eu ai act major deadline is august 2. the digital omnibus might defer parts of it. here's what actually still hits this summer

august 2, 2026 has been the headline EU AI Act deadline for years. then the digital omnibus provisional agreement (may 7, 2026) proposed deferring high-risk annex III systems to december 2, 2027 and annex I product-embedded systems to august 2, 2028. the deferral isn't formally adopted yet. expected mid-2026.

the "we'll wait and see what's deferred" approach is risky because the parts not being deferred still land this august.

what still applies august 2, 2026:

• transparency obligations under article 50. AI-generated content must be disclosed
• chatbots and NLP interfaces must clearly disclose their AI nature unless obvious
• every EU member state must have at least one AI sandbox running
• governance, enforcement, and penalty provisions activate
• GPAI rules already in force since august 2025 remain enforceable

what's likely being deferred (if omnibus passes):

• annex III standalone high-risk systems (hiring, credit scoring, biometrics) → dec 2027
• annex I product-embedded high-risk → aug 2028

the real engineering question hiding in this: are you a "deployer" or a "provider" under the act? if you call an API like openai or anthropic, you're a deployer. but if you substantially modify the model through extensive fine-tuning, you can flip to provider status with much heavier obligations. that boundary is where most of the legal risk sits and most teams haven't drawn it clearly.

practical things we're advising clients on right now:

• AI disclosure surfaces for chatbots, content generators, voice synthesis, image moderation features
• watermarking and labeling infrastructure for synthetic content
• consent and disclosure flows that scale across 27 member states (enforcement is local)
• a registry of which models are used where, what data they were trained or fine-tuned on, who counts as deployer vs provider
• documentation patterns that will survive an audit

penalties are real. up to €35M or 7% of global annual turnover under article 99.

question: anyone in EU markets actually shipped article 50 disclosure flows yet? curious what the UX pattern looks like, especially for voice or multimodal interfaces where "obvious AI" is debatable.