After years of drafting and a long grace period, the first binding obligations apply. Providers of high-risk systems must maintain risk assessments, logging and human oversight arrangements. Early enforcement is expected to focus on obvious gaps rather than fine distinctions.
What companies are doing
Inventories of AI systems, classification exercises and a lot of lawyers. Several firms report that simply listing everything that counts as an AI system took months. The compliance market has responded with tooling that generates most of the paperwork.
Key takeaways
- High-risk obligations now binding
- System inventories were the first hurdle
- Compliance tooling market is booming
This story is part of our ongoing coverage of policy & privacy. We will update it as more details emerge.
