{"id":68017,"date":"2026-07-30T11:49:14","date_gmt":"2026-07-30T09:49:14","guid":{"rendered":"https:\/\/www.usd.de\/?p=68017"},"modified":"2026-07-30T11:49:15","modified_gmt":"2026-07-30T09:49:15","slug":"digital-omnibus-on-ai-changes-to-the-eu-ai-act","status":"publish","type":"post","link":"https:\/\/www.usd.de\/en\/digital-omnibus-on-ai-changes-to-the-eu-ai-act\/","title":{"rendered":"Digital Omnibus on AI \u2013 What Changes Are Coming to the EU AI Act, and What Does This Mean for Businesses?"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/eur-lex.europa.eu\/eli\/reg\/2024\/1689\/oj\/eng?eliuri=eli%3Areg%3A2024%3A1689%3Aoj&amp;locale=en\" target=\"_blank\" rel=\"noopener\">EU AI Act<\/a> remains in effect, but the timeline is shifting: with the \u201c<a href=\"https:\/\/eur-lex.europa.eu\/legal-content\/EN\/TXT\/?uri=OJ%3AL_202601744\" target=\"_blank\" rel=\"noopener\">Digital Omnibus on AI<\/a>,\u201d the EU is making its first substantial changes to the AI Regulation (Regulation (EU) 2024\/1689, AI Regulation). For businesses, the message is clear: the Digital Omnibus on AI postpones key deadlines and eases the strain on companies in some areas, but the substantive obligations themselves remain unchanged. Those who misinterpret the gained time as a breather risk facing the very time pressure that the postponement was actually intended to alleviate.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In this article, we outline the specific changes brought about by the Digital Omnibus on AI, which deadlines remain in effect, and what steps we recommend companies take now.<\/p>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">What the Digital Omnibus on AI Means in Practice<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The Digital Omnibus on AI is not a new legal framework but rather a targeted amending regulation. The European Commission submitted the proposal to resolve implementation issues related to the EU AI Act. In particular, it addresses delays in the adoption of harmonized standards and in the designation of the competent national authorities.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The European Parliament adopted the package on 16 June 2026; the Council gave its final approval on 29 June 2026; and it was signed on 8 July 2026. It was published in the Official Journal of the EU on 24 July, and the legal act <strong>came into effect on 27 July<\/strong><a> <\/a><strong>2026<\/strong><a>.<\/a><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Important clarification: The Digital Omnibus on AI is part of a larger \u201cDigital Omnibus\u201d package. The amendments to the GDPR, the Data Act, the ePrivacy Regulation, and cybersecurity regulations (including NIS-2) that are also being discussed in this context are not covered by this legislative act and remain in the legislative process. An agreement on these is expected in the first half of 2027. In this article, we focus exclusively on the portion concerning the EU AI Act.<a id=\"_msocom_1\"><\/a><\/p>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">The Key Change: Postponement of High-Risk Obligations<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The most significant change concerns high-risk AI systems. According to the original timeline, the obligations for autonomous high-risk systems under Annex III \u2013 such as those in the areas of employment, education, critical infrastructure, law enforcement, and creditworthiness assessments \u2013 were to take effect on 2 August 2026. Since the necessary harmonized standards are not expected to be finalized in time, the Digital Omnibus on AI Act now links the applicability of these requirements to the availability of the standards and support tools while setting binding deadlines:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Standalone high-risk systems as defined in Annex III: no later than <strong>2<\/strong> <strong>December 2027<\/strong><\/li>\n\n\n\n<li>AI embedded in regulated products as defined in Annex I (e.g., medical devices, toys): no later than <strong>2 August 2028<\/strong><\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Our recommendation:<\/strong> The additional timeframe is more realistic and sensible, but it does not reduce either the scope or the complexity of the requirements. Experience shows that establishing risk management, technical documentation, data quality, and governance structures takes significantly longer than initially anticipated. Companies should therefore view the postponement as an extended implementation window and as an opportunity to tackle the implementation in a structured manner and at an early stage.<\/p>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Not Postponed: Transparency Requirements Under Article 50<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Not everything will be deferred. The transparency requirements under Article 50 of the AI Regulation will continue to apply <strong>starting 2 August 2026<\/strong>, such as the requirement to inform users that they are interacting with an AI system.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There is one exception: for the machine-readable labeling of AI-generated content (images, audio, video, and text) in accordance with Article 50 (2), a transition period extending until 2 December 2026 applies to systems placed on the market before 2 August 2026.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Our recommendation:<\/strong><em> <\/em>Companies should assess which of their systems or functions fall under Article 50 as soon as possible. 2 August 2026 should continue to be treated as a binding date; the three-month transition period applies exclusively to content labeling and only to systems already placed on the market prior to the effective date.<\/p>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Expanded Supervisory Powers of the AI Office<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">The <a href=\"https:\/\/digital-strategy.ec.europa.eu\/en\/policies\/ai-office\" target=\"_blank\" rel=\"noopener\">AI Office<\/a>, which is part of the European Commission, will be granted significantly expanded supervisory powers. Until now, it has supervised general-purpose AI (GPAI) models and the systems based on them only if the model and the system came from the same provider.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Going forward, jurisdiction will extend to all AI systems based on GPAI models from the same company, as well as to systems that constitute or are embedded in very large online platforms or search engines. In addition, an explicit legal basis for cooperation between the AI Office and national supervisory authorities will be established.<\/p>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Overview of Additional Changes<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">In addition to the major changes, the Digital Omnibus on AI includes several targeted, detailed amendments, the most important of which are listed below:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Processing of special data categories for bias detection (Art. 4a):<\/strong> The authorization to process special categories of personal data using AI is being expanded from high-risk systems to all AI systems and models. However, the strict necessity standard remains in place, meaning that processing is permitted only if it is strictly necessary for the detection or correction of biases.<\/li>\n\n\n\n<li><strong>AI-Competence (Art. 4):<\/strong> The requirement is being relaxed: Instead of ensuring a sufficient level of proficiency, providers and operators will have to take \u201cmeasures to promote\u201d their staff\u2019s AI proficiency in the future.<\/li>\n\n\n\n<li><strong>Machinery Regulation:<\/strong> AI embedded in products covered by the so-called \u201cMachinery Regulation\u201d is specifically excluded from the direct scope of the high-risk rules. Other products (such as medical devices and toys) remain fully covered. However, the Commission may use the Machinery Regulation to tighten AI-specific safety requirements.<\/li>\n\n\n\n<li><strong>Registration Requirements:<\/strong> The exemption proposed by the Commission for systems classified as \u201clow-risk\u201d was not approved. These systems must also continue to be registered in the EU database, albeit with a reduced administrative burden.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">2 August 2026 Remains a Key Date<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Despite all postponements, 2 August 2026 is by no means a less significant date. On this date, several mechanisms will take effect or become enforceable:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>The transparency requirements under Article 50 (with the narrow exception mentioned above regarding content labeling).<\/li>\n\n\n\n<li>The enforceability of the GPAI obligations (applicable as of August 2025, with fines effective as of August 2026).<\/li>\n\n\n\n<li>Market surveillance by the competent authorities.<\/li>\n<\/ul>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\">Our Expert's Conclusion: More Time, Same Substance<\/h2>\n\n\n\n<div style=\"height:8px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<div class=\"wp-block-columns is-layout-flex wp-container-core-columns-is-layout-8f761849 wp-block-columns-is-layout-flex\">\n<div class=\"wp-block-column is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:66.66%\">\n<blockquote class=\"wp-block-quote is-layout-flow wp-block-quote-is-layout-flow\">\n<p class=\"wp-block-paragraph\">\"The Digital Omnibus on AI provides significant relief regarding deadlines and creates greater consistency and legal certainty in several areas. At the same time, the fundamental architecture and protective intent of the EU AI Act remain unchanged. The substantive requirements for high-risk systems \u2013 namely, risk management, data governance, technical documentation, and human oversight \u2013 remain unchanged.<\/p>\n\n\n\n<div style=\"height:8px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">I therefore recommend that the affected companies promptly and thoroughly fulfill the obligations that remain due as of 2 August 2026, such as transparency, GPAI, and market monitoring, while at the same time using the time gained to systematically and robustly establish governance structures and technical documentation for high-risk AI.\"<\/p>\n\n\n\n<div style=\"height:16px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n<cite><em>Maximilian M\u00fcller, Principal usd Security Consulting | AI Governance<\/em><\/cite><\/blockquote>\n<\/div>\n\n\n\n<div class=\"wp-block-column is-vertically-aligned-center is-layout-flow wp-block-column-is-layout-flow\" style=\"flex-basis:33.33%\">\n<figure class=\"wp-block-image aligncenter size-full is-resized\"><img loading=\"lazy\" decoding=\"async\" width=\"712\" height=\"712\" src=\"https:\/\/www.usd.de\/wp-content\/uploads\/Maximilian-Muller.png\" alt=\"Maximilian M\u00fcller, Principal usd Security Consulting, in a suit. Expert for AI Governance, the EU AI Act, and the Digital Omnibus on AI.\" class=\"wp-image-67673\" style=\"width:200px\" \/><\/figure>\n<\/div>\n<\/div>\n\n\n\n<div style=\"height:8px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\" \/>\n\n\n\n<div style=\"height:21px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Do you need assistance with AI governance?&nbsp;<a href=\"https:\/\/www.usd.de\/en\/contact-form-security-consulting\/\">Get in touch with us<\/a>. We offer tailored support wherever you need it: whether you\u2019re setting up an AI management system in accordance with&nbsp;<a href=\"https:\/\/www.usd.de\/en\/the-7-most-important-questions-about-iso-42001\/\">ISO\/IEC 42001<\/a>&nbsp;or implementing specific requirements, such as those outlined in the&nbsp;<a href=\"https:\/\/www.usd.de\/en\/eu-ai-act-the-7-most-important-questions\/\">EU AI Act<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The EU AI Act remains in effect, but the timeline is shifting: with the \u201cDigital Omnibus on AI,\u201d the EU is making its first substantial changes to the AI Regulation (Regulation (EU) 2024\/1689, AI Regulation). For businesses, the message is clear: the Digital Omnibus on AI postpones key deadlines and eases the strain on companies [&hellip;]<\/p>\n","protected":false},"author":120,"featured_media":62124,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[14846,373],"tags":[14452,14841,14454,15202,14456,14844],"class_list":["post-68017","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ai","category-news-en","tag-ai-en","tag-ai-act","tag-artificial-intelligence-en","tag-digital-omnibus-on-ai","tag-eu-ai-act-en","tag-european-union"],"_links":{"self":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/posts\/68017","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/users\/120"}],"replies":[{"embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/comments?post=68017"}],"version-history":[{"count":4,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/posts\/68017\/revisions"}],"predecessor-version":[{"id":68028,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/posts\/68017\/revisions\/68028"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/media\/62124"}],"wp:attachment":[{"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/media?parent=68017"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/categories?post=68017"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.usd.de\/en\/wp-json\/wp\/v2\/tags?post=68017"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}