Deployer
Most SMEs are hereYou use AI tools (ChatGPT, Copilot, a chatbot on your website…) you didn't build.
- Build your teams' AI literacy
Take measures to foster the development of AI literacy among the people who use AI on your behalf. A best-efforts obligation: the regulation does not require you to guarantee a given level.
Art. 4 · since 2 February 2025 - Use no prohibited AI practice
Manipulation, social scoring, exploiting vulnerabilities: these practices are not brought into compliance — they stop.
Art. 5 · since 2 February 2025 - Tell people when it's AI
A deepfake, or AI-generated text published to inform the public, must be disclosed as such — where it is read, not in your legal notice.
Art. 50(4) · since 2 August 2026
Upcoming (3)
- New prohibited practices
New prohibitions join Article 5, including non-consensual intimate imagery.
Art. 5 — 2 December 2026 - Manage your high-risk AI uses
If you use AI to recruit, grade, grant credit or access essential services: follow the system's instructions for use, monitor how it operates, keep effective human oversight and inform workers' representatives before putting it into service at work.
Annex III · Art. 26 — 2 December 2027 - AI embedded in a regulated product
AI used as a safety component of a regulated product (machinery, medical devices…).
Annex I — 2 August 2028


