EU postpones high‑risk AI Act deadline to December 2027

The European Union has moved the enforcement date for the high‑risk AI obligations in Annex III of the AI Act from 2 August 2026 to 2 December 2027. The change, agreed as part of the Digital Omnibus, keeps the original fines – up to €15 million or 3 % of global turnover – for non‑compliance.

Industry analysts note that the original deadline gave firms a concrete timetable for building compliance systems, such as the mandatory audit‑trail logging required by Article 12. The shift may lower the urgency of those projects, but the underlying risk remains, with recent research showing that roughly 78 % of organisations have data‑governance restrictions yet 71 % report widespread “shadow AI” use, and only about 24 % have formal AI policies in place.

Compliance teams are advised to implement runtime governance gates that record decisions, data inputs and policy checks, regardless of the deadline change, to meet both EU requirements and broader security standards.