Europe Begins Enforcing Its AI Act as Companies Face a New Regulatory Reality
On 2 August 2026 the European Commission’s AI Office, working alongside national authorities, began enforcing key provisions of the EU Artificial Intelligence Act. The date marks the start of active supervision for general-purpose AI model obligations and the introduction of new transparency requirements that affect a wide range of systems already in use across the continent.
Under the new rules, interactive AI systems such as chatbots must clearly inform users that they are interacting with artificial intelligence rather than a human. Deepfakes and other AI-generated or manipulated content must be labelled, and synthetic audio, image, video or text must carry machine-readable marks so it can be detected more easily. The Commission has already published a list of more than 180 organisations that have signed a Code of Practice on the transparency of AI-generated content.
Enforcement responsibilities are split. The AI Office oversees providers of general-purpose AI models and systems integrated into very large online platforms. National competent authorities handle other AI systems, while the European Data Protection Supervisor covers systems used by EU institutions. Fines for prohibited practices can reach €35 million or 7% of global annual turnover, whichever is higher. Other breaches, including transparency failures, carry penalties of up to €15 million or 3% of turnover.
The rules now in force build on earlier phases of the Act. Prohibited practices and AI literacy obligations have applied since February 2025, and obligations for general-purpose AI models since August 2025. The August 2026 milestone ends the grace period for many of those model obligations and brings transparency rules into full effect.
For UK-based companies selling into the EU, or operating AI systems that process data of EU residents, the change is material even after Brexit. Many British firms already treat the AI Act as a de-facto standard for cross-border compliance. Organisations that have delayed inventorying their AI systems, classifying risk levels, or implementing disclosure mechanisms now face a tighter timetable and the prospect of regulatory scrutiny.
The Commission has emphasised that effective enforcement depends on Member States properly designating and resourcing their national authorities. Early indications suggest some countries are still completing that process, which may create uneven application in the short term. Nevertheless, the direction of travel is clear: Europe has moved from rule-making to active supervision.
Businesses that treat the new transparency and model obligations as a compliance checkbox rather than an operational requirement risk both financial penalties and reputational damage. Those that embed clear disclosure, robust documentation and ongoing monitoring into their AI governance frameworks will be better placed as the regulatory regime matures.
