The EU AI Act: The Complete Guide for Small Teams

The EU AI Act now has over twenty separate guides on this site — one per article, deadline, or obligation. That depth is useful once you know what you’re looking for, but it’s a poor starting point. This page is the starting point: what applies to you, in what order, with a direct link to the full guide on each piece.

Source note: every date and obligation below is drawn from the individual guides linked in this post, each of which is sourced to official EU Parliament or European Commission material. Where dates shifted under the 2026 Digital Omnibus simplification package, this guide reflects the current confirmed timeline — check the lastmod date on each linked guide before relying on it for a compliance deadline.

Start here: does the AI Act apply to you at all?

Before anything else, confirm you’re actually building or deploying an “AI system” under the Act’s legal definition — plenty of automation and simple software rules don’t qualify.

• EU AI Act AI System Definition: The Official 7-Element Test — run your tool through the test before worrying about any obligation below.

The two obligations already in force

These apply now, regardless of company size — they were unaffected by the 2026 delay package.

• Prohibited practices (Article 5), in force since 2 February 2025. A short, fixed list of AI uses that are banned outright — workplace emotion recognition, certain biometric categorisation, dark-pattern manipulation. See EU AI Act Article 5: AI Practices You’re Banned From Using.

  The prohibitions themselves have been legally binding since 2 February 2025. The enforcement infrastructure — national competent authorities and penalty mechanisms — only takes effect from 2 August 2026. The ban applies regardless; what changes on that later date is who can formally penalise a breach.

• AI-literacy duties (Article 4), in force since 2 February 2025. Covers your staff, freelancers, and contractors who use AI tools — not just the tools themselves. See EU AI Act Article 4: What Creator Agencies and Small Teams Owe.

If you build on top of someone else’s AI model or tool

Agencies and small teams that fine-tune, rebrand, or substantially modify a third-party AI tool can unintentionally inherit legal obligations that were meant for the original developer.

• EU AI Act Article 25: When You Become the AI ‘Provider’ — how the legal responsibility can flip from the tool’s original maker to you.
• GPAI Code of Practice: Provider vs. Deployer, Explained — the general-purpose-AI-model obligations that have applied since 2 August 2025.

If you publish AI-generated content

• How to add AI disclosures that comply with the EU AI Act — the Article 50(4) content-disclosure duty.
• The EU AI Act: Everything Digital Creators Need to Know — the creator-specific summary.

Watermarking obligations on AI-generated content are a separate, provider-facing duty from the disclosure requirement above — see the deadlines timeline for the distinction and the current date it applies from.

If you use AI for hiring or other high-risk purposes

• EU AI Act High-Risk Hiring AI: The Annex III Test — whether your hiring tool counts as high-risk, and what that triggers.
• How to Build an EU AI Act AI System Register (Free Template) — the record-keeping obligation that applies once you’re classified.

What the 2026 delay package actually changed

The original 2 August 2026 deadline for most high-risk obligations no longer applies — the European Parliament’s 2026 simplification package pushed several dates back, in some cases by well over a year.

• EU AI Act Deadlines 2026–2028: The Current Timeline — the full, officially sourced date-by-date breakdown.
• The AI Act Omnibus Delay: Relief or a Trap for Small Teams? — why “the deadline moved” doesn’t mean “you can wait.”

Support small teams can actually claim

The Act includes real, underused support specifically for SMEs and start-ups — not just obligations.

• EU AI Act Article 62: Free Support SMEs Can Claim — priority regulatory sandbox access, free training, reduced conformity-assessment fees.

The condensed version

If you only read one more page after this one, make it the checklist:

• EU AI Act Checklist for Small Business: 6 Articles That Matter — the six articles that actually apply to most small teams, in order.
• EU AI Act Compliance Starter Kit: 5 Steps for Small Teams — a 5-step action sequence: scope, prohibited-use check, risk classification, transparency duties, records.

Where the edges are still unsettled

Not every question the AI Act raises has a clean answer yet, even for regulators.

• Recommender Systems: Even EU Regulators Don’t Agree Which Law Applies — where the AI Act and the Digital Services Act overlap without a clear resolution.
• Regulation as a Feature: The Case for AI Transparency — the argument for treating these obligations as a differentiator, not just a cost.

The AI Act’s small-team obligations come down to five questions, in order: does the definition apply to you, are any of your uses prohibited outright, could you have become a “provider” without realising it, do your public AI outputs need a disclosure, and does anything you do count as high-risk. Every guide above answers one of those five. Start with the system definition test if you haven’t already, then work down the list that applies to you.

Browse all Perspectives or get in touch →