EU Digital Omnibus on AI Is Now in Force, Moving Annex III High-Risk Obligations to December 2027, July 2026

The EU moved Annex III high-risk AI obligations to 2 December 2027. The date moved. The inventory work did not.

A compliance professional and technology risk analyst review policy and audit documents. — Compliance

Regulation (EU) 2026/1744, the Digital Omnibus on AI, is dated 8 July 2026. Its Official Journal header shows publication on 24 July 2026, and it enters into force on the third day following publication, 27 July 2026. Recital 40 sets the date of application of the high-risk requirements for AI systems classified under Article 6(2) and Annex III at 2 December 2027. This note covers only the dates confirmed against the Official Journal text and leaves other changes in the regulation to a separate review.

GOVERNANCE IMPLICATION

The regulation changes the calendar for Annex III obligations and leaves the obligations themselves in place. A later application date becomes Governance Debt for any team that treats it as a pause on inventory, classification, and documentation work. Roadmaps, vendor contracts, and board reports written against the earlier date carry a date the regulation has replaced, and nothing in the regulation tells an organization where those references sit.

SCENARIO

Hypothetical: A health insurer scheduled its Annex III classification review against the earlier date, then dropped the workstream once the regulation entered into force. By the new application date the insurer cannot show which systems were assessed, by whom, or against which criteria.

THE GOVERNANCE QUESTION

Which of your AI governance milestones were scheduled against the earlier Annex III date, and who owns re-baselining each one against 2 December 2027?

CONTROL GAP

Roadmaps and board reports that cite the earlier Annex III date are not updated by the regulation. Someone has to find and re-baseline each reference.

PRIMARY SOURCE

Regulation (EU) 2026/1744 amending Regulations (EU) 2024/1689, (EU) 2018/1139 and (EU) 2023/1230 (Digital Omnibus on AI)

European Parliament and Council of the European Union

July 24, 2026

Read the primary source ->

Read the next intelligence note.

Back to Compliance

MAY 7, 2026

Compliance

EU AI Act Digital Omnibus Political Agreement Delays Annex III High-Risk Obligations, May 2026

On May 7, 2026, EU legislators reached political agreement on the Digital Omnibus revisions to the EU AI Act. The agreement introduces a 16-month postponement for most high-risk Annex III AI systems, covering employment screening, credit decisions, biometric identification, education, and law enforcement applications, moving the effective deadline to approximately December 2027. Product-embedded high-risk AI systems receive a 12-month postponement to approximately August 2027. Transparency obligations for AI-generated content shift to December 2026 (three-month delay only). The agreement remains subject to formal adoption by the European Parliament and Council. Source: European Commission digital-strategy.ec.europa.eu, updated May 2026.

Read note ->

<- Back to all intelligence notes