What the EU AI Act requires from August 2026

The EU AI Act has been in force since August 2024, but it never applied all at once. It arrived in stages, and August 2, 2026 was the stage that reaches ordinary products. From that date, the obligations that catch any organization running a chatbot or generating content became enforceable, and the European Commission gained the powers it needs to act on general-purpose AI models.

What actually became enforceable

The rules with the widest reach sit in Article 50, the transparency provisions. Two of them matter for almost anyone shipping an AI feature.

First, disclosure of interaction. A person dealing with an AI system has to be told they are dealing with an AI system, unless that is already obvious to a reasonably well-informed person. In practice this is the requirement that a support chatbot identify itself rather than pass as a human agent.

Second, marking of synthetic output. Providers of AI systems that generate synthetic audio, image, video or text must ensure that the output is marked in a machine-readable format and is detectable as artificially generated or manipulated. The word doing the work is machine-readable. A visible caption saying “made with AI” is not what the article asks for. It asks for a signal that software can read, which is why provenance metadata and watermarking moved from a voluntary industry project to a compliance question in the same month.

Alongside the transparency duties, August 2, 2026 activated the Commission’s enforcement toolkit for general-purpose AI models. The substantive obligations on those providers had already started a year earlier, on August 2, 2025, covering documentation, copyright policy and training-data summaries, with additional risk identification, mitigation and incident reporting for models classed as carrying systemic risk. What changed in 2026 is that the Commission can now use information requests, model access and recall powers to enforce them.

What got postponed

The Act’s most demanding chapter covers high-risk AI systems: the conformity assessments, quality management systems, logging and human oversight requirements for AI used in areas like employment, credit, education and critical infrastructure. Those did not land in August 2026.

A package known as the Digital Omnibus on AI moved them. The European Parliament adopted it on June 16, 2026, and the Council gave final approval on June 29, 2026, deferring the substantive high-risk obligations to December 2027 and August 2028. The transparency provisions and the general-purpose AI enforcement powers were carved out of the delay and took effect on schedule.

The practical read is that the Act’s compliance burden now splits in two. The light, broad layer applies today to a very large number of companies. The heavy, narrow layer applies in late 2027 and 2028 to a much smaller set.

Why the labeling rule is harder than it sounds

The machine-readable marking requirement collided immediately with the state of the technology it assumes.

There are two ways to mark AI output, and they fail differently. Provenance metadata such as C2PA attaches a signed record to a file: robust against tampering, trivially removed by anyone who strips the metadata or takes a screenshot. Statistical watermarking biases the model’s own choices in a pattern a detector can recognize: it survives copying, but it degrades under heavy rewriting, and it can be washed out.

That gap became visible in the same weeks the deadline arrived. Anthropic switched on invisible watermarking in Claude’s output on August 2, 2026, and an MIT-licensed remover targeting Claude, OpenAI and Gemini provenance marks passed 6,000 GitHub stars within days. The obligation falls on the provider to mark the output, not on the provider to guarantee the mark survives contact with the internet, which is the only reason the requirement is workable at all.

The European rules are also no longer the only ones. California’s SB 942 imposes its own labeling and detection-tool duties on large generative AI providers, so a company shipping to both markets is reading two rulebooks that overlap without matching.

What to watch next

Three things will show whether August 2026 changed behavior or paperwork.

The first is enforcement posture. The Commission has the powers now; whether it opens proceedings against a major model provider in the next year is the signal that the general-purpose AI chapter has teeth.

The second is what counts as compliant marking. The Act names the outcome, not the standard. If regulators accept metadata alone, the requirement is weak. If they expect a mark that survives ordinary editing, it becomes a research problem the industry has not solved.

The third is whether the Digital Omnibus deferral holds. High-risk obligations have already moved once. The open question is whether December 2027 is a date or a placeholder.

Related coverage

• EU rules now require your chatbot to say it is a chatbot, the Article 50 disclosure duty as it landed.
• New Claude models now watermark their text invisibly, the provider side of machine-readable marking.
• A tool that strips AI watermarks passed 6,000 GitHub stars, how quickly the marks came off.
• California’s AI transparency law now requires labels and detectors, the parallel US rulebook.
• A third of Apple Music uploads are AI and must now be labeled, labeling arriving in a consumer product.
• How AI watermarks work, and why they can be removed, the mechanics behind the marking requirement.