4
3
2
1
1 AUGUST 2024
Entry into Force
The Al Act will enter into force.
1 MAY 2025
General Purpose Al
Application of codes of practice for General Purpose Al systems.
Unacceptable Al
Prohibitions on unacceptable risk Al systems (manipulation, social scoring systems, and biometric categorization) will become applicable as well as the general provisions.
1 FEBRUARY 2025
Competant Authorities
• Obligations on providers of General Purpose Al models will go into effect.
• Member states must appoint competent authorities to oversee the Al Act.
• The Commission will conduct an annual review of the list of prohibited Al practices.
1 AUGUST 2025
AI Act Implementation Timeline
The Commission will issue an implementing act on post-market monitoring requirements.
1 FEBRUARY 2026
Monitoring
5
Member state authorities must have established at least one operational Al regulatory sandbox.
a
Penalties
Member states must have implemented rules on penalties, including administrative fines.
b
1 AUGUST 2026
• Obligations on high-risk Al systems listed in Annex Ill become applicable.
• This includes Al systems used in biometrics, critical infrastructure, education, employment, access to essential public services, law enforcement, immigration, and administration of justice.
• The Commission will review, and potentially amend, the list of highrisk Al systems.
High Risk Al
6
Obligations for high-risk Al systems that are not prescribed in Annex Ill but are intended to be used as a safety component of a product, or the Al is itself a product, and the product is required to undergo a third-party conformity assessment under existing specifc EU laws (e.g., toys, radio equipment, in vitro diagnostic medical devices, civil aviation security, agricultural vehicles) will become applicable.
Third Party Conformity
1 AUGUST 2027
7
2030
Obligations will go into effect for certain Al systems that are components of the large-scale IT systems established by EU law in the areas of freedom, security and justice, such as the Schengen Information System.
Larger IT Systems
8
Member state authorities must have established at least one operational Al regulatory sandbox.
Sandboxes
1
1