Category: Compliance
AI compliance practices, documentation requirements, risk classification, and audit readiness for organisations
Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.
By subscribing you agree to receive Future Prep news. Unsubscribe any time.
A special EU expert panel wants to flip the burden of proof for online child safety. Providers would have to show a service is safe by design before children under 13 could use it, and the same design features the Commission just cited against Meta are in scope.
The European Commission has opened a targeted consultation on data sovereignty, running to 8 September. It asks who can reach European data and under whose law. The policy outcome is uncertain. The internal exposure map an honest answer requires is valuable whatever Brussels decides.
A single US state has set a new bar for frontier AI safety, with recurring independent audits of the largest developers. European organisations are not bound by it. But the evidence it forces into the open changes what governance teams can now ask of their AI vendors.
Brussels softened the AI literacy duty in the Digital Omnibus, from ensuring a sufficient level to supporting its development. But it was not delayed, it has applied since February 2025, enforcement begins this August, and the EU's skills agenda is turning literacy from a compliance checkbox into a competitiveness lever.
The Council adopted the Digital Omnibus on 29 June, pushing high-risk AI Act obligations to 2027 and 2028. But the transparency and literacy duties that bite in 2026 did not move, and two new bans arrive sooner than the relief.
A joint Five Eyes statement reframes AI cyber risk as an immediate leadership responsibility on a months-not-years horizon. The defence is unglamorous basic hygiene plus AI-aware threat modelling. We translate it into the EU frame of NIS2, DORA and the AI Act, and the questions a board should ask now.