What is the EU AI Act compliance timeline for high-risk AI systems?

The AI Act entered into force on 1 August 2024. Prohibited AI practices became unlawful on 2 February 2025. High-risk AI obligations (Chapters III and IV) apply from 2 August 2026. GPAI model obligations applied from 2 August 2025. The EU AI database — where high-risk systems must be registered — was due to be operational by August 2026.

How do GDPR obligations overlap with the EU AI Act?

The overlap is substantial and deliberate. GDPR's data minimisation, purpose limitation, and accuracy principles align closely with the AI Act's data governance requirements (Art. 10). The AI Act's transparency obligations reinforce GDPR's right to explanation for automated decisions (Art. 22 GDPR). The simplest approach is to extend your existing DPIA process to incorporate AI Act classification and risk management documentation simultaneously.

What are the fines for non-compliance with EU AI Act high-risk obligations?

The fine structure is tiered. Violations relating to high-risk AI systems carry fines of up to €15 million or 3% of global annual turnover, whichever is higher. Violations of prohibited practices (Art. 5) carry fines up to €35 million or 7% of global annual turnover. Providing false or misleading information to authorities can result in fines up to €7.5 million or 1.5% of turnover.

Is there a CE marking equivalent under the EU AI Act?

For standalone Annex III AI systems, the equivalent is the EU Declaration of Conformity, issued after completing the conformity assessment under Annex VI. This Declaration must be kept for 10 years after market placement and made available to authorities on request. Registration in the EU AI database functions as the publicly accessible record of compliance.

Does the EU AI Act apply to UK-based organisations post-Brexit?

Yes, in the same way the GDPR applies extraterritorially. If a UK-based organisation places a high-risk AI system on the EU market, or uses a high-risk AI system whose outputs affect individuals located in the EU, the AI Act applies. UK organisations without an EU establishment must appoint an EU-based authorised representative.

What is a fundamental rights impact assessment and when is it required?

Article 27 requires deployers of certain high-risk AI systems — specifically public bodies and private operators providing public services — to conduct a fundamental rights impact assessment (FRIA) before deploying. The FRIA requires the deployer to assess the potential impact on privacy, non-discrimination, freedom of expression, access to justice, and other fundamental rights. The assessment must be registered in the EU AI database.

IA General

EU AI Act 2025: cómo clasificar y cumplir con los sistemas de IA de alto riesgo

Equip IgeraSolutions

3 de junio de 2026

11 min read

EU AI Act 2025 high-risk AI systems classification and compliance guide

#EU AI Act high risk AI systems#AI Act compliance 2025 2026#Annex III EU AI Act classification#high risk AI obligations#EU AI Act property management

EU AI Act 2025: cómo clasificar y cumplir con los sistemas de IA de alto riesgo

COMPARTIR

Productos relacionados

IgeraFincas

Artículos relacionados

RAG vs ChatGPT para Contratación Pública: La Diferencia Clave

Reglamento DORA de la UE y riesgo TIC de terceros: lo que necesitan saber los administradores de fincas

RAG vs ChatGPT: por qué la IA con tus documentos supera a la IA genérica