EU adjusts AI Act, setting new 2027 compliance dates

On 7 May, a much-anticipated provisional agreement on the AI Omnibus was reached by EU co-legislators, providing businesses with greater clarity on the path to AI Act compliance. This agreement, part of the broader 'Omnibus VII' package, amends several aspects of the original AI Act to make its implementation more practical and to strengthen legal certainty and competitiveness. The 'Omnibus VII' package also includes a second regulation, the Data Omnibus, which aims to harmonise definitions and reduce duplicative reporting obligations across EU data legislation and is still under negotiation.

Key changes and new compliance deadlines

The agreement introduces several critical adjustments and sets a revised, more predictable schedule for businesses to adapt.

New compliance timelines: The deadlines for high-risk AI systems have been extended. Companies must now comply by 2 December 2027 for stand-alone high-risk systems and by 2 August 2028 for high-risk systems embedded in regulated products. An earlier deadline of 2 December 2026 remains for transparency obligations related to AI-generated content.

Business obligations and prohibitions: The rules have been refined. The use of special category data (e.g., health or biometric data) to detect and correct bias is now permitted only under a "strict necessity" standard. For transparency, an obligation to register exempted AI systems in the EU database has been confirmed. Additionally, a new prohibition has been introduced against creating non-consensual intimate content with AI.

Sector-specific clarity: A new mechanism will prevent regulatory overlaps between the AI Act and other sectoral laws, such as those for machinery or medical devices. To support this, the European Commission is now tasked with providing specific guidance on implementation.

Governance and support: The establishment of regulatory sandboxes, designed to help companies test their AI systems in a controlled environment, is now scheduled for August 2027. The role and responsibilities of the central AI Office have also been further clarified.

A strategic opportunity for Luxembourg businesses

For businesses in Luxembourg, this agreement replaces uncertainty with a clearer, albeit extended, timeline. The new deadlines are not a reason to delay, but a strategic opportunity to act. The RE.M.I. (Regulation Meets Innovation) initiative (a joint project between Luxembourg AI Factory and CNPD) helps Luxembourg businesses navigate the evolving AI regulatory landscape through practical tools and resources. Its Luxembourg AI readiness & compliance survey 2026 offers a concrete starting point to evaluate where a company stands.

Acting on these insights is the critical next step. The Luxembourg AI Factory is the primary local resource for this journey, offering programmes to translate survey results into a concrete action plan. While the extended deadlines offer additional time to prepare, they also present a valuable window of opportunity. Using this time to assess readiness and engage with local support programmes is a sound strategy — not only for compliance, but for positioning in the evolving landscape of regulated AI.