The EU AI Act already applies to Irish businesses. The bans on prohibited AI practices and the duty to ensure staff AI literacy have been in force since 2 February 2025, chatbot disclosure rules arrive on 2 August 2026, and the heavier high-risk obligations are expected to apply from 2 December 2027, subject to formal adoption of the May 2026 Omnibus agreement. For most Irish SMEs, compliance comes down to five practical steps: know your AI, know your role, classify each system, meet the duties that follow, and keep the evidence.
What the EU AI Act is, in one paragraph
The AI Act (Regulation (EU) 2024/1689, full text on EUR-Lex) is the EU’s risk-based rulebook for artificial intelligence. It bans a short list of practices outright, places structured obligations on high-risk systems such as recruitment and credit-scoring tools, imposes lighter transparency duties on chatbots and AI-generated content, and leaves most everyday business AI in a minimal-risk category where good governance, rather than heavy regulation, is the expectation.
What is already in force
Two sets of duties have applied since 2 February 2025. Article 5 bans practices such as social scoring, emotion recognition in the workplace and untargeted scraping of facial images. Most ordinary business tools do none of these things, but the check needs to be made and recorded. Article 4 is broader: every organisation that uses AI must ensure its staff have a sufficient level of AI literacy for their role. Since 2 August 2025, providers of general-purpose AI models have carried their own obligations — though using ChatGPT or Copilot does not make you a GPAI provider; that regime applies to the companies that build and supply the models.
The deadlines coming next
- 2 August 2026 — Article 50 chatbot disclosure: customers must be told they are dealing with AI.
- 2 December 2026 — labelling of AI-generated images, audio, video and public-facing text.
- 2 December 2027 — Annex III high-risk obligations, per the Omnibus political agreement of 7 May 2026. This date is subject to formal adoption; if the Omnibus is not adopted in time, the original 2 August 2026 date stands.
- 2 August 2028 — high-risk rules for AI safety components in regulated products (Annex I).
The Irish dimension
Ireland is building its national enforcement structure. The General Scheme of the Regulation of Artificial Intelligence Bill 2026 was published on 4 February 2026 (see enterprise.gov.ie), the AI Office of Ireland is being stood up, and the Bill is priority legislation during 2026. National supervision is taking shape now — which is precisely why an Institute of Directors survey in Q1 2026 finding that 65% of Irish directors don’t understand the new AI rules should concentrate minds at board level.
The five steps to compliance
- Inventory your AI. List every system in use — including the AI features inside ordinary software. You cannot govern what you have not recorded.
- Establish your role. Most Irish SMEs are deployers, not providers, and the difference decides most of your obligations.
- Classify each system. Check it against Article 5, Annex III, Annex I and Article 50. Recruitment tools are the common trap: CV screening is high-risk even with a human making the final call.
- Meet the duties that follow — literacy training now, chatbot disclosure before August 2026, and deployer duties under Article 26 for any high-risk system.
- Keep the evidence. A register, dated decisions, training records and vendor answers. When a regulator, customer or insurer asks, documentation is the answer.
What it costs to get wrong
Penalties scale with the breach: up to €35m or 7% of global turnover for prohibited practices, and up to €15m or 3% for high-risk non-compliance, with proportionate caps for SMEs. The realistic risk for most Irish firms is not the headline fine but being unable to show a customer, funder or regulator that AI use is governed at all.
Where to start this week
Every one of the five steps above starts from the same place: a current register of the AI your business actually uses, classified against the Act, with the obligations and deadlines attached. That is exactly what AI Register Ireland builds for you. See how the EU AI Act applies in Ireland or how the register works.