AI compliance calendar
AI compliance calendar for EU and UK companies
Every dated obligation below is sourced to an official government or regulator page. Several already apply, so for most companies the question is evidence, not timing.
6 obligations on this page already apply today.
- 2 February 2025In force now
AI Act Article 4 — AI literacy among your staff
- Who it applies to
- Any company that deploys an AI system in the EU. No size exemption.
- What is expected of you
- Take measures so the people using AI on your behalf have a sufficient level of AI literacy. Written rules and a briefed team are how that is evidenced.
Source: European Commission
- 7 February 2025In force now
CNIL recommendations on generative AI and the GDPR
- Who it applies to
- Companies operating in France that process personal data with AI tools.
- What is expected of you
- This is still the current French reference. Define the purpose, the lawful basis, the retention and the information given to people, before an AI tool touches personal data.
Source: CNIL
- 8 July 2026In force now
EDPB guidelines on generative AI and anonymisation
- Who it applies to
- Companies using or building generative AI on personal data, across the EU.
- What is expected of you
- Adopted for public consultation until 30 October 2026, so not yet a final position. It signals where enforcement is heading on scraped data and on what counts as anonymous.
Source: EDPB
- 27 July 2026In force now
AI Omnibus in force — some deadlines moved, none of today's
- Who it applies to
- Everyone in scope of the AI Act, including small mid-cap companies.
- What is expected of you
- High-risk Annex III systems moved to 2 December 2027, and high-risk AI inside physical products to 2 August 2028. Some SME simplifications now extend to small mid-caps. Article 4 and Article 50 were not postponed.
Source: European Commission
- 2 August 2026In force now
AI Act Article 50 — transparency and marking of AI content
- Who it applies to
- Providers and deployers of the AI systems the article covers. No size carve-out in the article itself.
- What is expected of you
- Tell people when they are dealing with an AI system, label deepfakes and AI-manipulated media, and mark synthetic content in a machine-readable way. This lands on marketing, communications and support first.
Source: European Commission
- 1 September 2026In force now
France — every business must be able to receive e-invoices
- Who it applies to
- Every VAT-registered business in France, with no size threshold. Large companies and ETI must also issue electronically from this date.
- What is expected of you
- Connect to a registered platform so incoming invoices can be received. Not our product, but it is on the same desk as the AI policy this autumn.
Source: impots.gouv.fr
- 1 September 2027Ahead of you
France — SMEs must issue e-invoices, and payment e-reporting starts
- Who it applies to
- PME, TPE and micro-entreprises below the ETI threshold.
- What is expected of you
- Issue invoices electronically and transmit payment data to the tax administration. Twelve months of lead time, starting now.
Source: impots.gouv.fr
- 2 December 2027Ahead of you
AI Act high-risk obligations — recruitment and people management
- Who it applies to
- Any company using AI in hiring, employee monitoring, promotion, credit or access to essential services.
- What is expected of you
- These are Annex III high-risk uses: risk management, data governance, technical documentation, human oversight, logging and monitoring. If you screen CVs with AI, this is your deadline.
Source: European Commission
A written AI policy is the document you are asked for first
Article 4 and Article 50 both come down to the same practical question: can you show the rules you gave your team, in writing, dated. PolicyForge AI produces that document from ten questions, in English or French, for a one-time $29 or $49.
Where these dates come from
We only publish dates we could read on a government or EU regulator page. Penalty amounts circulating in advisory articles are left out until we can confirm them at source.
Last checked against official sources on 8 September 2026.
This page is compliance support, not legal advice. Dates and scope are summarised from the official sources linked on each item. Consult your own counsel for your specific situation.