The EU AI Act deadline that just moved — and why that's not a reason to slow down

On June 29, 2026, the Council of the EU gave its final approval to the "Digital Omnibus" simplification package, following the European Parliament's endorsement two weeks earlier. The headline change: the compliance deadline for high-risk AI systems under Annex III moves from August 2, 2026 to December 2, 2027 — roughly sixteen months of breathing room. For AI embedded in already-regulated products (Annex I), the new deadline is August 2, 2028.

One near-term deadline was tightened rather than loosened: transparency obligations for AI-generated content, including watermarking requirements, now come due December 2, 2026 — three months earlier than the original proposal, though still a few months later than the original Act's schedule.

Why this happened

The delay isn't a retreat from the Act's substance. It's an acknowledgment that the regulatory infrastructure the Act depends on — harmonized technical standards, accredited notified bodies, conformity assessment capacity — wasn't going to be ready in time for the original deadline. Regulating AI risk classification and conformity assessment at this scale requires standards bodies and certification infrastructure that simply didn't exist when the original timeline was set. Pushing the deadline is a pragmatic admission of that gap, not a signal that high-risk obligations are being watered down.

Why "we have more time" is the wrong takeaway

For organizations that hadn't started their compliance work, the instinct might be to treat this as permission to wait. That would be a mistake, for two reasons.

First, sixteen months sounds like a lot until you map it against what actually has to happen before a high-risk AI system can be considered compliant: an accurate system inventory, risk classification against Annex III criteria, a governance framework, technical documentation, and — for the systems that need it — third-party conformity assessment through a notified body. Notified body capacity is going to be a bottleneck industry-wide as the real deadline approaches; the organizations that start early won't be competing for the same scarce assessment slots as everyone who waited.

Second, the deadline that moved is specifically the high-risk obligations deadline. It says nothing about the obligations that are already in force or arriving sooner — prohibited practices, GPAI provider transparency requirements, and now the tightened December 2026 watermarking deadline. An organization that reads "the deadline moved" as "nothing is due yet" risks missing obligations that were never part of this delay.

What this means in practice

If you haven't done your AI system inventory yet, this is still the right time to do it — not because a deadline is imminent, but because you cannot scope any of the rest of the compliance work without it. The extra time is best spent building the governance foundation properly, rather than compressing the same work into a shorter, more rushed timeline once the "real" deadline gets closer again.

Sources: DLA Piper GENIE, Gibson Dunn, Travers Smith.