Gids voor de samenleving

Does the EU AI Act Apply to Non-EU Companies?

The EU AI Act can apply to providers outside the EU that place an AI system or general-purpose model on the EU market, and to non-EU providers or deployers when system output is used in the Union.

  • 3 minuten lezen
  • Laatst bijgewerkt
Op deze pagina3 minuten lezen
  1. Overzicht
  2. Diepe duik
  3. Strategische impact
  4. The Future of Does the EU AI Act Apply to Non-EU Companies?
  5. Implementatie in de echte wereld
  6. Risico's en vangrails
  7. Implementatie routekaart
  8. Blijf verkennen
  9. Veelgestelde vragen

Overzicht

Scope depends on the actor, activity, and legal exceptions.

Diepe duik

Article 2 sets out who and what the AI Act covers. It applies to providers placing AI systems on the market or putting them into service in the Union, and to providers placing general-purpose AI models on the Union market, regardless of where those providers are established. It applies to deployers established or located in the Union. It can also apply to providers and deployers established in a third country when the output produced by the system is used in the Union. The output-use rule is not a simple website-access test. A non-EU service may be accessible from Europe without every interaction necessarily meeting the relevant scope condition; facts about the provider, deployment, system output, and use matter. Conversely, routing processing through servers outside Europe does not automatically avoid scope when output is used in the Union. Importers, distributors, product manufacturers placing a system under their own name, and authorized representatives have separate listed roles. A company can hold more than one role depending on its conduct. Article 2 includes exceptions, including for certain systems and activities related to military, defence, or national-security purposes, personal non-professional use by deployers, and specific research and development circumstances. These exceptions are conditioned and should not be generalized. The Regulation also has special rules for public authorities in third countries using systems under international law-enforcement or judicial-cooperation arrangements where adequate safeguards are provided. A non-EU provider should map the product’s market entry and intended use, identify its role under the Act, determine whether an EU authorized representative is required, and assess applicable duties by system or model category. Keep evidence of where output is used and which entity controls deployment. Get advice for complex cross-border arrangements; geography alone is not a complete scope analysis.

Strategische impact

Risico en veiligheid

Catastrofale en alledaagse schade door AI hangt af van wie de risico's begrijpt en wie kan handelen.

Duidelijkere beslissingen

Publieke en professionele geletterdheid bepalen of een krachtig veiligheidsbeleid politiek mogelijk is.

Door de hype heen snijden

Duidelijke verklaringen verminderen de kans op hypes, laboratorium-PR en vaag ethisch theater.

The Future of Does the EU AI Act Apply to Non-EU Companies?

The Act’s general application began on 2 August 2026. Under the AI Omnibus now in force, Annex III high-risk system rules apply from 2 December 2027, while Annex I product-embedded high-risk system rules apply from 2 August 2028. The AI Office, Commission guidance, and courts may clarify cross-border application. International businesses should maintain a current role matrix and check the consolidated Regulation, amendments, and national implementation rather than rely on a single country-of-incorporation test. Reassess scope when a product launch, rebrand, deployment location, or downstream use changes. Build periodic review into procurement, legal updates, and release management. Recheck at market entry.

Implementatie in de echte wereld

A U.S. model provider places a GPAI model on the EU market and evaluates its provider duties despite having no EU office.

A non-EU analytics vendor checks whether its output is used in an EU hiring workflow.

A European reseller confirms whether it acts as importer or distributor for an AI system.

A company that sells a system under its own brand checks whether it becomes the provider.

Risico's en vangrails

  • Existentieel risico behandelen als sciencefiction, terwijl capaciteiten zich vermenigvuldigen.

  • De veiligheid van oppervlakteproducten verwarren met uitlijning onder hoge autonomie.

  • Hierdoor blijven niet-Engelstalige en niet-deskundige doelgroepen alleen bronnen van lage kwaliteit over.

Implementatie routekaart

  1. Afzonderlijke risico's voor productschade, misbruik en verlies van controle/verkeerde uitlijning.

  2. Vraag welk bewijs uw kijk op tijdlijnen en ernst zou veranderen.

  3. Geef de voorkeur aan primaire bronnen en concrete evaluaties boven marketingclaims.

  4. Identificeer één actiepad: carrière, beleid, financiering of vaardigheden – niet alleen bewustwording.

Blijf verkennen

Free newsletter

Get the daily AI briefing

Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.

One email each weekday. Unsubscribe in one click. We never sell or share your address.

Test yourself

Take the Does the EU AI Act Apply to Non-EU Companies? quiz

Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.

Quiz starten

Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation

Veelgestelde vragen

Does the EU AI Act Apply to Non-EU Companies?

The EU AI Act can apply to providers outside the EU that place an AI system or general-purpose model on the EU market, and to non-EU providers or deployers when system output is used in the Union. Scope depends on the actor, activity, and legal exceptions.

Can an AI provider outside the EU fall within Article 2?

The Act applies to specified providers regardless of establishment location.

When can a non-EU provider or deployer be covered by the output rule?

Article 2 includes third-country actors where output is used in the Union.

Does server location alone decide territorial scope?

The Regulation’s scope provisions do not reduce to server geography.

Which role can a company take by placing a system under its own name?

The Act lists product manufacturers placing a system under their own name as potentially responsible providers.

Does a European reseller have no duties because it did not train the model?

The Act lists multiple operator roles beyond model training.