Category: Regulations
AI regulations EU organisations need to follow, including enforcement updates, guidance, and compliance deadlines
Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.
By subscribing you agree to receive Future Prep news. Unsubscribe any time.
A single US state has set a new bar for frontier AI safety, with recurring independent audits of the largest developers. European organisations are not bound by it. But the evidence it forces into the open changes what governance teams can now ask of their AI vendors.
The Council adopted the Digital Omnibus on 29 June, pushing high-risk AI Act obligations to 2027 and 2028. But the transparency and literacy duties that bite in 2026 did not move, and two new bans arrive sooner than the relief.
Canada has tabled Bill C-36, a GDPR-style privacy overhaul. For organisations already under European rules it reads as convergence but works as divergence: a second regulator, second thresholds and a second set of rights to map across adequacy, automated decisions and transfers.
The Commission's draft guidelines of 19 May 2026 set worked examples across all eight Annex III categories. The Annex III classification memo now has an external benchmark. Six fields make the call defensible before the 23 June consultation closes.
The Dutch DPA's consultation on the right to explanation closes on 26 May 2026. The draft reframes Article 22 GDPR and Article 86 AI Act obligations as a deliverable on demand, not paperwork. Three deployer gaps to close before the final guidance arrives in Q3 2026.
The Digital Omnibus did not collapse on 28 April; it stopped. Until the next trilogue closes, the AI Act applies on its original schedule and 2 August 2026 is your planning deadline. Four scenarios, one quarterly plan, no parallel roadmaps.