{"id":83493,"date":"2026-11-01T10:20:59","date_gmt":"2026-11-01T09:20:59","guid":{"rendered":"https:\/\/blog.richardvanhooijdonk.com\/?p=83493"},"modified":"2026-11-01T10:20:59","modified_gmt":"2026-11-01T08:20:59","slug":"ai-act-after-the-digital-omnibus","status":"publish","type":"post","link":"https:\/\/blog.richardvanhooijdonk.com\/en\/ai-act-after-the-digital-omnibus\/","title":{"rendered":"The AI Act after the Digital Omnibus: what changes for organisations, and when"},"content":{"rendered":"\n<div class=\"wp-block-cover is-light has-black-color has-text-color has-link-color wp-elements-1\" style=\"margin-bottom:30px\"><span aria-hidden=\"true\" class=\"wp-block-cover__background has-cyan-bluish-gray-background-color has-background-dim-20 has-background-dim\"><\/span><div class=\"wp-block-cover__inner-container is-layout-flow wp-block-cover-is-layout-flow\">\n<div class=\"wp-block-group is-vertical is-layout-flex wp-container-core-group-is-layout-2c90304e wp-block-group-is-layout-flex\">\n<h2 class=\"wp-block-heading\">In short<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Digital Omnibus on AI has been in force since 27 July 2026. According to the European Commission, it moves the strict rules for high-risk AI to 2 December 2027 for uses such as hiring and education, and to 2 August 2028 for AI in regulated products. AI literacy remains an obligation, but without a&nbsp;required&nbsp;level.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If your organisation uses AI in hiring, in education or in a product covered by EU product rules, the first question is which deadline applies to you. In 2025 the EU said it wanted to &#8220;simplify&#8221; its AI rules, and some organisations concluded that the AI Act was on hold. It is not. The Digital Omnibus moved the strict rules for high-risk AI, but the prohibitions and the AI literacy obligation have applied since February 2025, the rules for general-purpose AI models since August 2025 and the transparency rules since August 2026. Enforcement has started. In my view, how well an organisation deals with changes like these depends above all on people who are open to AI and look at it critically at the same time. Everything below comes from the European Commission and its AI Act Service Desk. Where something was only proposed, or is not yet decided, we&nbsp;say&nbsp;so.<\/p>\n\n\n\n<ul class=\"wp-block-list\" style=\"margin-top:0!important;margin-bottom:0!important\">\n<li>A new ban on &#8216;nudification&#8217; apps, AI that generates non-consensual sexually explicit content, applies from 2&nbsp;December&nbsp;2026.<\/li>\n\n\n<li>Existing high-risk AI systems used by public authorities must comply by 2&nbsp;August&nbsp;2030.<\/li>\n\n\n<li>Each Member State should have at least one AI regulatory sandbox operational by 2&nbsp;August&nbsp;2027.<\/li>\n\n\n<li>On 19 May 2026 the Commission published draft guidelines on what counts as high-risk; final guidelines are due by the end&nbsp;of&nbsp;2026.<\/li>\n\n\n<li>On 19 October 2026 the first harmonised standard for the AI Act was published:&nbsp;EN&nbsp;18286:2026.<\/li>\n<\/ul>\n<\/div>\n<\/div><\/div>\n\n\n\n<div class=\"rvh-lezing rvh-lezing-boven\" style=\"margin:0 0 30px;padding:18px 20px 8px;border-left:4px solid #00b4ee;background:#f4f8fb\"><p style=\"margin:0 0 4px;font-size:12px;font-weight:700;letter-spacing:.06em;text-transform:uppercase;color:#7a8799\">Keynote by Richard<\/p><p style=\"margin:0 0 14px;font-size:16px;line-height:1.55;color:#2b3445\"><strong>The Organisation of the Future.<\/strong> Organisational change at speed: future scenarios, experiments, ecosystems and the AI-first organisation.<\/p><p style=\"margin:0\"><a href=\"https:\/\/richardvanhooijdonk.com\/en\/keynote-the-organisation-of-the-future?utm_source=blog&amp;utm_medium=artikel&amp;utm_campaign=ai-act-after-the-digital-omnibus&amp;utm_content=boven-lezing\" style=\"display:inline-block;font-family:Poppins,sans-serif;font-weight:600;font-size:14px;line-height:1.3;padding:12px 18px;border-radius:6px;text-decoration:none;margin:0 10px 10px 0;background:#00b4ee;color:#fff\">View the keynote&nbsp;\u2192<\/a><a href=\"https:\/\/richardvanhooijdonk.com\/en\/?utm_source=blog&amp;utm_medium=artikel&amp;utm_campaign=ai-act-after-the-digital-omnibus&amp;utm_content=boven-alle#lezingen\" style=\"font-size:14px;color:#2566C4;font-weight:600;text-decoration:none;white-space:nowrap;display:inline-block;margin:0 0 10px\">All keynotes<\/a><\/p><\/div>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What is the Digital Omnibus?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-style:italic;font-weight:700\">The Omnibus is a targeted simplification of the AI Act, in force across the EU since 27&nbsp;July&nbsp;2026.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"margin-bottom:6px\">The Digital Omnibus on AI is an EU regulation that amends the AI Act, Regulation (EU) 2024\/1689. The Commission calls it a &#8220;targeted simplification&#8221; of the AI rulebook. The steps, according to&nbsp;the <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/regulatory-framework-ai\" target=\"_blank\" rel=\"noreferrer noopener\">European&nbsp;Commission<\/a>:<\/p>\n\n\n\n<ul class=\"wp-block-list\" style=\"margin-top:0!important;margin-bottom:30px!important\">\n<li style=\"font-weight:400\"><strong>19 November 2025<\/strong><br>the Commission presented the <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/library\/digital-omnibus-ai-regulation-proposal\" target=\"_blank\" rel=\"noreferrer noopener\">proposal<\/a>, as part of a wider package to simplify EU&nbsp;digital&nbsp;rules.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>7 May 2026<\/strong><br>the European Parliament and the Council of the EU reached a <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/news\/eu-agrees-simplify-ai-rules-boost-innovation-and-ban-nudification-apps-protect-citizens\" target=\"_blank\" rel=\"noreferrer noopener\">political agreement<\/a>. The Commission noted that this came &#8220;only five months&#8221; after&nbsp;its&nbsp;proposal.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>27 July 2026<\/strong><br>the amended rules <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/news\/ai-omnibus-enters-force\" target=\"_blank\" rel=\"noreferrer noopener\">entered into force<\/a> across the EU. The Commission links to the <a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=OJ:L_202601744\" target=\"_blank\" rel=\"noreferrer noopener\">final text<\/a> in the Official Journal of the&nbsp;European&nbsp;Union.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">So this is no longer a proposal. The AI Act Service Desk now shows the AI Act &#8220;as at 27 July 2026&#8221;, with the&nbsp;changes&nbsp;marked.<\/p>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Which deadlines have moved?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-style:italic;font-weight:700\">The rules for high-risk AI now apply from 2 December 2027 and 2&nbsp;August&nbsp;2028.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"margin-bottom:6px\">The most important change is the timeline for high-risk AI. Under the original AI Act, these rules were set to apply on 2 August 2026 and 2 August 2027, according to the Commission&#8217;s <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/faq?combine=&amp;faq_category_id=99\" target=\"_blank\" rel=\"noreferrer noopener\">AI Act Service Desk<\/a>. After the Omnibus, <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-113\" target=\"_blank\" rel=\"noreferrer noopener\">Article 113<\/a> gives two new,&nbsp;fixed&nbsp;dates:<\/p>\n\n\n\n<ul class=\"wp-block-list\" style=\"margin-top:0!important;margin-bottom:30px!important\">\n<li style=\"font-weight:400\"><strong>2 December 2027<\/strong><br>for high-risk AI systems listed in Annex III. The Commission names areas such as biometrics, critical infrastructure, education, employment, migration, asylum and border control. Its policy page also lists AI used for access to essential services, such as&nbsp;credit&nbsp;scoring.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>2 August 2028<\/strong><br>for high-risk AI that is part of products covered by EU product rules (Annex I). The Commission&#8217;s examples are lifts&nbsp;and&nbsp;toys.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">From those dates, high-risk systems must meet strict requirements. The Commission lists among others risk assessment and mitigation, high-quality datasets to reduce discriminatory outcomes, logging of activity, detailed documentation, clear information to the deployer, human oversight, and robustness, cybersecurity and accuracy. Why the delay? According to the Commission, the sequencing &#8220;will help ensure that technical standards and other support tools are in place before the rules start to apply.&#8221; Those standards are now starting to arrive. On 19 October 2026, the Commission <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/library\/first-harmonised-standard-supporting-ai-act-published-official-journal\" target=\"_blank\" rel=\"noreferrer noopener\">published the reference<\/a> to the first harmonised standard for the AI Act in the Official Journal: EN 18286:2026, on quality management systems. Providers that apply it benefit from a presumption of conformity with Article 17. Further standards are &#8220;expected&nbsp;to&nbsp;follow&#8221;.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">One detail for systems that are already in use. Under <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-111\" target=\"_blank\" rel=\"noreferrer noopener\">Article 111<\/a>, high-risk systems placed on the market before the new dates fall under the rules only if their design changes significantly after that date. High-risk systems intended for use by public authorities must comply by 2 August 2030 in&nbsp;any&nbsp;case.<\/p>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What became of the proposal?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-style:italic;font-weight:700\">The proposal linked the start to standards, but the final text sets&nbsp;fixed&nbsp;dates.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is where many older articles and summaries go wrong, because they describe the proposal, not the&nbsp;final&nbsp;text.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The proposal (November 2025).<\/strong> The Commission wanted to link the start of the high-risk rules to the availability of standards and support tools. According to the AI Act Service Desk, the rules would start after a transition period once the Commission confirmed that support was available, with an end date: Annex III rules would apply &#8220;maximum 16 months later than originally envisaged&#8221;, Annex I rules a maximum of 12&nbsp;months&nbsp;later.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>The final text (July 2026).<\/strong> Article 113 now contains fixed dates: 2 December 2027 and 2 August 2028. In the Commission&#8217;s words, the agreement &#8220;sets a clear implementation timeline&#8221;. Those dates match the maximum delay of the proposal. An article that says the high-risk rules start &#8220;once standards are ready&#8221; describes&nbsp;the&nbsp;proposal.<\/p>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What changed for AI literacy?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-style:italic;font-weight:700\">AI literacy remains an obligation, but the law no longer requires a&nbsp;specific&nbsp;level.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">AI literacy affects almost every organisation, because it applies to all providers and deployers of AI systems, not only to high-risk systems. The amended <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-4\" target=\"_blank\" rel=\"noreferrer noopener\">Article 4<\/a> still says that providers and deployers of AI systems &#8220;shall take measures to support the development of AI literacy&#8221; of their staff and others who operate or use AI on their behalf. Article 4(1) now also states that this obligation &#8220;does not require providers or deployers to guarantee any specific level of AI literacy of&nbsp;any&nbsp;individual.&#8221;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"margin-bottom:6px\">The Commission summarises it like this in its <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/faqs\/ai-literacy-questions-answers\" target=\"_blank\" rel=\"noreferrer noopener\">AI literacy Q&amp;A<\/a>: AI literacy &#8220;remains an obligation for providers and deployers of AI systems, but no specific - or &#8216;sufficient&#8217; - level is mandated.&#8221; What this means in practice, according to the&nbsp;same&nbsp;Q&amp;A:<\/p>\n\n\n\n<ul class=\"wp-block-list\" style=\"margin-top:0!important;margin-bottom:30px!important\">\n<li style=\"font-weight:400\">The obligation has applied since 2 February 2025. National market surveillance authorities supervise and enforce it from 2&nbsp;August&nbsp;2026.<\/li>\n\n\n<li style=\"font-weight:400\">There is no need for a certificate. Organisations can keep an internal record of trainings and&nbsp;other&nbsp;initiatives.<\/li>\n\n\n<li style=\"font-weight:400\">There is no single required format or mandatory training. What is appropriate depends on the role of the organisation, the risk of its AI systems and the knowledge of the&nbsp;people&nbsp;involved.<\/li>\n\n\n<li style=\"font-weight:400\">For deployers of high-risk AI systems, the obligation to make sure staff are trained to carry out human oversight &#8220;remains&nbsp;in&nbsp;place&#8221;.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>What is not yet there.<\/strong> Under Article 4(2), the Commission will publish practical examples of how to comply. Under Article 4(3), the European AI Board will adopt recommendations, taking European competence frameworks into account. Neither has been published yet, as far as these sources show. Until then, the Commission&#8217;s living repository of AI literacy practices offers examples, but the Commission notes that copying them does not automatically mean you comply. That makes AI literacy a management question more than a box to tick. We looked at the leadership side in <a href=\"https:\/\/blog.richardvanhooijdonk.com\/en\/how-leaders-can-guide-organisations-through-ethical-ai-challenges\/\">how leaders can guide organisations through ethical&nbsp;AI&nbsp;challenges<\/a>.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\" style=\"margin-bottom:30px!important\"><img decoding=\"async\" src=\"https:\/\/richardvanhooijdonk.com\/assets\/fotos\/richard-028.a8e81e4679.webp\" alt=\"Richard van Hooijdonk during a keynote, in front of a screen showing a cityscape\"\/><\/figure>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What else did the Omnibus do?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-style:italic;font-weight:700\">The Omnibus also bans nudification apps and extends relief to&nbsp;growing&nbsp;companies.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"margin-bottom:6px\">According to the Commission&#8217;s <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/news\/ai-omnibus-enters-force\" target=\"_blank\" rel=\"noreferrer noopener\">overview of the changes<\/a>, the&nbsp;Omnibus&nbsp;also:<\/p>\n\n\n\n<ul class=\"wp-block-list\" style=\"margin-top:0!important;margin-bottom:30px!important\">\n<li style=\"font-weight:400\"><strong>Bans &#8220;nudification&#8221; apps.<\/strong><br>A new prohibition covers AI systems that generate non-consensual sexually explicit and intimate content or child sexual abuse material. According to the Service Desk timeline, it applies from 2&nbsp;December&nbsp;2026.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Extends relief for growing companies.<\/strong><br>Some simplified obligations for SMEs, such as simplified technical documentation, now also apply to small mid-cap companies (SMCs). At the proposal stage, the Commission estimated that this would make implementation easier for &#8220;an additional 8,250 companies&nbsp;in&nbsp;Europe&#8221;.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Expands sandboxes.<\/strong><br>More companies get access to regulatory sandboxes, including an EU-level sandbox. According to the Service Desk timeline, each Member State should have at least one AI regulatory sandbox operational by 2&nbsp;August&nbsp;2027.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Simplifies registration.<\/strong><br>In the Commission&#8217;s words, it &#8220;simplifies obligation to register exempted AI systems in the EU&nbsp;central&nbsp;database&#8221;.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Allows bias detection.<\/strong><br>Providers and deployers may process special categories of personal data to detect and correct bias, but under <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-4a\" target=\"_blank\" rel=\"noreferrer noopener\">Article 4a<\/a> only where strictly necessary and subject to&nbsp;appropriate&nbsp;safeguards.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Strengthens the AI Office.<\/strong><br>The AI Office gets more oversight of certain AI systems, including those built on general-purpose AI models and those embedded in large online platforms and&nbsp;search&nbsp;engines.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Clarifies overlaps.<\/strong><br>The relation between the AI Act and other EU laws, in particular the Machinery Regulation, is clarified to avoid&nbsp;double&nbsp;rules.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What did not change?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-style:italic;font-weight:700\">The prohibitions, the transparency rules and the rules for general-purpose AI stayed&nbsp;in&nbsp;place.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Quite a lot. <strong>The prohibitions.<\/strong> Prohibitions 1 to 8, such as social scoring and emotion recognition in workplaces and education, have applied since February 2025, according to the <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/regulatory-framework-ai\" target=\"_blank\" rel=\"noreferrer noopener\">Commission<\/a>. The Omnibus added a ninth. <strong>Transparency.<\/strong> The transparency rules in <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-50\" target=\"_blank\" rel=\"noreferrer noopener\">Article 50<\/a> apply from August 2026. People must be told when they interact with an AI system, unless that is obvious, at the latest at the first interaction. Deepfakes must be disclosed. There is one transition: providers of generative AI systems that were on the market before 2 August 2026 have until 2 December 2026 to make sure their output is marked in a machine-readable way and detectable as AI-generated&nbsp;(Article&nbsp;111(4)).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>General-purpose AI.<\/strong> The rules for providers of general-purpose AI models have applied since August 2025. <strong>Enforcement.<\/strong> According to the <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/timeline\/timeline-implementation-eu-ai-act\" target=\"_blank\" rel=\"noreferrer noopener\">AI Act Service Desk timeline<\/a>, enforcement started on 2 August 2026, at national and EU level, for general-purpose AI models, prohibitions, transparency rules and AI literacy. From that date, the AI Office and national authorities are responsible for supervising and enforcing the&nbsp;AI&nbsp;Act.<\/p>\n\n\n\n<p class=\"rvh-zie wp-block-paragraph\" style=\"font-size:14px !important;line-height:1.5 !important;color:#7a8799 !important;margin-top:-8px !important\">\u2192 <a href=\"https:\/\/blog.richardvanhooijdonk.com\/en\/ai-in-government-netherlands\/\" style=\"color:#7a8799 !important;text-decoration:underline;text-underline-offset:3px\">Read more: AI in government: what Dutch municipalities and central government are doing now, and what the AI Act asks<\/a><\/p>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What is still uncertain?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-style:italic;font-weight:700\">The law is settled; what is still to come is mostly guidance, such as standards&nbsp;and&nbsp;guidelines.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"margin-bottom:6px\">Five things&nbsp;to&nbsp;watch:<\/p>\n\n\n\n<ul class=\"wp-block-list\" style=\"margin-top:0!important;margin-bottom:30px!important\">\n<li style=\"font-weight:400\"><strong>More harmonised standards.<\/strong><br>Only one has been published so far (EN 18286:2026). The Commission says more&nbsp;are&nbsp;expected.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Guidelines on high-risk requirements.<\/strong><br>The Commission says it will publish guidelines on the requirements and obligations in Articles 8 to 15 and&nbsp;Article&nbsp;25.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Guidelines on what counts as high-risk.<\/strong><br>On 19 May 2026 the Commission published <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/consultations\/targeted-consultation-draft-guidelines-classification-high-risk-artificial-intelligence-systems\" target=\"_blank\" rel=\"noreferrer noopener\">draft guidelines<\/a> with practical examples of AI systems that do or do not fall under high-risk. The consultation ran until 23 July 2026; according to the Commission, the final guidelines will be adopted by the end&nbsp;of&nbsp;2026.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>AI literacy recommendations and examples.<\/strong><br>Article 4 provides for recommendations from the AI Board and practical examples from the Commission; the Commission&#8217;s Q&amp;A describes both as still&nbsp;to&nbsp;come.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>National enforcement in practice.<\/strong><br>Supervision of AI literacy lies with national market surveillance authorities. How strictly each authority will enforce, and what it will ask for, is not set out in&nbsp;these&nbsp;sources.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What should you do now?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-style:italic;font-weight:700\">Use the extra time until 2 December 2027 and keep AI&nbsp;literacy&nbsp;going.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">These steps follow from the dates above. They are practical, not&nbsp;legal&nbsp;advice.<\/p>\n\n\n\n<ol class=\"wp-block-list\" style=\"margin-top:0!important;margin-bottom:30px!important\">\n<li style=\"font-weight:400\"><strong>Start with the AI-first organisation.<\/strong><br>Agree who owns AI in your organisation and who decides where it is used. Make clear who is responsible when AI plays a role in a high-risk area of Annex III, such as employment or education. Also list your processes, from recruitment to customer contact, and note per task whether AI does it or will do it, and which tasks stay with people. That also shows where Annex III comes&nbsp;into&nbsp;play.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Use the extra time.<\/strong><br>For Annex III systems you have until 2 December 2027. Risk management, documentation and human oversight take time to put&nbsp;in&nbsp;place.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Keep AI literacy going.<\/strong><br>The obligation is softer, but it has not gone away, and authorities can now supervise it. Train people in a way that fits their role and the risks, and keep a simple&nbsp;internal&nbsp;record.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Train for human oversight where it matters.<\/strong><br>If you deploy high-risk AI, staff must be able to carry out human oversight. That duty did&nbsp;not&nbsp;change.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Make someone responsible for transparency.<\/strong><br>People must be told when they are talking to AI, and deepfakes must be labelled. If you offer a generative AI system that was on the market before August 2026, note the 2 December 2026 deadline for&nbsp;machine-readable&nbsp;marking.<\/li>\n\n\n<li style=\"font-weight:400\"><strong>Public bodies: 2030 applies to existing systems.<\/strong><br>High-risk systems for public authorities that were on the market before the new dates must comply by 2 August 2030. New systems must comply earlier, from 2 December 2027 for Annex III uses. We looked at what governments get right and wrong with AI in <a href=\"https:\/\/blog.richardvanhooijdonk.com\/en\/how-governments-can-get-ai-right-and-how-it-might-go-spectacularly-wrong\/\">how governments can get AI right, and how it might go&nbsp;spectacularly&nbsp;wrong<\/a>.<\/li>\n<\/ol>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Behind each of these steps are people who have to put them into practice. I think AI literacy grows when staff are allowed to try and experiment with new technology, in a way that fits their role. I would advise managers to give that enthusiasm room and ask for a critical eye at the same time, so that people can really carry out&nbsp;human&nbsp;oversight.<\/p>\n\n\n\n<div class=\"rvh-lezing rvh-lezing-onder\" style=\"margin:0 0 30px;padding:22px 20px 12px;background:#f4f8fb;border-radius:8px\"><p style=\"margin:0 0 6px;font-size:20px;font-weight:700;line-height:1.3;color:#2b3445\">Richard speaks on this topic<\/p><p style=\"margin:0 0 16px;font-size:16px;line-height:1.55;color:#2b3445\"><strong>The Organisation of the Future.<\/strong> Organisational change at speed: future scenarios, experiments, ecosystems and the AI-first organisation.<\/p><p style=\"margin:0\"><a href=\"https:\/\/richardvanhooijdonk.com\/en\/keynote-the-organisation-of-the-future?utm_source=blog&amp;utm_medium=artikel&amp;utm_campaign=ai-act-after-the-digital-omnibus&amp;utm_content=onder-lezing\" style=\"display:inline-block;font-family:Poppins,sans-serif;font-weight:600;font-size:14px;line-height:1.3;padding:12px 18px;border-radius:6px;text-decoration:none;margin:0 10px 10px 0;background:#00b4ee;color:#fff;border:2px solid #00b4ee\">View the keynote&nbsp;\u2192<\/a><a href=\"https:\/\/richardvanhooijdonk.com\/en\/?utm_source=blog&amp;utm_medium=artikel&amp;utm_campaign=ai-act-after-the-digital-omnibus&amp;utm_content=onder-home\" style=\"display:inline-block;font-family:Poppins,sans-serif;font-weight:600;font-size:14px;line-height:1.3;padding:12px 18px;border-radius:6px;text-decoration:none;margin:0 10px 10px 0;background:#fff;color:#0089b8;border:2px solid #00b4ee\">Meet Richard<\/a><\/p><p style=\"margin:2px 0 8px\"><a href=\"https:\/\/richardvanhooijdonk.com\/en\/?utm_source=blog&amp;utm_medium=artikel&amp;utm_campaign=ai-act-after-the-digital-omnibus&amp;utm_content=onder-alle#lezingen\" style=\"font-size:14px;color:#2566C4;font-weight:600;text-decoration:none;white-space:nowrap;margin-right:18px\">All keynotes<\/a><a href=\"https:\/\/richardvanhooijdonk.com\/en\/keynote-the-organisation-of-the-future?utm_source=blog&amp;utm_medium=artikel&amp;utm_campaign=ai-act-after-the-digital-omnibus&amp;utm_content=onder-aanvraag#aanvragen\" style=\"font-size:14px;color:#2566C4;font-weight:600;text-decoration:none;white-space:nowrap\">Check availability<\/a><\/p><\/div>\n\n\n\n<div style=\"height:15px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Frequently asked questions<\/h2>\n\n\n\n<details class=\"wp-block-details rvh-faq is-layout-flow wp-block-details-is-layout-flow\" style=\"border-bottom:1px solid #d9dee5;padding:12px 0;margin:0\"><summary style=\"cursor:pointer;font-weight:700\">Has the EU AI Act been postponed?<\/summary>\n<p class=\"wp-block-paragraph\" style=\"margin:8px 0 4px\">No. The AI Act has applied since 2 August 2026, with some parts earlier. The Digital Omnibus mainly moved the rules for high-risk AI: to 2 December 2027 for Annex III uses and to 2 August 2028 for AI in regulated products. Separate deadlines also apply to regulatory sandboxes (2 August 2027) and to machine-readable marking by systems already on the market (2 December 2026). Prohibitions, transparency rules, AI literacy and the rules for general-purpose AI&nbsp;models&nbsp;apply.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details rvh-faq is-layout-flow wp-block-details-is-layout-flow\" style=\"border-bottom:1px solid #d9dee5;padding:12px 0;margin:0\"><summary style=\"cursor:pointer;font-weight:700\">Is AI literacy still mandatory?<\/summary>\n<p class=\"wp-block-paragraph\" style=\"margin:8px 0 4px\">Yes. Article 4 still requires providers and deployers of AI systems to take measures to support the AI literacy of their staff. What changed is that no specific or &#8220;sufficient&#8221; level is required. National authorities supervise the rule from 2 August 2026. A certificate is&nbsp;not&nbsp;needed.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details rvh-faq is-layout-flow wp-block-details-is-layout-flow\" style=\"border-bottom:1px solid #d9dee5;padding:12px 0;margin:0\"><summary style=\"cursor:pointer;font-weight:700\">Do the dates apply to existing AI?<\/summary>\n<p class=\"wp-block-paragraph\" style=\"margin:8px 0 4px\">For high-risk systems already on the market before the new dates, the rules apply only if their design changes significantly from that date. High-risk systems used by public authorities must comply by 2 August 2030 in&nbsp;any&nbsp;case.<\/p>\n<\/details>\n\n\n\n<details class=\"wp-block-details rvh-faq is-layout-flow wp-block-details-is-layout-flow\" style=\"border-bottom:1px solid #d9dee5;padding:12px 0;margin:0\"><summary style=\"cursor:pointer;font-weight:700\">Do small companies get an exemption?<\/summary>\n<p class=\"wp-block-paragraph\" style=\"margin:8px 0 4px\">The Commission&#8217;s overview describes relief, not a general exemption. Some simplified obligations for SMEs, such as simplified technical documentation, were extended to small mid-cap companies. The Commission and Member States must also support SMEs in particular with AI literacy&nbsp;(Article&nbsp;4(2)).<\/p>\n<\/details>\n\n\n\n<div style=\"height:45px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Where should you start?<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\" style=\"font-style:italic;font-weight:700\">Put the question of who owns AI on the agenda of your next&nbsp;management&nbsp;meeting.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The question is simple: who owns AI in our organisation, and how ready are our people for December 2027? Pair that with a short plan for AI literacy that fits your teams, and agree who keeps watch wherever customers or citizens meet AI. The Omnibus gave organisations more time and more clarity. It did not give them a reason to wait. Organisations that start building the AI-first organisation now will be ahead later, not behind. How leaders steer their organisations through changes like these is a theme in the keynote on <a href=\"https:\/\/richardvanhooijdonk.com\/en\/keynote-leadership-and-management?utm_source=blog&amp;utm_medium=artikel&amp;utm_campaign=ai-act-after-the-digital-omnibus\" target=\"_blank\" rel=\"noreferrer noopener\">leadership and management<\/a>. The wider shift that AI brings is the subject of the keynote on <a href=\"https:\/\/richardvanhooijdonk.com\/en\/keynote-the-ai-revolution?utm_source=blog&amp;utm_medium=artikel&amp;utm_campaign=ai-act-after-the-digital-omnibus\" target=\"_blank\" rel=\"noreferrer noopener\">the&nbsp;AI&nbsp;revolution<\/a>.<\/p>\n\n\n\n<div class=\"rvh-bio\" style=\"display:flex;gap:14px;align-items:center;margin:28px 0 8px;padding-top:16px;border-top:1px solid #e3e6ea\"><picture><source srcset=\"https:\/\/blog.richardvanhooijdonk.com\/wp-content\/uploads\/2024\/10\/RichardVanHooijdonk_3787-1-300x197.webp \"  type=\"image\/webp\"><img decoding=\"async\" src=\"https:\/\/blog.richardvanhooijdonk.com\/wp-content\/uploads\/2024\/10\/RichardVanHooijdonk_3787-1-300x197.jpg\" alt=\"Richard van Hooijdonk\" width=\"76\" height=\"76\" class=\"skip-lazy sp-no-webp\" data-no-lazy=\"1\" style=\"width:76px!important;min-width:76px!important;max-width:76px!important;height:76px!important;border-radius:50%;object-fit:cover;flex:none\"><\/picture><p style=\"margin:0;font-size:14px;line-height:1.6;color:#6b7686\"><a href=\"https:\/\/richardvanhooijdonk.com\/en\/about-richard?utm_source=blog&#038;utm_medium=bio&#038;utm_campaign=ai-act-after-the-digital-omnibus\" style=\"color:#2b3445;font-weight:600;text-decoration:none\">Richard van Hooijdonk<\/a> is a trend watcher, futurist and international keynote speaker. Many trend watchers and futurists look at the future from a distance. Richard van Hooijdonk lives in it. His team consists of people and AI agents, and he has several chips implanted in his body. He has given more than 3,000 keynotes in more than 30 countries. <a href=\"https:\/\/richardvanhooijdonk.com\/en\/?utm_source=blog&#038;utm_medium=bio-keynotes&#038;utm_campaign=ai-act-after-the-digital-omnibus#lezingen\" style=\"color:#2566C4;font-weight:600;text-decoration:none;white-space:nowrap\">View his keynotes&nbsp;\u2192<\/a><\/p><\/div>\n","protected":false},"excerpt":{"rendered":"<p>The Digital Omnibus moved the AI Act&#8217;s high-risk deadlines to December 2027 and August 2028. What changed, what did not, and what to do now.<\/p>\n","protected":false},"author":11,"featured_media":83494,"parent":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_coblocks_attr":"","_coblocks_dimensions":"","_coblocks_responsive_height":"","_coblocks_accordion_ie_support":"","footnotes":""},"categories":[2876],"tags":[],"article-type":[],"trends":[],"class_list":["post-83493","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-management-en"],"_links":{"self":[{"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/posts\/83493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/users\/11"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/comments?post=83493"}],"version-history":[{"count":1,"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/posts\/83493\/revisions"}],"predecessor-version":[{"id":83528,"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/posts\/83493\/revisions\/83528"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/media\/83494"}],"wp:attachment":[{"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/media?parent=83493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/categories?post=83493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/tags?post=83493"},{"taxonomy":"article-type","embeddable":true,"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/article-type?post=83493"},{"taxonomy":"trends","embeddable":true,"href":"https:\/\/blog.richardvanhooijdonk.com\/en\/wp-json\/wp\/v2\/trends?post=83493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}