New Rules to Regulate Artificial Intelligence in Europe

Key changes to the EU AI rules (adopted 26 March 2026)

• The rules are made simpler, clearer and more uniform so that companies can apply them more easily.
• The Commission, the AI Office and national authorities must coordinate to avoid overlapping supervision, enforcement or monitoring.
• SMEs and small‑mid‑cap enterprises (SMCs) – 99.8 % of EU firms are SMEs – get proportional rules and targeted help.
• AI literacy: providers and deployers must support staff learning about AI, but the Commission will give guidance rather than a hard requirement.
• Prohibition of “nudification”: AI that creates sexual images or videos of a person without their consent is banned, unless the provider has strong safety measures in place.
• Bias detection: providers of any AI system may process special‑category personal data (e.g., race, gender) only for bias detection and correction, with strict safeguards.
• Conformity assessment: a single application and assessment procedure is introduced for notified bodies, and the rules are aligned with other EU product safety laws.
• Transitional periods:
• 3 months for marking obligations for generative AI that was on the market before 2 August 2026.
  ‑ 6 months for high‑risk AI systems (Article 6(2) and Annex III).
  ‑ 12 months for other high‑risk AI systems (Article 6(1) and Annex I).
  ‑ The full rules for high‑risk AI will take effect no later than 2 December 2027 (for Annex III) and 2 August 2028 (for Annex I).
• Registration: the EU database entry for AI systems that are not high‑risk is simplified.
• AI sandboxes: the AI Office will run EU‑level sandboxes, giving priority to SMEs and startups, and will work with national authorities and data‑protection bodies.
• Fees and expertise: the scientific panel’s fees are simplified and the Commission can consult experts directly.
• Governance of general‑purpose AI models: the AI Office will supervise these models (except those linked to specific product safety laws) and can impose penalties.
• Other technical adjustments: alignment with cybersecurity rules, clearer definitions of safety functions, and streamlined cooperation between national and EU authorities.

Broader Context

These changes build on the EU’s broader effort to regulate artificial intelligence through the AI Act—the first comprehensive AI law in the world. The original rules aimed to make AI safe, transparent, and respectful of fundamental rights, but were often seen as complex and difficult to apply in practice.

This update is about making those rules workable. It simplifies procedures, reduces duplication between regulators, and adjusts obligations so that smaller companies are not overwhelmed. At the same time, it strengthens oversight of powerful general-purpose AI models and introduces clearer safeguards in sensitive areas like bias and non-consensual image generation.

Overall, the EU is trying to balance two goals:

• encouraging innovation and competitiveness in AI
• protecting people from harm and misuse of the technology

Impact on EU Citizens

For people living in the EU, the changes are mostly about better protection and more transparency, without slowing down useful AI tools.

• Stronger protection against abuse: AI systems that create fake sexual images of someone without consent are banned, addressing a growing online harm.
• Fairer AI systems: Companies are allowed to check for bias using sensitive data, but only under strict safeguards—helping reduce discrimination in areas like hiring or lending.
• More trustworthy AI: Clearer rules and coordinated oversight mean AI systems should be more consistently checked for safety and reliability.
• Better understanding of AI: Employers are expected to help staff understand AI tools, which can make people more aware of how these systems affect their work and daily life.
• Faster access to innovation: AI sandboxes allow new technologies to be tested safely, which can lead to new services reaching users more quickly.

What’s Changing Behind the Scenes

• Simpler rules for businesses mean companies can bring AI products to market more easily, which can increase the availability of AI tools for consumers.
• Centralised supervision (AI Office) improves consistency across countries, so protections do not depend as much on where you live within the EU.
• Gradual rollout gives companies time to adapt, reducing the risk of disruption to services people already use.

Why It Matters

AI is increasingly used in everyday life—from social media to banking to healthcare. These updates aim to ensure that as AI becomes more common, it remains safe, fair, and aligned with people’s rights, while still allowing new technologies to develop.