Plan & Proof

Regulation · September 2026 · 4 min

Regulation is an occasion, not the main argument

The AI Act's high-risk rules have been postponed to December 2027, not cancelled. And several requirements already apply today.

Anders Butzbach Christensen

Plan & Proof

AI literacy is enforced from August 2026. The Data Act largely applies already. That is a concrete occasion to get governance in order, but it is rarely the best reason to write a strategy.

The timeline

2 Feb 2025

AI Act art. 4: AI literacy requirement applies

Applies

12 Sep 2025

Data Act: most rules apply

Applies

2 Aug 2026

Literacy enforced, and transparency requirements (art. 50) apply

Applies

12 Sep 2026

Data Act: design requirements for new connected products

Applies

2 Dec 2026

Watermarking for systems on the market before August 2026

Coming

12 Sep 2027

Data Act: contract rules for older B2B agreements

Coming

2 Dec 2027

High risk, Annex III: e.g. recruitment, credit and education

Coming

2 Aug 2028

High risk, Annex I: AI in regulated products

Coming

What it means for you

Data, governance and literacy take 12-24 months to build and are the same regardless of technology. Waiting for the technology to mature does not move the requirements.

Not legal advice. Always check the current legal text, or have a lawyer review it.

Sources: Digital Omnibus on AI (Regulation 2026/1744); Gibson Dunn, 27 May 2026; Clifford Chance, 19 Sep 2025.

The service behind this article: AI literacy programme →

Facing a decision on digital, data and AI?

A new CIO, a new group strategy, an ERP change, many pilots and few in production, or a board asking about AI. Call when the decision is approaching.

Book an introductory meeting