Does the EU AI Act apply to companies outside Europe?

Yes. The EU AI Act applies to any provider or deployer of AI systems that place systems on the EU market or whose systems affect people located in the EU — regardless of where the provider is based. A US startup whose product is used by European customers must comply. This is the same extraterritorial effect that GDPR established for data protection, and it makes the EU AI Act effectively a global regulation for any organisation at commercial scale.

What AI systems are classified as high-risk under the EU AI Act?

High-risk AI systems are those used in safety-critical products (medical devices, aircraft, machinery), biometric identification, critical infrastructure management, educational assessment, employment decisions (CV screening, hiring, performance management), access to essential services (credit scoring, insurance), law enforcement, border management, and democratic processes. If your AI system makes or substantially influences decisions in any of these domains, it is likely high-risk and subject to extensive compliance requirements.

What is the difference between limited risk and high-risk AI under the Act?

Limited-risk AI systems (chatbots, synthetic content generators, emotion recognition systems) face only transparency obligations: they must disclose to users that they are AI, label AI-generated content, or inform users when emotion recognition is active. High-risk AI systems face extensive requirements: risk management systems, data governance, technical documentation, human oversight mechanisms, accuracy testing, logging, and conformity assessment before deployment. The compliance burden for high-risk systems is substantially greater.

What are the penalties for violating the EU AI Act?

Penalties are tiered by violation severity. Using prohibited AI practices (social scoring, real-time biometric surveillance) can result in fines up to €35 million or 7% of global annual turnover. Non-compliance with requirements for high-risk systems or GPAI model obligations carries fines up to €15 million or 3% of global annual turnover. Providing false information to authorities carries up to €7.5 million or 1.5% of turnover. For large technology companies, these can reach billions of euros — making proactive compliance essential.

How does the EU AI Act compare to US AI regulation?

The EU takes a comprehensive, risk-based legislative approach with specific obligations, enforcement mechanisms, and penalties — applicable across all sectors and use cases. The US relies on sectoral agency authority: the FDA, SEC, FTC, and EEOC each apply existing authority to AI within their domains, without a unified federal framework. The practical result is that EU compliance is more legally certain (clearer rules) but more prescriptive, while US compliance is more flexible but more ambiguous. Most global organisations build to the EU standard and adapt for local US requirements.

AI & Automation·10 min read·June 19, 2026

⚖️ EU AI Act and AI Governance: What Engineers Building AI Systems Need to Know

The EU AI Act entered into force in August 2024 and applies globally to any organisation serving European users. This guide explains the four risk tiers, what counts as high-risk AI, conformity assessment requirements, technical documentation obligations, penalties, and how the US, UK, and China are approaching AI governance differently.

📖AI Roadmap for Electrical Engineers (Full Access)

View →

The World's First Comprehensive AI Law Is in Effect

On August 2, 2024, the European Union's Artificial Intelligence Act entered into force — the first comprehensive regulatory framework for AI in history. By August 2026, most of its core provisions are fully applicable. Whether your organisation is headquartered in Berlin or San Francisco, the EU AI Act matters to you: any company that offers AI-powered products or services to European users must comply. With the EU representing roughly 450 million consumers and 27 national markets, this effectively makes the EU AI Act a global regulation for any organisation operating at scale.

Topics covered

EU AI ActAI regulationAI governancehigh-risk AIprohibited AIAI Act complianceEU AI Act engineeringAI conformity assessmentAI risk tiersGPAI model obligationsAI technical documentationAI Act penaltiesUS AI Executive OrderUK AI governanceChina AI regulationBrussels effect AIAI ethics compliancebiometric AI regulationAI Act 2024responsible AI deployment