EU AI Act Readiness Assessment
The EU AI Act entered into force on 1 August 2024 and its requirements apply in stages. By September 2026, provisions on prohibited practices, AI literacy, general-purpose AI and specified transparency obligations are already relevant, while revised dates apply to major categories of high-risk systems. Because the timetable and supporting guidance have changed, organisations should verify the current position before publication or implementation.
Published 2026-09-09 | Updated 2026-09-09 | GoalTech Ltd
Begin with an AI system inventory
Determine role and classification
Classification should consider the system’s intended purpose and actual use. A procurement label such as assistant or analytics tool is not enough.
- Identify systems developed, purchased, embedded in services or used by staff.
- Determine whether the organisation acts as provider, deployer, importer, distributor or another regulated actor.
- Screen for prohibited practices and transparency duties.
- Assess whether a system falls within a high-risk category or is embedded in a regulated product.
- Identify general-purpose AI dependencies and contractual information.
- Record the evidence supporting each classification.
Build a prioritised compliance plan
GoalTech can help create the inventory, facilitate classification, assess governance and documentation, and define actions for risk management, data governance, human oversight, logging, transparency, monitoring and supplier management. Legal advice may be required for difficult scope or classification questions.
The Commission’s current timeline states that Annex III high-risk requirements apply from 2 December 2027 and high-risk systems embedded in regulated products from 2 August 2028. These dates should be checked again immediately before publication.
Arrange an EU AI Act readiness assessment with GoalTech.