1 Aug 2024
Entry into force
Regulation (EU) 2024/1689 enters into force across the EU. The clock starts.
2 Feb 2025
Prohibitions apply
Article 5 (prohibited practices) and Article 4 (AI literacy) become binding. Six months after entry into force.
2 Aug 2025
Governance + GPAI obligations apply
Chapter III §4 (notification), Chapter V (GPAI), Chapter VII (governance), Chapter XII (penalties) become binding.
2 Aug 2026
Most obligations apply
The rest of the Regulation — including Annex III high-risk obligations — becomes binding. Two years after entry into force.
2 Aug 2027
Annex I (regulated-product) high-risk applies
AI systems that are safety components of products already regulated under Annex I get an extra year. Three years after entry into force.
What this means for your roadmap
If you have any system that could land in Annex III, you have until August 2026 — roughly 14 months from now — to be fully audit-ready. That window is shorter than most enterprise procurement cycles.