August is not going to be a dull month in the world of AI regulation, as the enactment of the European Union’s AI Act is not merely a compliance formality; it represents a profound transformation in how businesses implement and use AI technologies. Today, we will look in more detail at what this means for enterprises and how to prepare for 2026.
Focus On: EU AI Act, what’s happening?
The EU AI Act, which came into force on August 1, 2024, introduces a structured regulatory framework that classifies AI applications into three distinct categories based on perceived risks: low risk, high risk, and unacceptable risk.
I can already reassure you that most applications of AI will fall under the low-risk classification, meaning they will not be subjected to rigorous regulatory scrutiny. However, high-risk applications—such as biometric recognition, law enforcement, healthcare, education, and critical infrastructure—will face substantial regulation and scrutiny.
As with all EU regulations the implementation will be phased, in the attempt to balance the need for responsible AI applications while at the same time fostering (or at least not stifling) innovation. The first set of obligations, which focus on prohibiting certain high-risk misuse cases—inclusive of techniques such as social scoring and uncontrolled biometric surveillance—will take effect within six months. This rapid timeline underscores the necessity for businesses to act with immediacy and diligence.
What This Means for Corporates
For leaders within sales and marketing departments, the implications of the AI Act are significant and multifaceted. The regulation not only changes the compliance landscape but also redefines the ways in which companies engage with their customers and the broader market. Increasingly, the integration of AI technologies into daily operations must align with ethical standards, transparency, and accountability—principles that are now enshrined in law.
Three key considerations emerge:
1. Global Accountability: Companies deploying high-risk AI systems will have to navigate new responsibilities, including rigorous risk assessments and quality management protocols. Failure to comply could result in penalties amounting to 7% of global turnover, compelling organizations to integrate compliance into the fabric of their business operations at a global level, similar to what happened years ago with GDPR.
2. Maintaining a Trustworthy Brand: As customers become more aware of data privacy and ethical AI usage, brands that proactively address compliance will gain a competitive advantage. Some, like Dove, are already doing that. In the near future and for a short period of time, highlighting adherence to the AI Act can become a competitive advantage, reinforcing consumer trust in a time when scepticism towards brands is increasing.
3. Operational Adjustments: As the Act introduces a requirement for detailed documentation, corporates will need to reassess their processes to ensure they are ready to meet compliance requirements efficiently. This might require reorganising teams, investing in new technologies and enabling cross-departmental collaborations to maintain compliance within the sales and marketing analytics utilized.
How To Prepare
The upcoming EU AI Act provides an avenue for aligning strategic imperatives with compliance requirements. Here are a few actionable steps that your organization can undertake to not only align with regulatory expectations but also to thrive in the evolving consumer marketplace:
1. Conduct a Comprehensive Risk Assessment: Start with a thorough audit of all AI applications deployed within your organization. Classify each according to the EU Act’s risk tiers and delineate the specific obligations pertinent to them. This foundational understanding will enable targeted strategies for compliance.
2. Develop Robust Documentation: Compile exhaustive documentation for all AI systems governed by the Act. Ensure each AI application includes comprehensive records of training data, governance policies, and operational transparency measures. This documentation will be essential not only for compliance but also for any audit engagements with regulators.
3. Empower Teams with Compliance Education: Training your teams to comprehend the EU AI Act’s implications is fundamental. Run workshops and seminars focusing on the nuances of the regulation, ensuring that members are well-equipped to communicate your commitment to compliance and its ethical ramifications to clients, partners, and stakeholders.
4. Engage Proactively with Regulatory Bodies: Staying current with ongoing developments within the regulatory landscape is paramount. Actively participate in consultations initiated by regulatory entities and contribute to discussions surrounding the Codes of Practice for general-purpose AI. Even if your input is not factored in, you will be privy of the ongoing conversations and general direction the regulatory is following.
5. Leverage Compliance as a Marketing Strategy: As mentioned earlier, you can frame compliance not as an obligation, but as a strategic advantage. Use your adherence to the EU AI Act as a marketing tool, communicating to your target audience your commitment to ethical AI usage, which can create a significant differentiation in the market. Transparency in operations and genuine concern for customer data will serve to enhance brand loyalty.
6. Establish Cross-Functional Task Forces: Create dedicated cross-functional teams that include representatives from compliance, marketing, IT, and legal departments. This collaborative approach will ensure that both operational and communicative strategies align with the rigorous demands of the EU AI Act, ultimately fortifying your business’s resilience to regulatory changes. New roles will also be required, such as the one of Data Ethicist: start scouting for internal resources who can be upskilled.
Follow me
That’s all for this week. To keep up with the latest in generative AI and its relevance to your digital transformation programs, follow me on LinkedIn or subscribe to this newsletter.
Disclaimer: The views and opinions expressed in Chronicles of Change and on my social media accounts are my own and do not necessarily reflect the official policy or position of S&P Global.