What Brussels promised,
tracked against what shipped.

Partially. The Digital Omnibus (Regulation (EU) 2026/1744, in force 27 July 2026) pushed high-risk AI obligations from August 2026 to 2 December 2027 (Annex III) and 2 August 2028 (Annex I). Article 50 transparency duties, the AI literacy requirement, and the original prohibitions took effect on schedule and are already in force.

2 December 2026, when the watermarking requirement for legacy generative AI systems and the new ban on AI-generated non-consensual intimate imagery and CSAM both take effect.

Any provider or deployer placing an AI system on the EU market, or whose AI system's output is used within the EU, regardless of where the company is based — similar to GDPR's extraterritorial reach.

Up to €35 million or 7% of global annual turnover for prohibited-practice violations, up to €15 million or 3% for most other obligations, and up to €7.5 million or 1% for supplying incorrect information to authorities — whichever is higher, with lower caps for SMEs.

The Digital Operational Resilience Act (Regulation (EU) 2022/2554) sets ICT risk-management, incident-reporting and resilience-testing rules for the EU financial sector. It entered into force 16 January 2023 and has applied since 17 January 2025.

Regulation (EU) 2025/327 creates an EU-wide framework for sharing electronic health data, both for patient care (MyHealth@EU) and for research and policy use (HealthData@EU). It enters general application 26 March 2027, with further phases through 2031.

No. EU Radar is independent analysis by Alyona White, not affiliated with the European Commission or any EU institution. Always verify against the consolidated legal text on EUR-Lex before making compliance decisions.