The EU AI Act Is Now Enforced: What Every Business Must Do Before Q4

The EU AI Act: From Paper to Practice

After years of debate, the European Union's AI Act has moved from legislation into active enforcement. If your business uses AI tools that touch EU residents — directly or through a service provider — you may already have obligations you don't know about.

Who Does the AI Act Apply To?

The Act applies based on where your AI system is used, not just where your company is registered. If you serve EU customers, you fall within its scope for those interactions. The Act categorizes AI systems into four risk levels:

• Unacceptable risk: Prohibited — social scoring, real-time biometric surveillance in public.
• High risk: Heavily regulated — AI in hiring, credit scoring, medical devices, law enforcement.
• Limited risk: Transparency required — chatbots must disclose they are AI.
• Minimal risk: No specific obligations — spam filters, recommendation engines.

Most small businesses will sit in the limited or minimal risk categories, but that does not mean you can ignore the Act entirely.

What You Must Do Before Q4

• Audit your AI tools: List every AI-powered tool you use and identify which ones interact with EU customers.
• Add AI disclosure language: If you use a chatbot, ensure users know they are interacting with an automated system.
• Review vendor agreements: Your AI software providers should be offering updated terms reflecting their compliance posture.
• Document your AI use: Regulators expect businesses to explain what AI they use and why.

The Practical Reality for Smaller Operations

Enforcement is currently focused on high-risk applications and large providers. However, penalties for non-compliance scale with company revenue, and customers in the EU are becoming more aware of their rights around automated decision-making.

Practical takeaway: Run a one-hour AI inventory meeting with your team. List every AI tool in use, identify which interact with EU customers, and add a simple disclosure notice to those customer-facing tools. That alone puts you ahead of most businesses your size.