The implementation of the EU AI Act is fundamentally altering corporate operations, shifting from a theoretical legal framework to daily operational requirements. While the general entry into force occurred in August 2024, August 2, 2026, marks a critical milestone for transparency and technical competence, despite recent adjustments to the timeline for high-risk systems.

Mandatory Transparency and Deepfake Regulation

Starting in August, organizations—including companies, public institutions, and agencies controlling AI deployment—must disclose when an image, video, or audio recording has been generated or altered by artificial intelligence. These rules specifically target deepfakes. While publishing such content is not prohibited, it must be clearly labeled. This ensures that audiences can distinguish synthetic content from reality.

The New Roadmap for High-Risk HR Systems

The Human Resources sector is under particular scrutiny. Tools used for CV screening, performance evaluation, or targeted job advertising are classified as high-risk systems. Originally slated for August 2026, the compliance deadlines for these technologies have been pushed back to December 2, 2027, following the introduction of the Digital Omnibus on AI, a set of amendments designed to simplify implementation and reduce administrative burdens.

However, this extension is not a license for inaction. Systemic vulnerabilities remain high: a 2025 Metomic report indicates that 68% of organizations have experienced security incidents where employees shared sensitive data with AI tools like ChatGPT, with HR data appearing in 82% of examined breaches.

Human Oversight and the Right to Explanation

The AI Act reinforces the principle that artificial intelligence should recommend, but not decide autonomously when legal effects or professional careers are at stake. Companies deploying high-risk systems must ensure effective human oversight and inform employees or their representatives in advance. Crucially, individuals affected by an AI-driven decision have the right to obtain a clear explanation of how that output was reached.

Establishing a Global Governance Standard

The impact of European regulation is extending far beyond the EU's borders. Many non-EU firms, from Washington to Tokyo, are already integrating AI Act principles into their global governance frameworks to maintain market access or anticipate emerging international standards. In Poland, for instance, a Commission for the Development and Security of AI has been established to handle complaints regarding discriminatory algorithms and order the market withdrawal of systems posing risks to life or health.