EU AI Act Full Enforcement Begins August 2
The EU Artificial Intelligence Act reaches its most significant enforcement milestone on August 2, 2026, when the majority of the regulation's provisions become applicable. This includes the full requirements for high-risk AI systems under Annex III, covering eight categories including recruitment and HR tools, biometric identification, critical infrastructure management, education, essential services, law enforcement, migration management, and justice systems.
Organizations deploying high-risk AI systems must now implement comprehensive compliance frameworks: risk management systems, data governance protocols, technical documentation, transparency obligations, human oversight measures, and post-market monitoring. Non-compliance can result in fines of up to €35 million or 7% of global annual revenue, whichever is higher.
For US and MENA-based companies offering AI-powered products to European customers, this creates an urgent compliance imperative. Legal experts note that the Act's extraterritorial scope means any AI system whose outputs are used in the EU falls under its jurisdiction — regardless of where the provider is based. This affects everything from SaaS recruitment platforms to AI-powered fintech credit scoring.
The European Commission has signaled it is evaluating a potential delay for certain Annex III provisions to December 2027, but organizations cannot rely on this proposed extension. The current legal deadline remains August 2, 2026, and companies that have not begun compliance work face significant risk.
For MENA startups targeting European markets, this is particularly relevant. AI products that touch any of the high-risk categories need a compliance strategy before market entry, not after. The cost of compliance will be a barrier to entry — but also a competitive moat for those who invest early.
If you're a MENA startup selling AI-powered SaaS to European customers, you have 29 days to get your compliance house in order. The Act's extraterritorial reach means it doesn't matter where you're based — only where your outputs land. Don't wait for the proposed delay; build your compliance documentation now. The companies that treat this as a moat rather than a cost will own the European market.
Does the EU AI Act affect companies outside the EU?
Yes. The Act has extraterritorial scope — any AI system whose outputs are used within the EU must comply, regardless of where the provider is headquartered. This includes US, MENA, and Asian companies serving European customers.