On May 7, 2026, the EU Council and Parliament announced a postponement of high-risk obligations under Annex III of the EU AI Act from August 2, 2026, to December 2, 2027. Additionally, Annex I, which pertains to AI embedded in regulated products, is now due by August 2, 2028. Despite the extended deadlines, stakeholders must still act promptly as operational compliance is critical. Key requirements that remain unchanged include adherence to Article 12 regarding immutable logs, conformity assessments, and post-market monitoring plans. As procurement teams, particularly in Germany and France, continue to demand AI Act readiness, vendors are encouraged to prepare necessary documentation and tools ahead of the deadline.
EU AI Act Audit Deadline Extended by 16 Months, Operational Compliance Still Required
More Articles From This Day
Anthropic's Claude Mythos Discovers Thousands of Zero-Day Vulnerabilities, Prompting Emergency Meeting Among Bank CEOs
Anthropic's Claude Mythos Preview has identified thousands of zero-day vulnerabilities in major operating systems and web browsers, leading to a meeting between the Federal Reserve chair and Treasury secretary with bank CEOs. The company warns that there is a six-to-twelve month window to patch these vulnerabilities before adversaries can replicate its capability. In controlled tests, Mythos outperformed most human experts in finding and exploiting software flaws, including long-standing bugs. Mozilla's recent Firefox update addressed 271 vulnerabilities identified by Mythos. The model's ability to drastically reduce the cost of finding vulnerabilities poses significant challenges for the cybersecurity industry, reshaping the dynamics between attackers and defenders.
