Artificial intelligence is now part of everyday business, from customer service chatbots and recruitment tools, to content creation and automated decision-making. But as businesses increasingly rely on AI, regulation is catching up.
The EU AI Act is the European Union’s framework for regulating artificial intelligence. It takes a risk-based approach, with stricter requirements for AI systems that could pose greater risks to people’s safety, rights, or well-being.
But what does this mean for businesses in the UK?
DOES THE EU AI ACT APPLY TO UK BUSINESSES?
Brexit does not automatically put UK businesses outside the scope of the EU AI Act.
The regulation can apply to businesses based outside the EU if they place an AI system or general-purpose AI model on the EU market, or if their AI system is used within the EU.
So, if your business operates entirely within the UK, the Act may have limited direct relevance. However, if you sell products or services into the EU, work with EU customers, or provide AI-powered systems used there, it is worth understanding your obligations.
WHAT DOES THE EU AI ACT REGULATE?
The Act categorises AI according to its level of risk.
Some uses of AI are prohibited, while certain applications are classed as high risk and face additional requirements. These can include AI used for recruitment, education, healthcare, credit assessments, and other sensitive areas.
There are also transparency requirements for certain AI systems. For example, people may need to be informed when they are interacting with AI, while certain AI-generated or manipulated content must be identifiable as such.
For most businesses using everyday AI tools, the regulation does not mean that every use of AI is suddenly subject to complex compliance requirements. The obligations depend on what the AI is being used for and your role in providing or deploying it.
WHAT CHANGED IN 2026?
The EU AI Act became broadly applicable on 2 August 2026, although some requirements have different implementation dates.
Importantly, the rules covering high-risk AI systems have been extended to the 2nd of December 2027, while the rules covering AI embedded in certain regulated products apply from the 2nd August 2028.
This gives businesses more time to prepare for some of the Act’s more demanding requirements.
WHAT SHOULD UK BUSINESSES DO?
Even if the EU AI Act does not directly apply to your business, understanding how you use AI is increasingly important.
Consider:
- Reviewing the AI tools your business currently uses
- Identifying what those tools are being used for
- Checking whether any are involved in decisions affecting customers or employees
- Understanding how your AI suppliers handle data, security and compliance
- Making sure employees understand how AI should and shouldn’t be used
For businesses operating in or selling into the EU, it is particularly important to establish whether any of your AI systems fall within the Act’s scope.
As businesses navigate the changing regulatory landscape, AI watermarking is one area worth understanding. Read our article on Claude’s AI watermarking to explore how it works and its role in identifying AI-generated content.
THE BOTTOM LINE
The EU AI Act is not simply an EU regulation that UK businesses can ignore.
If your business has customers, operations, products or AI systems connected to the EU, it is worth checking whether the regulation applies to you.
And even where it does not, the direction of travel is clear: businesses need to think more carefully about how AI is selected, used and governed.
Disclaimer: This article provides general information and is not intended to constitute legal advice.