The EU AI Act deadline moved, vendor questionnaires will not - IAPP

Contributors:

Abhishek Sharma

Founder

Move78 International

The first serious European Union Artificial Intelligence Act question for many non-EU AI vendors may not come from a regulator. It may arrive in a customer questionnaire.

That remains true after the provisional agreement reached by the European Parliament and Council on the Digital Omnibus. The legal calendar may shift, but procurement has its own clock. A regulation deadline can move through an amending law. A contract renewal, vendor-risk review or board evidence file often cannot.

That is the practical point vendors outside the EU should not miss. The first AI Act pressure they face may still be commercial, not supervisory: a buyer asking for enough evidence to explain why the system can be procured, deployed, monitored and renewed.

The political deal changed the timeline debate

The European Commission's current AI Act implementation page reflects the Digital Package on Simplification and the political agreement reached 7 May 2026. Following that agreement, rules for AI systems used in certain high-risk areas, including biometrics, critical infrastructure, education, employment, migration, asylum and border control are set to apply from 2 Dec. 2027. For systems integrated into products such as lifts or toys, the rules are set to apply from 2 Aug. 2028.

That timing matters. It gives many organizations more room to prepare for high-risk AI obligations. It also creates a new risk: some vendors may treat extra time as a reason to postpone evidence work.

For legal reliance, current law, political agreement, implementation guidance and final adopted text should not be collapsed into one sentence. For procurement planning, however, the practical message is simpler: buyers now have more reason to ask vendors what evidence exists, not less.

The delay creates a different false comfort

Contributors:

Abhishek Sharma

Founder

Move78 International