{"id":7055,"date":"2026-05-06T01:40:38","date_gmt":"2026-05-06T01:40:38","guid":{"rendered":"https:\/\/www.imt-soft.com\/?p=7055"},"modified":"2026-05-06T04:04:41","modified_gmt":"2026-05-06T04:04:41","slug":"eu-ai-act-compliance-risk-classification-guide","status":"publish","type":"post","link":"https:\/\/m.imt-soft.com\/en\/2026\/05\/06\/eu-ai-act-compliance-risk-classification-guide\/","title":{"rendered":"EU AI Act Compliance: Risk Classification Guide"},"content":{"rendered":"\n
\n
<\/div>\n
\n
\n
\n
\n
\n

EU & Global AI Regulations for Enterprises: Risk Classification & What to Do Next\n\n<\/h1>\n <\/div>\n
\n \n \n<\/div>\n <\/div>\n <\/div>\n <\/div>\n <\/div>\n<\/header>\n\n\n\n
\n
\n

Most enterprises are still having some version of this conversation internally: “We’ll deal with AI regulation when it’s actually enforced.” That conversation is over.<\/p>\n\n\n\n

The EU AI Act is not a regulation on the horizon. Prohibited AI practices have been banned since February 2025. Rules for general-purpose AI models took effect in August 2025. And on August 2, 2026, the full weight of high-risk AI requirements comes into force. The fines are not theoretical: up to \u20ac35 million or 7% of global annual turnover – a ceiling that exceeds even GDPR.<\/p>\n\n\n\n

But the more important point isn’t the fine structure. The Act is a classification system, not a blanket ban. It sorts AI applications into risk levels and makes compliance proportionate to potential harm. The challenge – where most enterprises are currently failing – is knowing which systems sit in the high-risk category and building the right governance around them.<\/p>\n\n\n\n

This article maps what matters: the four risk tiers, what each one requires, a practical compliance roadmap, and how global regulations compare. If you’ve already read our piece on Why Enterprise AI Fails in Production<\/a>, you’ll know that governance gaps are where the problems start. This is the framework that closes them.<\/p>\n<\/div>\n\n\n\n

\n
\"EU<\/figure>\n<\/div><\/div>\n<\/div>\n\n\n\n
\n
\n
\n
\n

1. Who Does the EU AI Act Actually Apply To?<\/h2>\n\n\n\n

The EU AI Act (Regulation 2024\/1689)<\/u><\/a> applies to any organisation that develops, deploys, imports, or distributes AI systems whose outputs affect people in the European Union – regardless of where that organisation is headquartered.<\/p>\n\n\n\n

A US fintech whose AI-powered credit tool is used by German customers is in scope. A Swiss bank using AI for loan decisions is in scope. A Vietnamese software firm building AI components for a French enterprise client is in scope. The Act follows the output, not the headquarters.<\/p>\n\n\n\n

The Act distinguishes two primary roles with different obligations:<\/p>\n\n\n\n