Category: Regulations
AI regulations EU organisations need to follow, including enforcement updates, guidance, and compliance deadlines
Stay ahead of AI change. Get practical updates from Future Prep direct to your inbox.
By subscribing you agree to receive Future Prep news. Unsubscribe any time.
The e-Evidence Regulation applies from 18 August 2026. A European production order can now compel your cloud or AI vendor to produce prompts, logs and account data within ten days, and your organisation is unlikely to be the addressee or to hear about it first.
Taiwan confirmed AI agent-assisted attacks on government agencies in July. A security vendor separately documented one campaign built from open-source frameworks. No frontier model gate was crossed, which is why vendor safety cases were never going to cover it.
Nigeria signed three cloud instruments on 5 August, sorting government data into four levels and pinning the top two inside the country. The architecture mirrors CADA almost exactly. What changes for EU providers when the sovereignty test is pointed at them, and what October 2026 decides.
Germany's BaFin started supervising AI in banks and insurers on 29 July, two days after the Digital Omnibus softened the AI literacy duty. Fines reach €35 million, the sampling is risk-based, and the supervisor depends on what the system is used for.
The Digital Omnibus delayed the AI Act, so many roadmaps now say 2027. Article 50 was not part of that delay. AI Act transparency duties apply from 2 August 2026, they reach chatbots and synthetic content regardless of risk tier, and most of the work lands on deployers.
A special EU expert panel wants to flip the burden of proof for online child safety. Providers would have to show a service is safe by design before children under 13 could use it, and the same design features the Commission just cited against Meta are in scope.