AI Act fines under Article 99, mapped by violation, liable role, turnover cap, SME rule, 2026 amendment, and enforcement date.
EU AI Act Article 12: Logging Requirements for AI Agents
Map EU AI Act Articles 12 and 19 to an AI agent audit-trail specification covering events, identities, decisions, retention, integrity, and replay tests.
EU AI Act Article 14: Human Oversight for AI Agents
Implement Article 14 human oversight for AI agents with risk-based approvals, override and safe-stop controls, qualified reviewers, and defensible evidence.
EU AI Act Article 26: Deployer Obligations and a Runtime Checklist
A current guide to Article 26 duties for deployers of high-risk AI systems: oversight, input data, monitoring, logs, notices, incidents, and operational evidence.
EU AI Act after 2 August 2026: what applies now and what moved
Status at October 2026: Article 50 and GPAI fines apply since 2 August 2026; high-risk duties moved to 2 December 2027 and 2 August 2028. Checklists by role.
EU AI Act Omnibus Adopted: The New Deadlines for 2027 and 2028
The Digital Omnibus on AI is adopted. Annex III high-risk obligations apply from 2 December 2027, Annex I from 2 August 2028, and Article 50 transparency from 2 August 2026.
MAS SAFR, the EU AI Act, and FINMA: Regulators Converge on Runtime Evidence
MAS's SAFR framework, the EU AI Act, and FINMA Guidance 08/2024 converge on one requirement: AI governance evidence produced at the moment of action.
FRIA for AI Credit Scoring: A Complete Worked Example
A complete, all-six-sections Article 27 FRIA for an AI credit-scoring system at a bank: risk register, GDPR Article 22, SCHUFA, and the fraud carve-out.
Insurance FRIA Template: Life & Health Pricing AI (Art 27)
A worked FRIA for an insurer deploying life and health pricing AI under Annex III 5(c). In/out scope table, Article 9 health-data depth, and a risk register.
What Is prEN 18283? The Draft AI Bias-Management Standard
prEN 18283 is the draft CEN-CENELEC standard for managing bias in AI systems. What it covers, its Working Draft status, and how it operationalizes Article 10.
JTC 21 Standards Tracker: CEN-CENELEC AI Act Deliverables
Tracker of CEN-CENELEC JTC 21 AI Act standards: EN 18286 cited in the Official Journal, prEN 18xxx stages, sources, and a dated change log.
FRIA & CNIL: France Guide to the EU AI Act Article 27
How French deployers run an Article 27 FRIA: reuse your CNIL AIPD/DPIA, apply CNIL AI guidance, find France market-surveillance authorities, with an example.
ACPR AI Governance for French Banks: Credit, AML and DORA
How the ACPR governs AI in French banks and insurers: its four evaluation criteria, AML-CFT supervision, and how it stacks with the EU AI Act FRIA and DORA.
DPIA for AI Systems: A GDPR Article 35 Template That Lines Up With Your FRIA
When a DPIA is mandatory for AI under GDPR Article 35, the Article 35(7) content required, and how it overlaps with the EU AI Act Article 27 FRIA in one evidence pack.
EU AI Act Registration Guide: Article 49, Article 71, and Annex VIII
A practical guide to EU AI Act registration for high-risk AI systems: who must register, what goes into the EU database, what Annex VIII requires, and how to prepare evidence.
EU AI Act Article 50 Checklist for Chatbots, Copilots, and AI Agents
Article 50 applies since 2 August 2026. A checklist for chatbots, copilots and agents: disclosure, labels, marking (grace period to 2 December 2026), Code of Practice, evidence.
EU AI Act Article 10, prEN 18283, and Why Bias Scenarios Matter
Article 10 requires more than a data-quality checklist. A practical guide to bias profiles, relevant-group analysis, bias scenarios, and the operating model emerging around prEN 18283.
OWASP Agentic AI Top 10 × EU AI Act: The Complete Compliance Crosswalk
The definitive mapping of all 10 OWASP Agentic Security Initiative risks to specific EU AI Act articles. Includes the master crosswalk table, a 7-control framework, downloadable PDF workbook + checklist, and the December 2, 2027 compliance deadline.
AI Agent Post-Market Monitoring Plan | Article 72
Build an Article 72 post-market monitoring plan for AI agents: signals, owners, evidence, incidents, change triggers, and provider-deployer inputs.
EU AI Act Article 17 Checklist: What Providers Must Implement Before December 2027
An execution-ready Article 17 checklist for high-risk AI providers ahead of the 2 December 2027 date: scoping, control mapping, lifecycle controls, post-market operations, and audit evidence design.
France and prEN 18286: What the National Debate Means for EU Providers
A neutral analysis of the French mirror-committee debate on prEN 18286 and what it signals for SME proportionality, standards quality, and implementation strategy across EU member states.
EU AI Act Standards Ecosystem: EN 18286 and Its Companion Standards
Map EN 18286:2026 to EU AI Act standards for risk, trustworthiness, cybersecurity, data governance, and conformity assessment.
Article 17 Mapping in EN 18286: Coverage, Gaps, and Audit Implications
How to read EN 18286 Annex ZA mapping, connect Article 17 to related duties, and build defensible quality-management evidence.
EN 18286 vs ISO 9001 vs ISO/IEC 42001: What Changes
Compare EN 18286:2026, ISO 9001, and ISO/IEC 42001 for EU AI Act Article 17 scope, management-system reuse, evidence, and assurance.
EU AI Act Standards Timeline: What to Do as Deadlines Evolve
EU AI Act deadlines against the standards track: EN 18286 cited 14 October 2026, companion drafts after enquiry, request expiry 28 February 2027.
What Is EN 18286? The Harmonised Standard for the Article 17 QMS
EN 18286:2026, the first harmonised EU AI Act standard, cited in the Official Journal on 14 October 2026: Article 17 QMS scope, legal effect, ISO overlap, next steps.
EU AI Act for SaaS Companies: Provider, Deployer, or Both?
Comprehensive compliance guide for SaaS companies with AI features. Covers provider vs. deployer classification, high-risk obligations, CE marking, contract requirements, and practical strategies for the phased EU AI Act rollout.
FRIA Template: Fundamental Rights Impact Assessment for EU AI Act Compliance
Free FRIA template and step-by-step guide for the Fundamental Rights Impact Assessment required by Article 27 of the EU AI Act, with worked examples for credit scoring, insurance, France and AML, and one risk traced from harm to evidence.
Annex IV Documentation Guide
How to create Annex IV technical documentation for high-risk AI systems: required sections, evidence types, and tips for building documentation that auditors will accept.
Classifying High-Risk AI Under the EU AI Act
The definitive classification methodology: two pathways to high-risk status, the Article 6(3) exception framework, the profiling override that eliminates all exceptions, and a step-by-step audit-ready classification process.
EU AI Act Requirements: What Compliance Officers Need to Know in 2026
The definitive guide for compliance officers: phased enforcement timelines, high-risk classifications, Annex IV documentation, human oversight requirements, penalty structures, and practical implementation strategies.