AI that is a safety component of products covered by EU product legislation listed in Annex I (machinery, medical devices, toys, lifts, vehicles, etc.) must meet the AI Act's high-risk requirements as part of the product's CE conformity assessment.
Who is affected
Manufacturers and importers of physical products with AI safety functions, and their software suppliers.
Sizes: micro, small, medium, large · Sectors: Hardware / electronics, Manufacturing, Health, Transport / logistics · Applies if: We use or build AI systems; We make connected hardware / devices
What to do
Identify products where AI performs a safety function. Plan to integrate AI Act requirements (risk management, data governance, logging, human oversight) into the product's existing conformity assessment and technical file. Align with notified bodies early because assessments will be combined.
Penalty
Up to €15M or 3% of worldwide turnover (SMEs: lower of the two)
In force since 2025-02-02; the Digital Omnibus on AI (Reg. 2026/1744, in force 2026-07-27) softened Art. 4 to a duty to support AI literacy rather than guarantee it
Any business that develops or uses AI systems in the EU, including ordinary firms using AI chatbots, recruiting tools or analytics.
Commission (AI Office) enforcement powers only from 2026-08-02; models placed on the market before 2025-08-02 have until 2027-08-02
Companies that train or substantially fine-tune general-purpose AI models and place them on the EU market. Businesses merely using such models via API are not GPAI providers.
Kept at 2026-08-02 by the Digital Omnibus on AI; only the marking/detection duty for systems already on the market before this date is deferred to 2026-12-02
Any company that offers a customer-facing chatbot, generates synthetic media or text for the public, or uses emotion recognition or biometric categorisation.
Grace period introduced by the Digital Omnibus on AI (Reg. 2026/1744) for systems placed on the market before 2026-08-02; the new prohibition was also added by the Omnibus
Providers of generative AI products released before August 2026 that have not yet implemented watermarking; any business deploying image or video generators.
Postponed from 2026-08-02 by the Digital Omnibus on AI, Regulation (EU) 2026/1744 (OJ 2026-07-24, in force 2026-07-27)
Companies building such AI systems, and any employer or lender that uses them (deployer duties), regardless of size. SMEs get simplified documentation templates.