NEWS

The EU AI Act's Enforcement Powers and Transparency Rules Take Effect

A red EU circuit-star emblem over a courtroom gavel on a black field, representing the AI Act becoming enforceable
The AI Act stopped being a set of obligations without an enforcer on August 2. Source: Santage
TLDR

Brussels flips the enforcement switch

For a year, providers of general-purpose AI models have carried obligations under the European Union's AI Act without an authority empowered to enforce them. That changed on August 2. The Commission's AI Office, working with national regulators, now holds the power to supervise the largest model makers directly, request their technical documentation, evaluate their systems, order changes, and impose fines when it finds a provider acted intentionally or negligently.

Landing on the same date is the part of the law most people will actually see. Under Article 50, chatbots and other interactive systems must disclose that a user is talking to AI rather than a person. Deepfakes must be labeled as artificial, and AI-generated or altered images, audio, and video must carry machine-readable marks so the content can be detected downstream.

"Europeans have a right to know whether what they see, hear or read has been made or altered by AI, especially when such content can shape public debate. Transparency is how we protect trust."
Henna Virkkunen, Executive Vice-President of the European Commission for Tech Sovereignty, Security and Democracy

Powers with real teeth

The enforcement powers arrive with a defined penalty ceiling. For providers of general-purpose AI models, fines can reach 15 million euros or 3% of worldwide annual turnover, whichever is higher, a level that turns compliance from a paperwork exercise into a board-level financial risk for the handful of companies that supply the world's frontier models.

Timeline of the EU AI Act rollout showing entry into force in August 2024, prohibited-practice bans in February 2025, general-purpose AI obligations in August 2025, enforcement powers and transparency rules in August 2026, and legacy model compliance in August 2027
The AI Act phased in over three years. August 2, 2026 is the point at which the rules became enforceable. Source: European Commission, AI Office (2026).

To give companies a concrete path to compliance, the Commission published a first list of more than 180 organizations, roughly 190 by the end of July, that have signed a voluntary Code of Practice on transparency of AI-generated content. Signing does not replace the law, but it offers what the Commission calls a streamlined and predictable way to show that labeling and marking obligations are being met.

What took effect, in numbers
Maximum GPAI fine, as share of global annual turnover, or 15 million euros3%
Maximum fine for prohibited AI practices, or 35 million euros7%
Organizations signed to the transparency Code of PracticeAbout 190
Deadline to mark content from pre-August systemsDecember 2, 2026
Source: EU AI Act, Articles 50, 99 and 101; European Commission (2026).

The transition is not instant

Enforcement beginning does not mean every provider is immediately exposed. Models placed on the market before August 2, 2025 have until August 2, 2027 to comply fully, and the obligation to mark AI-generated content on systems already deployed before August 2, 2026 carries a grace period to December 2, 2026. The practical test now is how quickly the AI Office moves from holding these powers to using them, and which provider becomes the first to feel them.

Santage is committed to independent, transparent journalism. This article is produced in accordance with Santage's Editorial Standards and aims to provide accurate and timely information. This is regulatory reporting, not legal advice. Readers are encouraged to verify information independently.