BRUSSELS, July 21 — Two years after the European Union’s Artificial Intelligence Act entered into force on 1 August 2024, the regulation has begun reshaping how AI providers and professional users operate across the bloc and beyond. The mechanics here are layered: a risk-based classification system that bans certain applications, imposes strict obligations on others, leaves some untouched, and — on closer reading — grants Brussels significant flexibility to expand the scope without reopening the legislative text.
The claim is that the AI Act is the world’s first comprehensive legal framework for artificial intelligence, and that is verifiable. The European Commission proposed it on 21 April 2021, the European Parliament passed it on 13 March 2024, and the EU Council unanimously approved it on 21 May 2024.
But the catch lies in the exclusions: AI used solely for military, national security, research purposes, or non-professional use sits outside the rules entirely. Follow the money, and the biggest potential liability falls on commercial applications that affect people’s health, safety, or fundamental rights.
Four risk tiers, plus a fifth for general-purpose AI
The Act’s architecture is simple to describe but complex to implement. It classifies non-exempt AI into four risk levels: unacceptable, high, limited, and minimal, with an additional category for general-purpose AI. Unacceptable-risk systems are outright banned — those that manipulate human behavior, deploy real-time remote biometric identification (such as facial recognition) in public spaces, or engage in social scoring.
These prohibitions are the headline, but the enforcement burden falls on high-risk applications. High-risk AI covers systems that pose significant threats to health, safety, or fundamental rights in sectors such as health, education, recruitment, critical infrastructure, law enforcement, and justice.
Providers and professional users in those fields must meet security, transparency, and quality obligations, undergo conformity assessments, and, in some cases, perform a Fundamental Rights Impact Assessment (FRIA) before deployment. The list of high-risk applications can be expanded without amending the Act itself — a mechanism that gives regulators room to move as technology evolves. Limited-risk applications face transparency obligations — users must know they are interacting with AI — while minimal-risk systems are left unregulated.
General-purpose AI, including generative systems like ChatGPT, is subject to transparency requirements. There are reduced obligations for open-source models, but high-capability models face additional evaluations.
That distinction was a late addition: the draft Act had to be revised to address generative AI, whose general-purpose capabilities did not fit the original framework.
Extraterritorial reach and citizen rights
Like the EU’s General Data Protection Regulation, the AI Act can apply to providers outside the EU if they have users within the Union. That extraterritorial bite is crucial for global tech companies: even if they
Sources
{“@context”: “https://schema.org”, “@type”: “NewsArticle”, “headline”: “**EU AI Act Bans High-Risk AI Applications Effective August 1**”, “description”: “BRUSSELS, July 21 — Two years after the European Union’s Artificial Intelligence Act entered into force on 1 August 2024, the regulation has begun reshaping…”, “datePublished”: “2026-07-21T09:30:00+00:00”, “author”: {“@type”: “Person”, “name”: “Beatrice Ferrari”}, “publisher”: {“@type”: “Organization”, “name”: “InfoPulse Today”, “url”: “https://newsfeed.2bme.xyz/”}, “citation”: [{“@type”: “CreativeWork”, “url”: “https://en.wikipedia.org/wiki/Artificial_Intelligence_Act”}]}
