The European Commission, the European Parliament, and the EU Council have reached a political agreement on the concrete application of planned regulations concerning Artificial Intelligence (AI). This consensus includes setting new deadlines for implementing rules governing so-called “high-risk AI systems” alongside a push for tougher measures against “deepfakes”.
Under the newly established framework, mandatory rules for AI systems deployed in sensitive sectors-such as biometrics, critical infrastructure, education, employment, migration, asylum, and border controls-will take effect on December 2, 2027. For AI systems embedded in consumer goods like toys or elevators, the regulations will be applied later, starting August 2, 2028. Additionally, some privileges previously granted to small and medium-sized enterprises (SMEs) are being extended to smaller “midcap” companies, defining them as those already valued in the billions on the stock exchange.
In parallel, the rules have been broadened to enforce strict content limitations. Such prohibitions forbid AI systems from generating non-consensual sexually explicit and intimate content, material related to child sexual abuse, as well as dedicated AI apps used for “nudification”.
The final procedural step remains for the European Parliament and the Council to formally adopt this political agreement; this action is typically viewed as a mere formality.
