AI Councils
Standards & Regulations

EU AI Act

The EU's comprehensive AI regulation and what it means for AI Councils.

Overview

The EU AI Act is the world's first comprehensive AI regulation. It entered into force on 1 August 2024 and is being phased in over a multi-year timeline.

Key Timeline

DateMilestone
1 August 2024AI Act enters into force
2 February 2025Prohibited practices and AI literacy obligations apply
2 August 2025Governance rules and General-Purpose AI (GPAI) obligations apply
2 August 2026Act becomes fully applicable (with some exceptions)

Risk-Based Approach

The EU AI Act uses a four-tier risk classification:

EU AI Act TierDescriptionToolkit Equivalent
Unacceptable riskProhibited AI practices (e.g., social scoring, manipulative systems)Tier 4, Prohibited
High riskAI in regulated domains with significant impact on individualsTier 3, Full council review
Limited riskTransparency obligations (e.g., chatbots must disclose AI use)Tier 2, Champion review
Minimal riskNo specific obligationsTier 1, Self-serve

Key Obligations for AI Councils

AI Literacy (Article 4)

Organizations must ensure that staff involved in the operation and use of AI systems have sufficient AI literacy. This is not optional; it applies from 2 February 2025.

Toolkit response: Training and Literacy

Risk Management (Article 9)

High-risk AI systems must have a risk management system established, implemented, documented, and maintained.

Toolkit response: Risk Tiering + Impact Assessments

Documentation (Article 11)

Technical documentation must be drawn up before a high-risk system is placed on the market.

Toolkit response: Model Cards and Datasheets + AI Inventory

Human Oversight (Article 14)

High-risk AI systems must be designed to allow effective human oversight.

Toolkit response: Human Oversight

Registration (Article 49)

High-risk AI systems must be registered in an EU database before deployment.

Toolkit response: AI Inventory (internal register that feeds external registration)

Using This Toolkit for EU AI Act Compliance

The toolkit does not replace legal advice, but it provides the governance infrastructure needed to meet the Act's requirements. The council's intake, review, and records processes directly support the documentation, risk management, and transparency obligations.

On this page