Skip to main contentSkip to footerSkip to navigation
Regulation (EU) 2024/1689

EU Artificial Intelligence Act

Regulation (EU) 2024/1689 — The World's First Comprehensive AI Law — Fully Decoded for Your Business

What Is the EU AI Act?

Adopted on June 13, 2024, the European Union's Artificial Intelligence Act (Regulation (EU) 2024/1689) is the world's first comprehensive legal framework for artificial intelligence. It establishes a risk-based approach to regulate AI systems, ensuring they are safe, transparent, and respect fundamental rights.

The regulation applies to any organization that develops, deploys, or uses AI systems within the EU market — regardless of where the organization is based. With penalties of up to 35 million EUR or 7% of global annual turnover, compliance is not optional.

Human Veritas helps you navigate this complex regulation with confidence. Our AI compliance training, certification programs, and consulting services ensure your organization meets every requirement efficiently.

Four Levels of AI Risk Under the EU AI Act

Unacceptable Risk

Prohibited AI Practices

Social scoring by governments, real-time biometric surveillance in public spaces, manipulative AI systems, and AI exploiting vulnerabilities of specific groups.

High Risk

Strictly Regulated Systems

AI used in critical infrastructure, education, employment, law enforcement, migration, access to essential services, and biometric identification.

Limited Risk

Transparency Obligations

Chatbots, deepfakes, emotion recognition systems, and AI systems that interact with humans — requiring clear disclosure that users are interacting with AI.

Minimal Risk

Free Use

AI-enabled video games, spam filters, and other low-risk applications — no additional regulatory obligations beyond existing laws.

What High-Risk AI Systems Must Comply With

If your AI system falls under the high-risk category, you must meet these essential requirements before placing it on the market

Risk Management

Establish a continuous, iterative risk management process throughout the AI system's lifecycle.

Data Governance

Ensure training, validation, and testing datasets are relevant, representative, and free from biases.

Transparency & Documentation

Maintain detailed technical documentation and provide clear information to users about the AI system.

Human Oversight

Design systems that can be effectively overseen by humans, including stop buttons and override capabilities.

Accuracy & Robustness

Achieve appropriate levels of accuracy, robustness, and cybersecurity throughout the system's lifecycle.

Technical Documentation

Create and maintain comprehensive technical documentation including design specifications and conformity assessment.

Key Dates Your Organization Must Know

Feb 2025

Prohibited AI practices (unacceptable risk) provisions take effect. All bans on social scoring, manipulative AI, and real-time biometric surveillance become enforceable.

May 2025

Codes of Practice established. The AI Office publishes guidelines and codes of practice to help organizations prepare for compliance.

Aug 2025

General-purpose AI rules become applicable. GPAI model providers must comply with transparency and copyright obligations.

Aug 2026

Full application of the AI Act. All high-risk AI system requirements become enforceable. This is the critical deadline for most organizations.

Aug 2027

High-risk AI systems (Annex III) that are already on the market must achieve full compliance. Extended deadline for systems used as safety components.

How Human Veritas Helps You Achieve Compliance

Our comprehensive suite of services is designed to guide your organization through every step of EU AI Act compliance

Compliance Assessment

Identify your AI systems, classify their risk levels, and get a detailed compliance roadmap tailored to your organization.

Training & Certification

Equip your team with ISO 42001, EU AI Act, and AI Auditor certifications. Role-based programs for executives, developers, and legal teams.

Documentation & Audit

We help you create the technical documentation, conformity assessments, and transparency reports required by the regulation.