28 ottobre 2026 · Titus
Six days before the deadline
Regulation (EU) 2026/1744 entered into force on 27 July 2026, six days before the high-risk rules were due. What a deferral teaches an organisation that has already missed two deadlines.
The Record, written in October 2026. A retrospective. This piece covers July 2026, when the Digital Omnibus on AI entered into force, and was written afterwards from the documents. Nothing here was published at the time.
The Digital Omnibus on AI was published in the Official Journal on 24 July 2026 and entered into force on 27 July. The obligations it deferred had been due to apply on 2 August.
Six days. That is the margin the European Union left itself between amending a regulation and the moment the regulation would otherwise have become fully enforceable. It is worth sitting with, because it explains a great deal about how the last two years felt to anybody trying to comply with it.
What the six days tell you
They tell you the timetable was never as solid as it looked. A deadline that can be moved with six days' notice is a deadline that was not going to be enforced on that date in any case — the market-surveillance authorities were not ready, the standards were not ready, and the regulated population was nowhere near ready.
They also tell you something less comfortable: the only people who suffered from the uncertainty were the ones who took it seriously. An association that spent money in 2025 preparing for August 2026 did not waste it, but it did spend eighteen months working towards a date that dissolved in the final week. An association that assumed it would slip was rewarded for its cynicism.
That is a bad incentive to have created, and it will shape how this sector reads the next deadline. Expect the December 2027 date to be treated as provisional by a great many people who were right about the last one.
What actually changed on 27 July
The deferral itself: stand-alone Annex III high-risk systems now apply from 2 December 2027, and Annex I systems from 2 August 2028. Application is no longer conditional on harmonised standards existing. Documentation duties were simplified for smaller enterprises. Nothing that had already applied was switched off.
For an association, the operative sentence is the last one. Everything that was live on 26 July was live on 28 July: the prohibitions, the literacy duty, the obligations on the model providers whose products sit under the tools the association uses.
The trap in a moving deadline
There is a pattern in regulation that anyone who has run a compliance programme will recognise. The first deadline is missed because nobody believed it. The second is missed because the first was missed and the organisation is still catching up. The third is missed because by then the programme has no sponsor and no one remembers why it started.
A deferral interrupts that pattern only if it is used to finish the work, rather than to postpone it. The organisations that used the fifteen months well did something unfashionable: they finished the inventory and the oversight procedure in the second half of 2026, while nobody was watching, and then had nothing to do in 2027 except keep it current.
The ones that treated July 2026 as a fresh start will arrive at December 2027 in exactly the position they were in during the summer of 2026 — with a deadline, a budget request, and no list of systems.
What I would tell a board now
Three sentences, and none of them is about the date.
We know which systems make judgements about people, and there is a named owner for each. That is the inventory.
We know what we do when one of them is wrong, including when the owner is on holiday. That is oversight, and it is the part auditors actually test.
We can show that the people using these systems were told what they are for and what they are not. That is Article 4, and it has been law since February 2025.
An association that can say those three things is compliant with everything currently in force, and is ahead of the deadline that has not yet arrived. It took a quarter of work, once, in a period when the alternative was waiting for a document that turned up six days before it mattered.
The Record · ← Agreement in May, law in July · Where the record stands →
Running an association? The AI Act for associations — what your body must actually do sets out the whole thing on one page: whether you are a provider or a deployer, the four duties that reach a membership body, the dates that matter, and the five items of evidence a board will ask for.