{"id":5864,"date":"2025-11-07T21:05:43","date_gmt":"2025-11-07T20:05:43","guid":{"rendered":"https:\/\/www.endoacustica.com\/blogen\/?p=5864"},"modified":"2026-03-30T13:51:53","modified_gmt":"2026-03-30T12:51:53","slug":"ai-act-explained-what-it-means-for-your-business","status":"publish","type":"post","link":"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/","title":{"rendered":"The EU AI Act Explained: What It Means for Your Business"},"content":{"rendered":"<div id=\"ez-toc-container\" class=\"ez-toc-v2_0_85 counter-hierarchy ez-toc-counter ez-toc-grey ez-toc-container-direction\">\n<div class=\"ez-toc-title-container\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<span class=\"ez-toc-title-toggle\"><a href=\"#\" class=\"ez-toc-pull-right ez-toc-btn ez-toc-btn-xs ez-toc-btn-default ez-toc-toggle\" aria-label=\"Toggle Table of Content\"><span class=\"ez-toc-js-icon-con\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewBox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewBox=\"0 0 24 24\" version=\"1.2\" baseProfile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/span><\/a><\/span><\/div>\n<nav><ul class='ez-toc-list ez-toc-list-level-1 eztoc-toggle-hide-by-default' ><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#1_What_Is_the_AI_Act_and_Why_It_Matters\" >1. What Is the AI Act and Why It Matters<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#2_Who_Must_Comply\" >2. Who Must Comply<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#3_How_the_AI_Act_Classifies_Risks\" >3. How the AI Act Classifies Risks<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#a_Unacceptable_Risk_%E2%80%93_Prohibited_AI\" >a) Unacceptable Risk \u2013 Prohibited AI<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#b_High_Risk_%E2%80%93_Strictly_Regulated\" >b) High Risk \u2013 Strictly Regulated<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#c_Limited_Risk_%E2%80%93_Transparency_Required\" >c) Limited Risk \u2013 Transparency Required<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#d_Minimal_Risk_%E2%80%93_Free_Use\" >d) Minimal Risk \u2013 Free Use<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#4_Key_Obligations_for_Businesses\" >4. Key Obligations for Businesses<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#a_Technical_Documentation\" >a) Technical Documentation<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#b_Transparency\" >b) Transparency<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#c_Human_Oversight\" >c) Human Oversight<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#d_Data_Protection_and_Fairness\" >d) Data Protection and Fairness<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#e_Certification_for_High-Risk_Systems\" >e) Certification for High-Risk Systems<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#5_How_Companies_Can_Prepare\" >5. How Companies Can Prepare<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#1_Map_All_AI_Systems\" >1. Map All AI Systems<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#2_Assess_the_Risk\" >2. Assess the Risk<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#3_Create_an_AI_Usage_Policy\" >3. Create an AI Usage Policy<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#4_Train_Employees\" >4. Train Employees<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#5_Keep_Compliance_Records\" >5. Keep Compliance Records<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#6_Penalties_for_Non-Compliance\" >6. Penalties for Non-Compliance<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#7_Opportunities_Not_Just_Limits\" >7. Opportunities, Not Just Limits<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-22\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#8_What_to_Do_Now\" >8. What to Do Now<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-23\" href=\"https:\/\/www.endoacustica.com\/blogen\/2025\/11\/07\/ai-act-explained-what-it-means-for-your-business\/#Conclusion\" >Conclusion<\/a><\/li><\/ul><\/nav><\/div>\n<p data-start=\"164\" data-end=\"482\">The <strong data-start=\"168\" data-end=\"178\">AI Act<\/strong> is the new European regulation on <strong data-start=\"213\" data-end=\"240\">artificial intelligence<\/strong>. It\u2019s the first law in the world that defines how AI can be developed and used safely, fairly, and transparently.<br data-start=\"354\" data-end=\"357\" \/>For companies operating in Europe \u2014 or even those offering AI tools to European users \u2014 this marks a <strong data-start=\"458\" data-end=\"481\">major turning point<\/strong>.<\/p>\n<p data-start=\"484\" data-end=\"605\">Below we\u2019ll explain, in simple language, what the AI Act is, who it applies to, and what businesses need to do to comply.<\/p>\n<hr data-start=\"607\" data-end=\"610\" \/>\n<h3 data-start=\"612\" data-end=\"656\"><span class=\"ez-toc-section\" id=\"1_What_Is_the_AI_Act_and_Why_It_Matters\"><\/span>1. What Is the AI Act and Why It Matters<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"658\" data-end=\"918\">The <strong data-start=\"662\" data-end=\"702\">AI Act (Artificial Intelligence Act)<\/strong> was approved by the European Union in 2024 and will gradually enter into force between <strong data-start=\"790\" data-end=\"807\">2025 and 2026<\/strong>.<br data-start=\"808\" data-end=\"811\" \/>Its goal is to <strong data-start=\"826\" data-end=\"853\">protect people\u2019s rights<\/strong> while promoting innovation and trust in artificial intelligence.<\/p>\n<p data-start=\"920\" data-end=\"974\">In short, the law aims to ensure that AI in Europe is:<\/p>\n<ul data-start=\"975\" data-end=\"1261\">\n<li data-start=\"975\" data-end=\"1029\">\n<p data-start=\"977\" data-end=\"1029\"><strong data-start=\"977\" data-end=\"985\">Safe<\/strong> \u2013 it must not endanger people or society.<\/p>\n<\/li>\n<li data-start=\"1030\" data-end=\"1109\">\n<p data-start=\"1032\" data-end=\"1109\"><strong data-start=\"1032\" data-end=\"1047\">Transparent<\/strong> \u2013 users should know when AI is being used and how it works.<\/p>\n<\/li>\n<li data-start=\"1110\" data-end=\"1177\">\n<p data-start=\"1112\" data-end=\"1177\"><strong data-start=\"1112\" data-end=\"1127\">Accountable<\/strong> \u2013 humans must stay in control of key decisions.<\/p>\n<\/li>\n<li data-start=\"1178\" data-end=\"1261\">\n<p data-start=\"1180\" data-end=\"1261\"><strong data-start=\"1180\" data-end=\"1214\">Ethical and non-discriminatory<\/strong> \u2013 respecting privacy, equality, and dignity.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"1263\" data-end=\"1410\">Europe wants to set a global standard \u2014 just as it did with the GDPR \u2014 and show that technology can be advanced <strong data-start=\"1375\" data-end=\"1409\">without losing human oversight<\/strong>.<\/p>\n<hr data-start=\"1412\" data-end=\"1415\" \/>\n<h3 data-start=\"1417\" data-end=\"1439\"><span class=\"ez-toc-section\" id=\"2_Who_Must_Comply\"><\/span>2. Who Must Comply<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"1441\" data-end=\"1562\">The AI Act applies to <strong data-start=\"1463\" data-end=\"1530\">any organization that develops, uses, or distributes AI systems<\/strong> within the EU.<br data-start=\"1545\" data-end=\"1548\" \/>This includes:<\/p>\n<ul data-start=\"1563\" data-end=\"1819\">\n<li data-start=\"1563\" data-end=\"1610\">\n<p data-start=\"1565\" data-end=\"1610\"><strong data-start=\"1565\" data-end=\"1593\">Developers and suppliers<\/strong> of AI systems;<\/p>\n<\/li>\n<li data-start=\"1611\" data-end=\"1674\">\n<p data-start=\"1613\" data-end=\"1674\"><strong data-start=\"1613\" data-end=\"1628\">Integrators<\/strong> who embed AI tools into their own products;<\/p>\n<\/li>\n<li data-start=\"1675\" data-end=\"1741\">\n<p data-start=\"1677\" data-end=\"1741\"><strong data-start=\"1677\" data-end=\"1706\">Distributors or importers<\/strong> of AI-based software or devices;<\/p>\n<\/li>\n<li data-start=\"1742\" data-end=\"1819\">\n<p data-start=\"1744\" data-end=\"1819\"><strong data-start=\"1744\" data-end=\"1753\">Users<\/strong>, meaning companies that apply AI tools in their daily activities.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"1821\" data-end=\"1884\">So the law doesn\u2019t only target tech giants.<br data-start=\"1864\" data-end=\"1867\" \/>It also concerns:<\/p>\n<ul data-start=\"1885\" data-end=\"2117\">\n<li data-start=\"1885\" data-end=\"1942\">\n<p data-start=\"1887\" data-end=\"1942\">A marketing agency using ChatGPT to generate content;<\/p>\n<\/li>\n<li data-start=\"1943\" data-end=\"2002\">\n<p data-start=\"1945\" data-end=\"2002\">An HR team using an AI system to screen job candidates;<\/p>\n<\/li>\n<li data-start=\"2003\" data-end=\"2050\">\n<p data-start=\"2005\" data-end=\"2050\">A bank using algorithms for credit scoring;<\/p>\n<\/li>\n<li data-start=\"2051\" data-end=\"2117\">\n<p data-start=\"2053\" data-end=\"2117\">A small business using AI-powered chatbots or analytics tools.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"2119\" data-end=\"2207\">If your company uses artificial intelligence in any form, <strong data-start=\"2177\" data-end=\"2206\">the AI Act applies to you<\/strong>.<\/p>\n<hr data-start=\"2209\" data-end=\"2212\" \/>\n<h3 data-start=\"2214\" data-end=\"2252\"><span class=\"ez-toc-section\" id=\"3_How_the_AI_Act_Classifies_Risks\"><\/span>3. How the AI Act Classifies Risks<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"2254\" data-end=\"2372\">The entire regulation is based on a <strong data-start=\"2290\" data-end=\"2313\">risk-based approach<\/strong>.<br data-start=\"2314\" data-end=\"2317\" \/>Every AI system falls into one of four risk categories:<\/p>\n<h4 data-start=\"2374\" data-end=\"2417\"><span class=\"ez-toc-section\" id=\"a_Unacceptable_Risk_%E2%80%93_Prohibited_AI\"><\/span>a) Unacceptable Risk \u2013 <em data-start=\"2402\" data-end=\"2417\">Prohibited AI<\/em><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"2418\" data-end=\"2506\">These are AI systems considered dangerous to human rights or safety.<br data-start=\"2486\" data-end=\"2489\" \/>Examples include:<\/p>\n<ul data-start=\"2507\" data-end=\"2668\">\n<li data-start=\"2507\" data-end=\"2563\">\n<p data-start=\"2509\" data-end=\"2563\">Social scoring (ranking citizens based on behavior);<\/p>\n<\/li>\n<li data-start=\"2564\" data-end=\"2628\">\n<p data-start=\"2566\" data-end=\"2628\">Real-time biometric surveillance of people in public spaces;<\/p>\n<\/li>\n<li data-start=\"2629\" data-end=\"2668\">\n<p data-start=\"2631\" data-end=\"2668\">AI that manipulates human behavior.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"2670\" data-end=\"2719\">Such systems are <strong data-start=\"2687\" data-end=\"2708\">completely banned<\/strong> in the EU.<\/p>\n<hr data-start=\"2721\" data-end=\"2724\" \/>\n<h4 data-start=\"2726\" data-end=\"2766\"><span class=\"ez-toc-section\" id=\"b_High_Risk_%E2%80%93_Strictly_Regulated\"><\/span>b) High Risk \u2013 <em data-start=\"2746\" data-end=\"2766\">Strictly Regulated<\/em><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"2767\" data-end=\"2897\">These systems are allowed, but only under <strong data-start=\"2809\" data-end=\"2831\">strong obligations<\/strong> for safety, quality, and documentation.<br data-start=\"2871\" data-end=\"2874\" \/>They typically involve:<\/p>\n<ul data-start=\"2898\" data-end=\"3088\">\n<li data-start=\"2898\" data-end=\"2932\">\n<p data-start=\"2900\" data-end=\"2932\">Recruitment and HR management;<\/p>\n<\/li>\n<li data-start=\"2933\" data-end=\"2978\">\n<p data-start=\"2935\" data-end=\"2978\">Education, exams, or training evaluation;<\/p>\n<\/li>\n<li data-start=\"2979\" data-end=\"3002\">\n<p data-start=\"2981\" data-end=\"3002\">Credit and banking;<\/p>\n<\/li>\n<li data-start=\"3003\" data-end=\"3046\">\n<p data-start=\"3005\" data-end=\"3046\">Healthcare and critical infrastructure;<\/p>\n<\/li>\n<li data-start=\"3047\" data-end=\"3088\">\n<p data-start=\"3049\" data-end=\"3088\">Law enforcement or migration control.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"3090\" data-end=\"3263\">Companies using high-risk AI must carry out <strong data-start=\"3134\" data-end=\"3160\">compliance assessments<\/strong>, provide <strong data-start=\"3170\" data-end=\"3196\">detailed documentation<\/strong>, ensure <strong data-start=\"3205\" data-end=\"3224\">human oversight<\/strong>, and be ready for <strong data-start=\"3243\" data-end=\"3262\">external audits<\/strong>.<\/p>\n<hr data-start=\"3265\" data-end=\"3268\" \/>\n<h4 data-start=\"3270\" data-end=\"3316\"><span class=\"ez-toc-section\" id=\"c_Limited_Risk_%E2%80%93_Transparency_Required\"><\/span>c) Limited Risk \u2013 <em data-start=\"3293\" data-end=\"3316\">Transparency Required<\/em><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"3317\" data-end=\"3554\">This group covers <strong data-start=\"3335\" data-end=\"3360\">generative AI systems<\/strong> like ChatGPT, Copilot, or image generators, and any AI that interacts directly with people.<br data-start=\"3452\" data-end=\"3455\" \/>They must inform users clearly when content or communication is <strong data-start=\"3519\" data-end=\"3535\">AI-generated<\/strong> and <strong data-start=\"3540\" data-end=\"3553\">not human<\/strong>.<\/p>\n<p data-start=\"3556\" data-end=\"3568\">For example:<\/p>\n<ul data-start=\"3569\" data-end=\"3734\">\n<li data-start=\"3569\" data-end=\"3626\">\n<p data-start=\"3571\" data-end=\"3626\">Chatbots must tell users they\u2019re interacting with AI.<\/p>\n<\/li>\n<li data-start=\"3627\" data-end=\"3677\">\n<p data-start=\"3629\" data-end=\"3677\">Deepfake videos must include visible warnings.<\/p>\n<\/li>\n<li data-start=\"3678\" data-end=\"3734\">\n<p data-start=\"3680\" data-end=\"3734\">AI-generated text or images should be labeled as such.<\/p>\n<\/li>\n<\/ul>\n<hr data-start=\"3736\" data-end=\"3739\" \/>\n<h4 data-start=\"3741\" data-end=\"3774\"><span class=\"ez-toc-section\" id=\"d_Minimal_Risk_%E2%80%93_Free_Use\"><\/span>d) Minimal Risk \u2013 <em data-start=\"3764\" data-end=\"3774\">Free Use<\/em><span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"3775\" data-end=\"3996\">This includes simple or low-impact systems such as spam filters, predictive text, or recommendation algorithms.<br data-start=\"3886\" data-end=\"3889\" \/>These can be used freely but should still follow <strong data-start=\"3938\" data-end=\"3965\">basic ethical standards<\/strong> and <strong data-start=\"3970\" data-end=\"3995\">data protection rules<\/strong>.<\/p>\n<hr data-start=\"3998\" data-end=\"4001\" \/>\n<h3 data-start=\"4003\" data-end=\"4040\"><span class=\"ez-toc-section\" id=\"4_Key_Obligations_for_Businesses\"><\/span>4. Key Obligations for Businesses<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"4042\" data-end=\"4152\">Depending on the risk category, companies will need to fulfill different obligations.<br data-start=\"4127\" data-end=\"4130\" \/>The main ones include:<\/p>\n<h4 data-start=\"4154\" data-end=\"4185\"><span class=\"ez-toc-section\" id=\"a_Technical_Documentation\"><\/span>a) Technical Documentation<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"4186\" data-end=\"4229\">You must keep an updated record describing:<\/p>\n<ul data-start=\"4230\" data-end=\"4390\">\n<li data-start=\"4230\" data-end=\"4258\">\n<p data-start=\"4232\" data-end=\"4258\">what the AI system does;<\/p>\n<\/li>\n<li data-start=\"4259\" data-end=\"4320\">\n<p data-start=\"4261\" data-end=\"4320\">how it was trained (data sources, accuracy, limitations);<\/p>\n<\/li>\n<li data-start=\"4321\" data-end=\"4351\">\n<p data-start=\"4323\" data-end=\"4351\">who is responsible for it;<\/p>\n<\/li>\n<li data-start=\"4352\" data-end=\"4390\">\n<p data-start=\"4354\" data-end=\"4390\">potential risks and safety measures.<\/p>\n<\/li>\n<\/ul>\n<h4 data-start=\"4392\" data-end=\"4412\"><span class=\"ez-toc-section\" id=\"b_Transparency\"><\/span>b) Transparency<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"4413\" data-end=\"4576\">Users must always know when they are dealing with an AI system, and for what purpose.<br data-start=\"4498\" data-end=\"4501\" \/>Example: a virtual assistant must disclose that it is not a human operator.<\/p>\n<h4 data-start=\"4578\" data-end=\"4601\"><span class=\"ez-toc-section\" id=\"c_Human_Oversight\"><\/span>c) Human Oversight<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"4602\" data-end=\"4781\">AI cannot fully replace human judgment in critical decisions.<br data-start=\"4663\" data-end=\"4666\" \/>A <strong data-start=\"4668\" data-end=\"4690\">responsible person<\/strong> must monitor the system, be able to pause or override it, and handle complaints or errors.<\/p>\n<h4 data-start=\"4783\" data-end=\"4819\"><span class=\"ez-toc-section\" id=\"d_Data_Protection_and_Fairness\"><\/span>d) Data Protection and Fairness<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"4820\" data-end=\"4938\">AI systems must respect the <strong data-start=\"4848\" data-end=\"4856\">GDPR<\/strong>, ensuring privacy, non-discrimination, and fairness in automated decision-making.<\/p>\n<h4 data-start=\"4940\" data-end=\"4983\"><span class=\"ez-toc-section\" id=\"e_Certification_for_High-Risk_Systems\"><\/span>e) Certification for High-Risk Systems<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"4984\" data-end=\"5164\">High-risk AI tools will need a <strong data-start=\"5015\" data-end=\"5029\">CE marking<\/strong> (similar to medical devices or safety products).<br data-start=\"5078\" data-end=\"5081\" \/>Without this certification, such systems cannot legally be placed on the EU market.<\/p>\n<hr data-start=\"5166\" data-end=\"5169\" \/>\n<h3 data-start=\"5171\" data-end=\"5203\"><span class=\"ez-toc-section\" id=\"5_How_Companies_Can_Prepare\"><\/span>5. How Companies Can Prepare<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"5205\" data-end=\"5262\">Here\u2019s a simple 5-step roadmap to prepare for the AI Act:<\/p>\n<h4 data-start=\"5264\" data-end=\"5290\"><span class=\"ez-toc-section\" id=\"1_Map_All_AI_Systems\"><\/span>1. Map All AI Systems<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"5291\" data-end=\"5411\">List every AI system your company develops or uses \u2014 including external services or APIs \u2014 and understand how they work.<\/p>\n<h4 data-start=\"5413\" data-end=\"5436\"><span class=\"ez-toc-section\" id=\"2_Assess_the_Risk\"><\/span>2. Assess the Risk<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"5437\" data-end=\"5554\">Classify each system according to the AI Act categories (high, limited, minimal).<br data-start=\"5518\" data-end=\"5521\" \/>This determines your obligations.<\/p>\n<h4 data-start=\"5556\" data-end=\"5589\"><span class=\"ez-toc-section\" id=\"3_Create_an_AI_Usage_Policy\"><\/span>3. Create an AI Usage Policy<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"5590\" data-end=\"5691\">Write internal rules on when and how AI can be used, how data is handled, and who approves new tools.<\/p>\n<h4 data-start=\"5693\" data-end=\"5716\"><span class=\"ez-toc-section\" id=\"4_Train_Employees\"><\/span>4. Train Employees<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"5717\" data-end=\"5895\">Ensure your staff knows what the AI Act is and what it means in practice \u2014 for example, how to label AI-generated content or avoid sharing confidential data with public AI tools.<\/p>\n<h4 data-start=\"5897\" data-end=\"5928\"><span class=\"ez-toc-section\" id=\"5_Keep_Compliance_Records\"><\/span>5. Keep Compliance Records<span class=\"ez-toc-section-end\"><\/span><\/h4>\n<p data-start=\"5929\" data-end=\"6073\">Prepare documents that prove you\u2019re using AI responsibly.<br data-start=\"5986\" data-end=\"5989\" \/>For high-risk systems, keep logs, reports, and monitoring data ready for inspection.<\/p>\n<hr data-start=\"6075\" data-end=\"6078\" \/>\n<h3 data-start=\"6080\" data-end=\"6115\"><span class=\"ez-toc-section\" id=\"6_Penalties_for_Non-Compliance\"><\/span>6. Penalties for Non-Compliance<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"6117\" data-end=\"6198\">Like the GDPR, the AI Act includes <strong data-start=\"6152\" data-end=\"6182\">severe financial penalties<\/strong> for violations:<\/p>\n<ul data-start=\"6199\" data-end=\"6449\">\n<li data-start=\"6199\" data-end=\"6273\">\n<p data-start=\"6201\" data-end=\"6273\">Up to <strong data-start=\"6207\" data-end=\"6228\">\u20ac35 million or 7%<\/strong> of global annual turnover for banned uses;<\/p>\n<\/li>\n<li data-start=\"6274\" data-end=\"6365\">\n<p data-start=\"6276\" data-end=\"6365\">Up to <strong data-start=\"6282\" data-end=\"6303\">\u20ac15 million or 3%<\/strong> for serious non-compliance (e.g., unapproved high-risk AI);<\/p>\n<\/li>\n<li data-start=\"6366\" data-end=\"6449\">\n<p data-start=\"6368\" data-end=\"6449\">Up to <strong data-start=\"6374\" data-end=\"6398\">\u20ac7.5 million or 1.5%<\/strong> for minor violations (e.g., lack of transparency).<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"6451\" data-end=\"6557\">Authorities will have broad powers to investigate, request information, and suspend non-compliant systems.<\/p>\n<hr data-start=\"6559\" data-end=\"6562\" \/>\n<h3 data-start=\"6564\" data-end=\"6601\"><span class=\"ez-toc-section\" id=\"7_Opportunities_Not_Just_Limits\"><\/span>7. Opportunities, Not Just Limits<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"6603\" data-end=\"6769\">While some see the AI Act as a restriction, it\u2019s also a <strong data-start=\"6659\" data-end=\"6679\">huge opportunity<\/strong> for responsible innovation.<br data-start=\"6707\" data-end=\"6710\" \/>Companies that adopt transparent and ethical AI early will:<\/p>\n<ul data-start=\"6770\" data-end=\"6925\">\n<li data-start=\"6770\" data-end=\"6817\">\n<p data-start=\"6772\" data-end=\"6817\">earn <strong data-start=\"6777\" data-end=\"6786\">trust<\/strong> from customers and partners;<\/p>\n<\/li>\n<li data-start=\"6818\" data-end=\"6865\">\n<p data-start=\"6820\" data-end=\"6865\">gain <strong data-start=\"6825\" data-end=\"6845\">market advantage<\/strong> over competitors;<\/p>\n<\/li>\n<li data-start=\"6866\" data-end=\"6925\">\n<p data-start=\"6868\" data-end=\"6925\">attract clients who value data protection and compliance.<\/p>\n<\/li>\n<\/ul>\n<p data-start=\"6927\" data-end=\"7070\">In short, compliance with the AI Act can become a <strong data-start=\"6977\" data-end=\"6996\">mark of quality<\/strong> \u2014 a guarantee that your technology is reliable, fair, and human-centered.<\/p>\n<hr data-start=\"7072\" data-end=\"7075\" \/>\n<h3 data-start=\"7077\" data-end=\"7098\"><span class=\"ez-toc-section\" id=\"8_What_to_Do_Now\"><\/span>8. What to Do Now<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"7100\" data-end=\"7172\">Even before the law is fully enforced (by 2026), companies should start:<\/p>\n<ol data-start=\"7173\" data-end=\"7484\">\n<li data-start=\"7173\" data-end=\"7240\">\n<p data-start=\"7176\" data-end=\"7240\">Appointing an <strong data-start=\"7190\" data-end=\"7215\">AI Compliance Officer<\/strong> or internal reference;<\/p>\n<\/li>\n<li data-start=\"7241\" data-end=\"7305\">\n<p data-start=\"7244\" data-end=\"7305\">Creating an <strong data-start=\"7256\" data-end=\"7272\">AI inventory<\/strong> listing all tools and vendors;<\/p>\n<\/li>\n<li data-start=\"7306\" data-end=\"7365\">\n<p data-start=\"7309\" data-end=\"7365\">Reviewing data practices to ensure <strong data-start=\"7344\" data-end=\"7362\">GDPR alignment<\/strong>;<\/p>\n<\/li>\n<li data-start=\"7366\" data-end=\"7430\">\n<p data-start=\"7369\" data-end=\"7430\">Updating supplier contracts and NDAs to include AI clauses;<\/p>\n<\/li>\n<li data-start=\"7431\" data-end=\"7484\">\n<p data-start=\"7434\" data-end=\"7484\">Planning <strong data-start=\"7443\" data-end=\"7462\">periodic audits<\/strong> and risk assessments.<\/p>\n<\/li>\n<\/ol>\n<hr data-start=\"7486\" data-end=\"7489\" \/>\n<h3 data-start=\"7491\" data-end=\"7508\"><span class=\"ez-toc-section\" id=\"Conclusion\"><\/span>Conclusion<span class=\"ez-toc-section-end\"><\/span><\/h3>\n<p data-start=\"230\" data-end=\"336\">Undeclared AI usage can expose your organization to serious compliance, privacy, and reputational risks.<\/p>\n<p data-start=\"338\" data-end=\"530\"><a href=\"\/ai-disclosure-assessment.php\"><strong data-start=\"338\" data-end=\"381\">Endoacustica\u2019s AI Disclosure Assessment<\/strong><\/a> helps companies detect, evaluate, and manage hidden or unauthorized use of artificial intelligence across internal data, documents, and workflows.<\/p>\n<p data-start=\"532\" data-end=\"732\">With our expertise in <strong data-start=\"554\" data-end=\"614\">cyber intelligence, forensics, and regulatory compliance<\/strong>, we provide clear, actionable insights to keep your business secure and fully <strong data-start=\"693\" data-end=\"709\">AI-compliant<\/strong> under the EU AI Act.<\/p>\n<p data-start=\"734\" data-end=\"868\"><strong data-start=\"734\" data-end=\"764\">Contact Endoacustica today<\/strong> for a professional assessment and ensure your organization stays transparent, compliant, and protected.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>The AI Act is the new European regulation on artificial intelligence. It\u2019s the first law in the world that defines how AI can be developed and used safely, fairly, and transparently.For companies operating in Europe \u2014 or even those offering AI tools to European users \u2014 this marks a major<\/p>\n","protected":false},"author":1,"featured_media":5866,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[5],"tags":[1134],"class_list":["post-5864","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technology","tag-ai-act","two-columns"],"acf":[],"_links":{"self":[{"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/posts\/5864","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/comments?post=5864"}],"version-history":[{"count":5,"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/posts\/5864\/revisions"}],"predecessor-version":[{"id":5972,"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/posts\/5864\/revisions\/5972"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/media\/5866"}],"wp:attachment":[{"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/media?parent=5864"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/categories?post=5864"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.endoacustica.com\/blogen\/wp-json\/wp\/v2\/tags?post=5864"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}