Article 4
AI literacy
Organisations providing or using AI must consider the knowledge of the people working with it. Knowledge level, role and context of use matter. Our training supports that learning.
EU AI Act & Governance
Understand what you allow.
Define who decides.
AI literacy and governance belong in the same conversation. Training gives board members practical experience; legal assessment remains specific to your organisation and use case.
Article 50
Transparency
Determine when people need to know they are interacting with AI or viewing AI-generated content. Obligations depend on the specific use case; not every internal document automatically falls under the same rule.
Articles 26 & 27
High-risk applications
Certain high-risk systems carry specific user obligations and may require a fundamental rights assessment. Human oversight and logs do not replace determining which rules apply.
GDPR & IT policy
Data, access and ownership
Define which sources may be used, who has access and where configurations and logs are stored. Check provider terms, retention periods and personal data processing agreements.
This is not legal advice or a compliance guarantee. Ask your legal adviser and privacy officer to check current legislation, applicability and effective dates. Unverified legislative changes in the supplied documents are not presented here as established facts.
EU AI Act: official text on EUR-LexThe dates that apply
The rules moved in July 2026.
The EU AI Act was amended by the Digital Omnibus on AI, Regulation (EU) 2026/1744, published in the Official Journal on 24 July 2026 and in force since 27 July 2026. These are the dates from our foundation paper for an organisation that uses agents.
2 February 2025
Prohibited practices and AI literacy
No AI for prohibited practices such as harmful manipulation, social scoring or emotion recognition at work (Article 5). Organisations take measures to support the AI literacy of the people who work with AI (Article 4). The Omnibus softened the wording of this duty from ensuring a sufficient level to supporting its development, but the duty remains.
2 August 2026
People know when they deal with AI
People are told when they are dealing with AI, unless that is obvious, and AI generated images, audio and video that could pass for real are labelled (Article 50).
2 December 2027
High-risk uses in Annex III
High risk uses listed in Annex III, such as recruitment, decisions about employees, consumer credit and the pricing of life and health insurance, need human oversight by competent people, logs kept for at least six months and workers informed in advance (Article 26). Credit and insurance uses also need a fundamental rights impact assessment (Article 27).
2 August 2028
High-risk AI in regulated products
High risk AI built into products covered by EU product legislation, such as machinery and medical devices (Annex I).
The GDPR applies today to every agent that touches personal data: a lawful basis for each agent, only the data it needs, an updated privacy notice, a person who can change any decision with a significant effect on someone, and processing agreements with AI vendors. Dates and duties above are summarised from the foundation paper and are not legal advice.
Questions for the board meeting
Ask for evidence, not a demo.
- Who owns the workflow and its result?
- What baseline was recorded before building?
- When is a use case stopped?
- Who reviews the output and how much time does it take?
- What data and access rights are actually needed?
- Do instructions and knowledge files remain transferable?
Put AI to work
Ready to bring AI into your team’s daily work?
Talk to Wendy and Lavanya about team training, private executive training or a custom agent.