EU AI Act Summary: What UK Businesses Need to Know in 2026

The EU AI Act is the world’s first comprehensive legal framework governing artificial intelligence. It was passed by the European Union in 2024 and comes into full enforcement on 2 August 2026. Despite the UK having left the EU, the Act applies to many UK businesses — and the consequences of non-compliance are serious.

This is a plain English summary of everything you need to know.

The EU AI Act (Regulation 2024/1689) is a binding legal framework that regulates how AI systems are developed, deployed, and used. It classifies AI systems into risk tiers — from unacceptable risk (banned outright) to high risk (heavily regulated) to limited and minimal risk (lighter obligations).

The Act is designed to ensure AI used in the EU is safe, transparent, and accountable. It covers everything from AI used in hiring and healthcare to chatbots and content generation tools.

Yes — if any of the following apply to you, the EU AI Act is likely relevant:

• You have customers, users, or employees in the EU or EEA.
• Your AI system’s outputs are used inside the EU.
• You place AI systems on the EU market.

In practice, this captures the majority of UK SMEs that use AI tools like ChatGPT, automated hiring software, AI marketing tools, or AI-powered customer service in any capacity that touches EU individuals.

• 2 February 2025 — Prohibited AI practices banned.
• 2 August 2025 — Rules for General Purpose AI models come into force.
• 2 August 2026 — Full enforcement begins. Fines of up to €35 million or 7% of global turnover apply from this date.

Depending on how you use AI, your obligations may include:

• An AI Acceptable Use Policy documenting how your business uses AI.
• AI Literacy training records for staff who work with AI systems.
• Transparency disclosures when AI interacts with or makes decisions about people.
• A Human Oversight procedure for AI-assisted decisions.
• A Fundamental Rights Impact Assessment if you operate high-risk AI (hiring, healthcare, finance, education).
• Vendor AI Risk Registers documenting the third-party AI tools your business uses.

These apply to businesses of all sizes, including SMEs.

• Up to €35 million or 7% of global turnover for prohibited AI practices.
• Up to €15 million or 3% of global turnover for non-compliance with obligations.
• Up to €7.5 million or 1.5% of global turnover for providing incorrect information to regulators.

The first step is understanding your risk level. Not every business has the same obligations — it depends on what AI you use, how you use it, and who it affects.

Start with our free compliance risk check at clausely.co.uk/compliance-checker to find out exactly where you stand in under two minutes.

If you already know you need to get compliant, our tailored compliance packs are generated within the hour — from £399. See our packs at clausely.co.uk/pricing.