New regulations governing the development and use of artificial intelligence models are now enforceable across the European Union, marking a watershed moment for global AI governance.

The EU's Artificial Intelligence Act, originally passed in 2024, became enforceable in member states on August 2. The legislation introduces sweeping transparency requirements for organizations deploying AI systems and positions the EU as the world's foremost regulatory authority on artificial intelligence. The move follows the EU's earlier regulatory landmark with the General Data Protection Regulation (GDPR) in 2018, which similarly established rules that many international companies adopted globally to maintain access to the European market — a dynamic often referred to as the "Brussels Effect."

According to the official AI Act portal, the law is the most comprehensive AI legislation enacted anywhere in the world.

Enforcement challenges are expected, however. There are no existing regulatory precedents to follow, and the technology continues to evolve at a rapid pace. The substantial financial resources held by leading AI developers and vendors, combined with the U.S. administration's concerns over what it perceives as unfair treatment of American companies, could create friction points. Meanwhile, other jurisdictions are developing their own approaches — the United States has issued executive orders on AI safety, the United Kingdom has convened international AI summits, and China has enacted its own generative AI rules — making the EU's implementation a closely watched reference point worldwide.

Despite these challenges, EU officials stressed that user safety remains central to the legislation.

"As AI grows increasingly capable and integrated into everyday life, the AI Act helps ensure that AI is developed, deployed, and used safely, giving people and businesses across the EU greater confidence in the technology," the EU said in a statement.

Transparency Measures Now in Effect

Several tangible transparency requirements are now binding on AI providers operating in the EU:

• Chatbots and similar systems must disclose to users that they are interacting with AI.
• Deepfakes must be compulsorily labeled.
• AI-generated or altered content must carry machine-readable marks to enable easy detection.

General-Purpose AI Rules Introduced

The act's provisions for providers of general-purpose AI (GPAI) models also take effect at this stage. GPAI models are defined as those that "can perform many different tasks and can be used in a wide range of tools and services, including AI agents."

These rules extend to the most advanced GPAI models that pose potentially harmful systemic risks, encompassing:

• Chemical, biological, radiological, and nuclear incidents
• Cyber offenses, including instances of AI acting outside of human control

Additionally, providers must disclose clear information about the content on which their models were trained.

High-Risk Obligations on the Horizon

Strict obligations for developers of AI used in "high-risk" applications — including health, safety, and fundamental rights — are scheduled for enforcement beginning December of next year. The staggered implementation timeline reflects the complexity of applying rules across different risk tiers, from prohibited uses such as social scoring and certain biometric categorization, through to limited-risk transparency duties and minimal-risk applications left largely unregulated.

Industry Response

While some in the tech industry have expressed concern that enforcement may slow development, more than 200 companies have already signed the EU's Code of Practice on Transparency of AI-Generated Content, a framework providing guidelines for creating and labeling AI outputs. Signatories include Anthropic, OpenAI, Meta, Microsoft, and Google.

Enforcement Framework

Enforcement will be led primarily by the recently established EU AI Office and national authorities across member states. The AI Act carries penalties of up to €35 million or 7% of global annual revenue — whichever is higher — for violations involving prohibited AI practices, with lower tiers of fines for other categories of non-compliance.

"With the AI Act, we [have] established a clear, risk-based and durable framework for trustworthy AI — one that gives innovators legal certainty while protecting the public interest," said Henna Virkkunen, the European Commission's executive vice president for tech sovereignty, security and democracy. "As enforcement begins, we are taking an important step toward AI that people and businesses can understand and trust."