Skip to Content
ANALYSISMEMBER

The EU AI Act deadline moved, vendor questionnaires will not

A delay in formal high-risk AI Act application does not pause enterprise procurement diligence. For many non-EU AI vendors, the first serious pressure point will still be a customer evidence request.

Published
Subscribe to IAPP Newsletters

Contributors:

Abhishek Sharma

Founder

Move78 International

The first serious European Union Artificial Intelligence Act question for many non-EU AI vendors may not come from a regulator. It may arrive in a customer questionnaire.

That remains true after the provisional agreement reached by the European Parliament and Council on the Digital Omnibus. The legal calendar may shift, but procurement has its own clock. A regulation deadline can move through an amending law. A contract renewal, vendor-risk review or board evidence file often cannot.

That is the practical point vendors outside the EU should not miss. The first AI Act pressure they face may still be commercial, not supervisory: a buyer asking for enough evidence to explain why the system can be procured, deployed, monitored and renewed.

The political deal changed the timeline debate

The European Commission's current AI Act implementation page reflects the Digital Package on Simplification and the political agreement reached 7 May 2026. Following that agreement, rules for AI systems used in certain high-risk areas, including biometrics, critical infrastructure, education, employment, migration, asylum and border control are set to apply from 2 Dec. 2027. For systems integrated into products such as lifts or toys, the rules are set to apply from 2 Aug. 2028.

That timing matters. It gives many organizations more room to prepare for high-risk AI obligations. It also creates a new risk: some vendors may treat extra time as a reason to postpone evidence work.

For legal reliance, current law, political agreement, implementation guidance and final adopted text should not be collapsed into one sentence. For procurement planning, however, the practical message is simpler: buyers now have more reason to ask vendors what evidence exists, not less.

The delay creates a different false comfort

Contributors:

Abhishek Sharma

Founder

Move78 International

MEMBER

Unlock this exclusive content and more

Join the IAPPAlready a member? Sign in

Membership opens up a world of resources

In-depth knowledge

From original research reports and daily news coverage to legislative trackers and infographics, we have the information you need to stay ahead of change.

A global network

Make valuable professional connections through more than 160 local IAPP KnowledgeNet chapters in 70 countries.

Access to the experts

Connect with top thinkers in privacy, AI governance and cybersecurity for fresh ideas and insights.

Learn what you get from membership