EU Delays AI Act to 2027: What Compliance Teams Do Now

On 6 May 2026, EU institutions agreed the “Digital Omnibus on AI”, a package that pushes the AI Act’s high-risk obligations from August 2026 to December 2027 and product-related rules to August 2028 (European Commission press brief, May 2026). The deepfake labeling clause survived. Everything else slid 16 months to the right.

Compliance leads who spent Q1 staffing AI Act readiness teams now face a different question: what stays live, what’s frozen, and what becomes a competitive trap if you wind down too early.

What actually moves and what does not

Article 50 — the labeling obligation for synthetic media and AI-generated text — keeps its August 2026 start date (Regulation (EU) 2024/1689 Art. 50). That clause covers public-facing chatbots, deepfake image generators, and any system producing text presented as journalistic content. Watermarking and disclosure work cannot be deferred; ENISA’s March 2026 technical guidance on provenance tagging is the operative reference (ENISA AI Provenance Note 03/2026).

The high-risk pillar — the Annex III list, the conformity assessment regime, the Article 17 quality management system — moves to December 2027. Product-rule alignment under Annex I (medical devices, machinery, toys) shifts to August 2028. Non-consensual sexual deepfake applications are now explicitly banned regardless of timeline.

ai_act_status_2026:
  article_50_labeling:    { effective: 2026-08-02, action: ship_now }
  high_risk_annex_iii:    { effective: 2027-12-01, action: keep_program }
  product_rules_annex_i:  { effective: 2028-08-02, action: re_baseline }
  banned_practices:       { effective: 2026-02-02, action: enforce }

The SME carve-out is bigger than it reads

The Omnibus extends “small mid-cap” treatment to firms with up to 750 employees — a tenfold jump from the original 50-employee SME threshold. These firms get reduced technical documentation duties and prioritized access to regulatory sandboxes operated by national authorities. For Romanian mid-market vendors building procurement intelligence and audit tooling, that is the policy lever to read carefully — see our breakdown of the AI Act readiness map under Lexnomia and how procurement automation under Bid365 intersects with sandbox eligibility.

The trap: “delayed” is not “deleted”. Conformity assessment bodies still need accreditation, and the notified-body backlog tracked by the Commission sat at 14 months in April 2026. Firms that pause documentation work this year will collide with capacity ceilings in 2027.

Our position

Treat the delay as a discovery window, not a holiday. The clauses with August 2026 dates — labeling, banned practices, governance reporting under Article 99 — are the ones regulators will use to set enforcement tone. Everything else is a planning exercise with a 19-month runway and a hard wall behind it. If you are sequencing AI Act work this quarter, our Lexnomia compliance map is the place to start.

Read further

• How Article 50 deepfake labeling reshapes content workflows
• Regulatory sandboxes: what mid-market AI vendors actually get
• DAC7 and AI procurement: where compliance regimes overlap