The EU AI Act: what companies must do before August 2026

On 2 August 2026 the European Artificial Intelligence Regulation (Regulation (EU) 2024/1689), known as the EU AI Act, becomes fully applicable to every company operating in the European Union. Penalties for non-compliance reach €35 million or 7% of global turnover. The rules no longer distinguish by size or sector: they cover self-employed professionals, SMEs and large companies that use artificial intelligence, even occasionally. There are fewer than 4 months left to prepare.

What is the European artificial intelligence law?

The EU artificial intelligence law is the world's first comprehensive regulatory framework for AI systems. Adopted as Regulation (EU) 2024/1689, it applies directly in every member state with no need for national transposition. Its aim: to make sure AI systems are safe, transparent and respectful of fundamental rights.

The regulation classifies every AI system into four risk levels, and each company's obligations depend on the risk level of the system it uses or develops:

Do you use AI in your company? Get in touch for a free assessment of your compliance position.

Timetable: the deadlines the law sets

The EU AI Act applies in stages. Some obligations are already in force:

The critical date for most companies is 2 August 2026: from then on, any company using high-risk AI systems (recruitment, credit assessment, infrastructure management and so on) must comply with the regulation in full.

Which companies have to comply?

Every company that develops, deploys or uses AI systems in the European market, wherever it is established. The regulation has extraterritorial reach.

In practice, that includes any company that:

• Uses AI tools for recruitment or candidate assessment
• Applies credit scoring or automated risk analysis
• Uses AI in customer service (chatbots, virtual assistants)
• Uses AI content generators (text, images, code)
• Uses AI in industrial processes (quality control, predictive maintenance)
• Uses AI-based data analysis tools for decision-making

The AI literacy obligation (Article 4 of the Regulation) has been in force since February 2025. It means that every company using AI tools must make sure its staff are trained well enough to use them safely, including self-employed professionals and micro-businesses.

Penalties for non-compliance

The penalty regime under the EU AI Act is one of the toughest in European regulation:

For SMEs and startups the fines are calculated proportionally: the lower of the fixed amount and the percentage of turnover applies. But even for an SME with €5 million of turnover, a serious infringement can mean up to €150,000.

In Spain, supervision falls to AESIA — the Agencia Española de Supervisión de la Inteligencia Artificial, or Spanish AI supervisory agency — created by Real Decreto 729/2023 and based in A Coruña. It is the authority that will inspect Spanish companies and impose these penalties.

The penalties start in August. Do not leave it to the last minute. Request a consultation to assess your obligations.

How to prepare your company in 5 steps

1. AI system inventory

Identify every AI system your company uses, develops or deploys. Include third-party tools (ChatGPT, Copilot, AI-enabled HR software, intelligent CRMs and so on).

2. Risk classification

For each system, work out its risk level under the regulation's classification. High-risk systems carry the most demanding requirements.

3. Team training (mandatory since February 2025)

Make sure every member of staff who works with AI has the literacy required. This training can be funded through FUNDAE, which covers 100% of the cost for companies with fewer than 10 employees.

4. Documentation and governance

For high-risk systems: put in place a risk management system, technical documentation, activity logging and human oversight.

5. Conformity assessment

High-risk systems require a conformity assessment before they are put into service. Keep the records up to date and available for AESIA.

AI training: a legal obligation and an opportunity

The AI literacy obligation in Article 4 of the Regulation is a chance to improve your company's competitiveness. A workforce trained in AI does not just meet the rules: it works better, spots automation opportunities and takes better decisions.

At Tecnocim Innova we offer AI training for companies tailored to each business. Our programmes cover:

• Training for directors: understanding the strategic and legal implications of AI
• Training for operational teams: safe and efficient use of AI tools
• Regulatory compliance: how to document and evidence AI literacy

This is FUNDAE-funded training, which brings the cost down to zero for many companies in Spain.

Your next step

2 August 2026 is not a distant date. Companies that prepare now will gain a competitive edge: they will avoid penalties, improve their processes and show clients and partners that they use AI responsibly.

At Tecnocim Innova we combine AI training with strategic consultancy to support you through the whole process of adapting to the EU AI Act.

Get in touch for a free compliance assessment. We will look at which AI systems you use, which obligations apply to you and how to meet them before August.