Up nextNext guide
EU AI Act Quality Management System (Article 17)
Society
Society GUIDE
EU AI Act
The EU Artificial Intelligence Act is an EU regulation that sets obligations according to the intended use and risk of an AI system, alongside separate obligations for general-purpose AI model providers.
Listen to this guideAI-narrated · ~2 min
On this page2 min read
Overview
Requirements depend on the system, actor and applicable dates in the current law.
Deep Dive
The AI Act uses a risk-based structure: prohibited AI practices; high-risk AI systems; specified transparency duties for certain AI systems; and requirements for general-purpose AI models. Whether a system is high-risk depends on the conditions in Article 6 and the Act’s annexes, including intended purpose and product context. Transparency duties include informing people when they interact with an AI system in covered situations. GPAI providers have duties such as technical documentation, a copyright policy and a public summary of training content; systemic-risk GPAI providers have additional evaluation, risk-mitigation, incident-reporting and cybersecurity duties. Consult the current consolidated legal text for the exact article, actor and use case.
Real-World Implementation
The Act prohibits specified practices, including certain forms of social scoring and manipulative or exploitative uses.
A system listed as high-risk under Annex III is subject to high-risk requirements from the current statutory application date.
Providers or deployers of certain interactive systems must disclose AI interaction under the Act’s transparency provisions.
GPAI providers have baseline documentation, copyright-policy and training-content-summary duties; systemic-risk providers have additional obligations.
The Future of EU AI Act
As of the EUR-Lex consolidated text dated 27 July 2026, GPAI obligations apply from 2 August 2025; Annex III high-risk system requirements apply from 2 December 2027, and Annex I product-embedded high-risk system requirements apply from 2 August 2028. Other provisions have separate dates. Recheck the current consolidated text and Commission implementation guidance before assessing a particular obligation.
Putting it into practice
Why it matters
- Risk and safety. Catastrophic and everyday AI harms both depend on who understands the risks and who can act.
- Clearer decisions. Public and professional literacy shapes whether strong safety policy is politically possible.
- Cutting through hype. Clear explanations reduce capture by hype, lab PR, and vague ethics theater.
Watch out for
- Treating existential risk as sci-fi while capability compounds.
- Confusing surface product safety with alignment under high autonomy.
- Leaving non-English and non-expert audiences with only low-quality sources.
Next steps
- Separate product harms, misuse, and loss-of-control / misalignment risks.
- Ask what evidence would change your view on timelines and severity.
- Prefer primary sources and concrete evals over marketing claims.
- Identify one action path: career, policy, funding, or skills — not only awareness.
Keep Exploring
Free newsletter
Get the daily AI briefing
Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.
One email each weekday. Unsubscribe in one click. We never sell or share your address.
Test yourself
Take the EU AI Act quiz
Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.
Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation
Frequently asked questions
What is EU AI Act?
The EU Artificial Intelligence Act is an EU regulation that sets obligations according to the intended use and risk of an AI system, alongside separate obligations for general-purpose AI model providers. Requirements depend on the system, actor and applicable dates in the current law.
What organizing principle does the EU AI Act use to set its rules?
The Act sorts AI into risk tiers (unacceptable, high, limited, minimal) based on the use case and potential harm, not on company size or algorithm type.
Which of these is an 'unacceptable risk' practice banned outright by the Act?
Government social scoring is one of the prohibited practices, along with manipulative subliminal techniques and untargeted facial-recognition scraping.
For an AI system covered by Article 50 that interacts directly with people, such as a chatbot, what disclosure applies?
Article 50 requires providers of systems intended to interact directly with natural persons to inform them that they are interacting with an AI system, unless this is obvious from the circumstances and context.
What maximum administrative fine does the Act set for violating the prohibition on specified AI practices?
Article 99 of the current consolidated Act sets up to €35 million or, for an undertaking, 7% of worldwide annual turnover for violating Article 5 prohibitions, whichever is higher.
How does the Act treat the same AI model used in two different products?
Because the Act regulates by use case, one model can be high-risk in a hiring tool but low-risk in a different application.
Keep learning
Related guides
More guides picked for this topic