{"id":6130,"date":"2026-10-21T10:45:29","date_gmt":"2026-10-21T10:45:29","guid":{"rendered":"https:\/\/www.arivonix.ai\/blog\/?p=6130"},"modified":"2026-10-21T10:59:57","modified_gmt":"2026-10-21T10:59:57","slug":"eu-ai-act-timeline","status":"publish","type":"post","link":"https:\/\/www.arivonix.ai\/blog\/eu-ai-act-timeline\/","title":{"rendered":"EU AI Act Timeline: Why December 2027 Is Closer Than It Looks for Insurers"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"6130\" class=\"elementor elementor-6130\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3407205 e-flex e-con-boxed e-con e-parent\" data-id=\"3407205\" data-element_type=\"container\" data-e-type=\"container\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-2fb1f62 elementor-widget elementor-widget-text-editor\" data-id=\"2fb1f62\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>For most of the past two years, every EU AI Act timeline that compliance teams planned around pointed to one date: August 2, 2026. That&#8217;s when the rules for high-risk AI systems were due to start.<\/p><p>Then the date moved. The Digital Omnibus on AI, <a href=\"https:\/\/eur-lex.europa.eu\/eli\/reg\/2026\/1744\/oj\" target=\"_blank\" rel=\"noopener\">Regulation (EU) 2026\/1744<\/a>, came into force on July 27, 2026. It pushed the Annex III high-risk obligations back 16 months, to December 2, 2027.<\/p><p>It&#8217;s tempting to treat that as breathing room and quietly move budget elsewhere. We think that would be a mistake, especially for insurers.<\/p><p>The EU delayed the rules because regulators weren&#8217;t ready. Standards and guidance were running late, and so were national supervisors. The requirements themselves didn&#8217;t get any lighter. Life and health insurance pricing models are still high-risk, and the logging and data work behind them still takes months to build.<\/p><p>For an insurer, the more useful planning question is what you&#8217;ll need to show a supervisor on December 2, 2027, and how much of that can only come from months of operating history.<\/p><h2><strong>EU AI Act Implementation Timeline (2026 Update)\u00a0<\/strong><\/h2><p>Here&#8217;s the full EU AI Act timeline as it stands after the Omnibus, based on the European Commission&#8217;s <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/timeline\/timeline-implementation-eu-ai-act\" target=\"_blank\" rel=\"noopener\">AI Act Service Desk<\/a>.<\/p><p>The Omnibus is the EU&#8217;s simplification package for the Act. Alongside the date changes, it extends some SME relief to small mid-cap companies and adds two new prohibitions. The core high-risk framework stays as it was.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-418a61a elementor-widget elementor-widget-html\" data-id=\"418a61a\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"html.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\r\n<!-- EU AI ACT TIMELINE: WORDPRESS-READY RESPONSIVE TABLE -->\r\n<div class=\"euai-embed\">\r\n  <div class=\"euai-table-wrap\">\r\n    <table class=\"euai-table\" aria-label=\"EU AI Act timeline\">\r\n      <thead>\r\n        <tr>\r\n          <th scope=\"col\">Date<\/th>\r\n          <th scope=\"col\">What applies<\/th>\r\n          <th scope=\"col\">Status<\/th>\r\n        <\/tr>\r\n      <\/thead>\r\n      <tbody>\r\n        <tr>\r\n          <td data-label=\"Date\"><strong>Aug 1, 2024<\/strong><\/td>\r\n          <td data-label=\"What applies\">AI Act enters into force<\/td>\r\n          <td data-label=\"Status\">In effect<\/td>\r\n        <\/tr>\r\n        <tr>\r\n          <td data-label=\"Date\"><strong>Feb 2, 2025<\/strong><\/td>\r\n          <td data-label=\"What applies\">Prohibited AI practices (Article 5) and the AI literacy duty (Article 4) apply<\/td>\r\n          <td data-label=\"Status\">In effect<\/td>\r\n        <\/tr>\r\n        <tr>\r\n          <td data-label=\"Date\"><strong>Aug 2, 2025<\/strong><\/td>\r\n          <td data-label=\"What applies\">Obligations for general-purpose AI (GPAI) model providers begin; member states due to name national authorities and set penalty rules<\/td>\r\n          <td data-label=\"Status\">In effect<\/td>\r\n        <\/tr>\r\n        <tr>\r\n          <td data-label=\"Date\"><strong>Jul 27, 2026<\/strong><\/td>\r\n          <td data-label=\"What applies\">Digital Omnibus on AI (Regulation (EU) 2026\/1744) enters into force<\/td>\r\n          <td data-label=\"Status\">In effect<\/td>\r\n        <\/tr>\r\n        <tr>\r\n          <td data-label=\"Date\"><strong>Aug 2, 2026<\/strong><\/td>\r\n          <td data-label=\"What applies\">Article 50 transparency duties apply; Commission can start fining GPAI model providers<\/td>\r\n          <td data-label=\"Status\">In effect<\/td>\r\n        <\/tr>\r\n        <tr>\r\n          <td data-label=\"Date\"><strong>Dec 2, 2026<\/strong><\/td>\r\n          <td data-label=\"What applies\">New prohibitions on AI-generated non-consensual intimate imagery and child sexual abuse material; Article 50(2) content-marking deadline for generative AI systems already on the market before Aug 2, 2026<\/td>\r\n          <td data-label=\"Status\">Upcoming<\/td>\r\n        <\/tr>\r\n        <tr>\r\n          <td data-label=\"Date\"><strong>Aug 2, 2027<\/strong><\/td>\r\n          <td data-label=\"What applies\">GPAI models placed on the market before Aug 2, 2025 must comply; each member state needs at least one AI regulatory sandbox<\/td>\r\n          <td data-label=\"Status\">Upcoming<\/td>\r\n        <\/tr>\r\n        <tr>\r\n          <td data-label=\"Date\"><strong>Dec 2, 2027<\/strong><\/td>\r\n          <td data-label=\"What applies\">Annex III high-risk obligations apply, including life and health insurance risk assessment and pricing<\/td>\r\n          <td data-label=\"Status\">Moved from Aug 2, 2026<\/td>\r\n        <\/tr>\r\n        <tr>\r\n          <td data-label=\"Date\"><strong>Aug 2, 2028<\/strong><\/td>\r\n          <td data-label=\"What applies\">Annex I high-risk obligations apply to AI built into regulated products<\/td>\r\n          <td data-label=\"Status\">Moved from Aug 2, 2027<\/td>\r\n        <\/tr>\r\n      <\/tbody>\r\n    <\/table>\r\n  <\/div>\r\n<\/div>\r\n\r\n<style>\r\n.euai-embed,\r\n.euai-embed * {\r\n  box-sizing: border-box !important;\r\n}\r\n\r\n.euai-embed {\r\n  width: 100% !important;\r\n  max-width: 100% !important;\r\n  margin: 0 !important;\r\n  padding: 0 !important;\r\n  color: #17233f !important;\r\n  font-family: Arial, Helvetica, sans-serif !important;\r\n  font-size: 14px !important;\r\n  line-height: 1.4 !important;\r\n}\r\n\r\n.euai-embed .euai-table-wrap {\r\n  width: 100% !important;\r\n  max-width: 100% !important;\r\n  margin: 0 !important;\r\n  padding: 0 !important;\r\n}\r\n\r\n.euai-embed table.euai-table {\r\n  display: table !important;\r\n  width: 100% !important;\r\n  max-width: 100% !important;\r\n  margin: 0 !important;\r\n  padding: 0 !important;\r\n  border-collapse: collapse !important;\r\n  border-spacing: 0 !important;\r\n  table-layout: fixed !important;\r\n  border: 1px solid #cfd6e4 !important;\r\n  background: #ffffff !important;\r\n  color: #17233f !important;\r\n  font: 14px\/1.4 Arial, Helvetica, sans-serif !important;\r\n  box-shadow: none !important;\r\n}\r\n\r\n.euai-embed .euai-table thead {\r\n  display: table-header-group !important;\r\n}\r\n\r\n.euai-embed .euai-table thead tr {\r\n  display: table-row !important;\r\n}\r\n\r\n.euai-embed .euai-table thead th {\r\n  display: table-cell !important;\r\n  padding: 10px 12px !important;\r\n  border: 1px solid #cfd6e4 !important;\r\n  background: #243b8f !important;\r\n  background: linear-gradient(\r\n    90deg,\r\n    #1b2d63 0%,\r\n    #243b8f 48%,\r\n    #3d35e6 100%\r\n  ) !important;\r\n  color: #ffffff !important;\r\n  text-align: left !important;\r\n  vertical-align: middle !important;\r\n  font: 700 13px\/1.35 Arial, Helvetica, sans-serif !important;\r\n  letter-spacing: 0 !important;\r\n  text-transform: none !important;\r\n  white-space: normal !important;\r\n  box-shadow: none !important;\r\n}\r\n\r\n.euai-embed .euai-table thead th:nth-child(1) {\r\n  width: 20% !important;\r\n}\r\n\r\n.euai-embed .euai-table thead th:nth-child(2) {\r\n  width: 60% !important;\r\n}\r\n\r\n.euai-embed .euai-table thead th:nth-child(3) {\r\n  width: 20% !important;\r\n}\r\n\r\n.euai-embed .euai-table tbody {\r\n  display: table-row-group !important;\r\n}\r\n\r\n.euai-embed .euai-table tbody tr {\r\n  display: table-row !important;\r\n}\r\n\r\n.euai-embed .euai-table tbody td {\r\n  display: table-cell !important;\r\n  padding: 9px 12px !important;\r\n  border: 1px solid #cfd6e4 !important;\r\n  background: #ffffff !important;\r\n  color: #263b78 !important;\r\n  text-align: left !important;\r\n  vertical-align: top !important;\r\n  font: 400 13px\/1.4 Arial, Helvetica, sans-serif !important;\r\n  overflow-wrap: anywhere !important;\r\n  word-break: normal !important;\r\n  white-space: normal !important;\r\n  box-shadow: none !important;\r\n}\r\n\r\n.euai-embed .euai-table tbody tr:nth-child(even) td {\r\n  background: #f2f6fc !important;\r\n}\r\n\r\n.euai-embed .euai-table tbody td:first-child,\r\n.euai-embed .euai-table tbody td:first-child strong {\r\n  color: #172b59 !important;\r\n  font-weight: 700 !important;\r\n}\r\n\r\n.euai-embed .euai-table tbody td:last-child {\r\n  color: #263b78 !important;\r\n}\r\n\r\n\/* Tablet *\/\r\n@media screen and (min-width: 601px) and (max-width: 900px) {\r\n  .euai-embed .euai-table tbody td {\r\n    padding: 8px !important;\r\n    font-size: 12px !important;\r\n  }\r\n\r\n  .euai-embed .euai-table thead th {\r\n    padding: 9px 8px !important;\r\n    font-size: 12px !important;\r\n  }\r\n}\r\n\r\n\/* Mobile: stack each entry into a readable card *\/\r\n@media screen and (max-width: 600px) {\r\n  .euai-embed .euai-table,\r\n  .euai-embed .euai-table tbody,\r\n  .euai-embed .euai-table tbody tr,\r\n  .euai-embed .euai-table tbody td {\r\n    display: block !important;\r\n    width: 100% !important;\r\n    max-width: 100% !important;\r\n  }\r\n\r\n  .euai-embed .euai-table {\r\n    table-layout: auto !important;\r\n    border: 0 !important;\r\n    background: transparent !important;\r\n  }\r\n\r\n  .euai-embed .euai-table thead {\r\n    display: block !important;\r\n    position: absolute !important;\r\n    width: 1px !important;\r\n    height: 1px !important;\r\n    margin: -1px !important;\r\n    padding: 0 !important;\r\n    overflow: hidden !important;\r\n    clip: rect(0, 0, 0, 0) !important;\r\n    white-space: nowrap !important;\r\n    border: 0 !important;\r\n  }\r\n\r\n  .euai-embed .euai-table tbody {\r\n    display: block !important;\r\n  }\r\n\r\n  .euai-embed .euai-table tbody tr {\r\n    display: block !important;\r\n    margin: 0 0 12px !important;\r\n    padding: 0 !important;\r\n    border: 1px solid #cfd6e4 !important;\r\n    border-radius: 4px !important;\r\n    overflow: hidden !important;\r\n    background: #ffffff !important;\r\n  }\r\n\r\n  .euai-embed .euai-table tbody td {\r\n    display: block !important;\r\n    width: 100% !important;\r\n    padding: 11px 13px !important;\r\n    border: 0 !important;\r\n    border-bottom: 1px solid #dfe4ee !important;\r\n    font-size: 13px !important;\r\n    line-height: 1.45 !important;\r\n  }\r\n\r\n  .euai-embed .euai-table tbody td:last-child {\r\n    border-bottom: 0 !important;\r\n  }\r\n\r\n  .euai-embed .euai-table tbody td::before {\r\n    content: attr(data-label) !important;\r\n    display: block !important;\r\n    margin: 0 0 4px !important;\r\n    color: #1b2d63 !important;\r\n    font: 700 10px\/1.3 Arial, Helvetica, sans-serif !important;\r\n    text-transform: uppercase !important;\r\n    letter-spacing: 0.05em !important;\r\n  }\r\n\r\n  .euai-embed .euai-table tbody tr:nth-child(even) td {\r\n    background: #f2f6fc !important;\r\n  }\r\n}\r\n<\/style>\r\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-185943e elementor-widget elementor-widget-text-editor\" data-id=\"185943e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h2><strong>What Already Applies Today\u00a0<\/strong><\/h2><p>Article 50 transparency duties have applied since August 2, 2026. If a customer is chatting with an AI assistant, the system has to make that clear unless it&#8217;s already obvious. Deployers also have to label deepfakes.\u00a0<\/p><p>The Commission&#8217;s <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/library\/guidelines-transparency-obligations-providers-and-deployers-ai-systems\" target=\"_blank\" rel=\"noopener\">final Article 50 guidelines<\/a>, published July 20, 2026, add a detail insurers should note. An AI agent that acts on its own has to disclose whose behalf it&#8217;s acting on. If you run a claims or service agent that talks to policyholders, this is a current obligation.\u00a0<\/p><p>The original prohibitions and the AI literacy duty have applied since February 2025. The Commission&#8217;s power to fine providers of general-purpose AI models started on August 2, 2026.\u00a0<\/p><h2><strong>What the Digital Omnibus Moved\u00a0<\/strong><\/h2><p>Annex III high-risk systems, which include life and health insurance pricing, now face their obligations from December 2, 2027. AI built into products covered by EU product safety law (Annex I) follows on August 2, 2028.\u00a0<\/p><p>The new prohibitions cover AI that generates non-consensual intimate imagery or child sexual abuse material. They apply from December 2, 2026, and are unlikely to affect an insurer&#8217;s core models.\u00a0<\/p><p>One more detail matters for model owners. Under <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-111\" target=\"_blank\" rel=\"noopener\">Article 111(2)<\/a>, high-risk systems already on the market before the new date only fall under the rules if their design changes significantly after it. Pricing models get retrained and re-tuned often, so treat that carve-out with caution. Decide now how you&#8217;ll judge whether a change counts as significant, and write the reasoning down.\u00a0<\/p><h2><strong>Why the EU AI Act Delay Leaves Less Time Than It Seems\u00a0<\/strong><\/h2><p>The reasons for the delay are also a good map of the risk that&#8217;s left.\u00a0<\/p><p>The first harmonized standard, EN 18286 on quality management systems, was <a href=\"https:\/\/www.cencenelec.eu\/news-events\/news\/2026\/newsletter\/ots-75-anec\/\" target=\"_blank\" rel=\"noopener\">approved by CEN and CENELEC<\/a> in June 2026. It was <a href=\"https:\/\/eur-lex.europa.eu\/eli\/dec_impl\/2026\/2274\/oj\" target=\"_blank\" rel=\"noopener\">cited in the Official Journal<\/a> only in October, which is when it started to carry a presumption of conformity for the requirements it covers. Most of the other standards the Commission asked for are still being finalized.\u00a0<\/p><p>The Commission&#8217;s guidance on classifying high-risk systems was due in February 2026. It arrived as a <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/library\/draft-commission-guidelines-classification-high-risk-ai-systems\" target=\"_blank\" rel=\"noopener\">draft on May 19<\/a>, and the final version isn&#8217;t expected before the end of the year.\u00a0<\/p><p>National supervision is uneven, too. A <a href=\"https:\/\/www.adaptcentre.ie\/news-and-events\/who-will-enforce-the-eu-ai-act-mapping-national-regulatory-authorities-across-europe\/\" target=\"_blank\" rel=\"noopener\">September 2026 mapping by Ireland&#8217;s ADAPT Centre<\/a> found most of the 30 EU and EEA countries spreading AI Act enforcement across existing sector regulators. Two, Bulgaria and Iceland, still had no defined national governance structure.\u00a0<\/p><p>As of October 2026, December 2, 2027 is about 13 months away. With the first standard only just cited, that&#8217;s roughly a year to build against an official route to conformity. Teams that start in 2027 will spend that year interpreting standards. Teams that start now can spend it testing against them.\u00a0<\/p><h2><strong>EU AI Act High-Risk Rules for Insurers: Underwriting and Pricing Stay in Scope\u00a0<\/strong><\/h2><p>The Omnibus moved the deadline for these models. Their classification stayed exactly where it was.\u00a0<\/p><p><strong>Classification.<\/strong> Annex III lists risk assessment and pricing for individuals in life and health insurance as high-risk. Article 6(3) lets a provider argue that a system doesn&#8217;t materially influence decisions. That route closes for any system that profiles individuals, and individual-level underwriting and pricing models generally do. If you do claim the exemption, Article 6(4) still requires you to document the assessment and register the system.\u00a0<\/p><p><strong>Two regimes.<\/strong> Life and health pricing models answer to the AI Act. Other insurance AI, such as motor or property pricing and claims triage, answers to existing insurance law, which applies today. <a href=\"https:\/\/www.eiopa.europa.eu\/eiopa-publishes-opinion-ai-governance-and-risk-management-2025-08-06_en\" target=\"_blank\" rel=\"noopener\">EIOPA&#8217;s August 2025 opinion<\/a> sets out what supervisors expect for those systems, including data governance, record keeping, fairness, explainability and human oversight. It leaves out systems that are high-risk under the Act.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-65b39a9 elementor-widget elementor-widget-image\" data-id=\"65b39a9\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img fetchpriority=\"high\" decoding=\"async\" width=\"800\" height=\"590\" src=\"https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-insurance-high-risk-scope-funnel-1024x755.jpg\" class=\"attachment-large size-large wp-image-6134\" alt=\"eu-ai-act-insurance-high-risk-scope-funnel\" srcset=\"https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-insurance-high-risk-scope-funnel-1024x755.jpg 1024w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-insurance-high-risk-scope-funnel-300x221.jpg 300w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-insurance-high-risk-scope-funnel-768x566.jpg 768w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-insurance-high-risk-scope-funnel-1536x1133.jpg 1536w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-insurance-high-risk-scope-funnel.jpg 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" title=\"\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-22c8b43 elementor-widget elementor-widget-text-editor\" data-id=\"22c8b43\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p><strong>Enforcement and penalties.<\/strong> For insurers, the market surveillance authority will generally be your own financial supervisor, under Article 74(6). Under <a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-99\" target=\"_blank\" rel=\"noopener\">Article 99<\/a>, breaching the prohibitions can cost up to \u20ac35 million or 7% of worldwide annual turnover, whichever is higher. Most other obligations, including the high-risk requirements, carry fines of up to \u20ac15 million or 3%.\u00a0<\/p><h2><strong>EU AI Act Compliance Work That Can&#8217;t Be Rushed\u00a0<\/strong><\/h2><p>You can write a policy in a quarter. An operating record takes much longer to build.\u00a0<\/p><p>That&#8217;s why the stronger EU AI Act compliance programs work backward from the evidence the Act expects. That evidence only exists if systems start producing it well before the deadline.\u00a0<\/p><h3><strong>Logging That Reaches the Decision\u00a0<\/strong><\/h3><p><a href=\"https:\/\/ai-act-service-desk.ec.europa.eu\/en\/ai-act\/article-12\" target=\"_blank\" rel=\"noopener\">Article 12<\/a> requires high-risk systems to record events automatically over their lifetime. Those logs have to support post-market monitoring under Article 72 and the deployer&#8217;s own oversight. They also need to flag situations that could create risk or amount to a substantial modification.\u00a0<\/p><p>Providers and deployers each keep the logs under their control for at least six months. Financial institutions can fold them into the documentation they already keep under financial services law.\u00a0<\/p><p>The practical test is easy to state. For any single decision, can your logs show which model version and configuration produced it, and what the human reviewer did with it?\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-ac4d697 elementor-widget elementor-widget-image\" data-id=\"ac4d697\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"520\" src=\"https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-article-12-decision-logging-record-1024x666.jpg\" class=\"attachment-large size-large wp-image-6135\" alt=\"\" srcset=\"https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-article-12-decision-logging-record-1024x666.jpg 1024w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-article-12-decision-logging-record-300x195.jpg 300w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-article-12-decision-logging-record-768x499.jpg 768w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-article-12-decision-logging-record-1536x998.jpg 1536w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-article-12-decision-logging-record.jpg 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" title=\"\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0e7c19c elementor-widget elementor-widget-text-editor\" data-id=\"0e7c19c\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<h3><strong>Data Governance as a Dated Record\u00a0<\/strong><\/h3><p>Article 10 expects documented practices for where the data came from, how it was prepared, how it was checked for bias and where the gaps are. These choices are easy to record when a model version is built and painful to reconstruct later.\u00a0<\/p><p>A record frozen for each model version in 2026 shows decisions made at the time. A reconstruction in 2027 reads like a story written after the fact.\u00a0<\/p><h3><strong>Agent Boundaries and Baselines\u00a0<\/strong><\/h3><p>In an agentic workflow, a lightweight triage agent feeding a pricing model can pull the whole chain into scope. That risk grows as teams stack agents on <a href=\"https:\/\/www.arivonix.ai\/blog\/agentic-ai-frameworks-specialized-intelligence\/\" target=\"_blank\" rel=\"noopener\">fast-moving frameworks<\/a>. Where you draw the system boundary, and where you log, is an architecture decision. It&#8217;s far cheaper to make early.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-52e2498 elementor-widget elementor-widget-image\" data-id=\"52e2498\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img decoding=\"async\" width=\"800\" height=\"560\" src=\"https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-agentic-ai-system-boundary-insurance-1024x717.jpg\" class=\"attachment-large size-large wp-image-6136\" alt=\"\" srcset=\"https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-agentic-ai-system-boundary-insurance-1024x717.jpg 1024w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-agentic-ai-system-boundary-insurance-300x210.jpg 300w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-agentic-ai-system-boundary-insurance-768x538.jpg 768w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-agentic-ai-system-boundary-insurance-1536x1075.jpg 1536w, https:\/\/www.arivonix.ai\/blog\/wp-content\/uploads\/2026\/10\/eu-ai-act-agentic-ai-system-boundary-insurance.jpg 1600w\" sizes=\"(max-width: 800px) 100vw, 800px\" title=\"\">\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-46e2d5f elementor-widget elementor-widget-text-editor\" data-id=\"46e2d5f\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t<p>Baselines work the same way. Article 72 requires providers to collect and analyze performance data throughout a system&#8217;s life, and that data only means something against a documented starting point. Running shadow compliance now, which means generating the records a system would need while nothing is at stake, is how teams capture that baseline.\u00a0<\/p><h3><strong>Two Procurement Moves for the Next Contract Cycle\u00a0<\/strong><\/h3><p>First, build to the Act&#8217;s text and <a href=\"https:\/\/www.iso.org\/standard\/42001\" target=\"_blank\" rel=\"noopener\">ISO\/IEC 42001<\/a>, then map your controls to EN 18286 now that it&#8217;s cited.\u00a0<\/p><p>Second, if you buy a pricing model instead of building it, you&#8217;re still the deployer. You&#8217;ll need the provider&#8217;s instructions for use and access to the logs it holds. Upcoming contract renewals are the right time to negotiate those terms.\u00a0<\/p><h2><strong>Where Arivonix Fits\u00a0<\/strong><\/h2><p>Everything above depends on evidence that exists before anyone asks for it. That&#8217;s the problem our approach to <a href=\"https:\/\/www.arivonix.ai\/data-centric-ai-assurance\/\" target=\"_blank\" rel=\"noopener\">data-centric AI assurance<\/a> is built around. It keeps a running record of data lineage and agent decisions as systems operate, so there&#8217;s an operating history ready when a supervisor asks.\u00a0<\/p><p>Our <a href=\"https:\/\/www.arivonix.ai\/guide\/specialized-intelligence-agentic-ai-platform\/\" target=\"_blank\" rel=\"noopener\">guide to specialized intelligence in agentic AI platforms<\/a> covers the build side. You can also see how this works in <a href=\"https:\/\/www.arivonix.ai\/insurance_industry\/\" target=\"_blank\" rel=\"noopener\">underwriting and claims workflows for insurers<\/a>.\u00a0<\/p><p>Picture a life insurer with a pricing model, a triage agent that feeds it and a vendor-supplied risk score. (This is a hypothetical example.) Its readiness comes down to a few questions:\u00a0<\/p><ul><li>Can it show how the system behaved over the past 12 months?\u00a0<\/li><\/ul><ul><li>Where does the high-risk boundary sit across the chain?\u00a0<\/li><\/ul><ul><li>Which logs does the insurer control, and which sit with the vendor?\u00a0<\/li><\/ul><p>Documented decision trails answer the first question. The other two are scoping calls that are much easier to settle in 2026 than in late 2027.\u00a0<\/p><p>The revised EU AI Act timeline gives insurers two ways to use the extra 16 months. Some will treat it as a pause and arrive at December 2027 with a policy deck. Others will use it to build, and arrive with a year of operating evidence. Only the second group will have a clear answer when a supervisor asks how a model behaved last spring.\u00a0<\/p><p><a href=\"https:\/\/www.arivonix.ai\/book-a-consultation\/\" target=\"_blank\" rel=\"noopener\">Book a Consultation<\/a>\u00a0<\/p><p>This article is for general information and is not legal advice. Confirm how the AI Act applies to your systems with qualified counsel.\u00a0<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>For most of the past two years, every EU AI Act timeline that compliance teams planned around pointed to one date: August 2, 2026. That&#8217;s when the rules for high-risk AI systems were due to start. Then the date moved. The Digital Omnibus on AI, Regulation (EU) 2026\/1744, came into force on July 27, 2026. [&hellip;]<\/p>\n","protected":false},"author":8,"featured_media":6132,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[140],"tags":[],"class_list":["post-6130","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-arivonix"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/posts\/6130","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/users\/8"}],"replies":[{"embeddable":true,"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/comments?post=6130"}],"version-history":[{"count":4,"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/posts\/6130\/revisions"}],"predecessor-version":[{"id":6139,"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/posts\/6130\/revisions\/6139"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/media\/6132"}],"wp:attachment":[{"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/media?parent=6130"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/categories?post=6130"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.arivonix.ai\/blog\/wp-json\/wp\/v2\/tags?post=6130"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}