EU Strikes Deal to Delay AI Act High-Risk Rules, Ban Nudification Apps

2 min readSources: Lex Blog

EU lawmakers agreed to delay core AI Act compliance rules and ban nudification apps by 2026.

Why it matters: This move gives companies more time to adapt AI systems and clarifies key compliance boundaries. The EU’s evolving AI regime will shape global standards for AI use and risk.

  • High-risk AI rule deadlines now December 2027 (stand-alone), August 2028 (embedded systems).
  • Non-consensual intimate image and CSAM AI bans begin December 2026.
  • Compliance exemptions expanded to include small mid-caps as well as SMEs.
  • AI system providers claiming risk exemptions must register in the EU’s public database.

The provisional agreement announced May 7, 2026, gives organizations more time to comply with new European AI rules, particularly for high-risk applications and AI-generated illicit content.

  • Extended compliance: Stand-alone high-risk AI systems must comply by 2 December 2027, while embedded high-risk AI products have until 2 August 2028 (EU Council press release).
  • Targeted bans: Beginning 2 December 2026, it will be illegal to use AI systems that generate non-consensual intimate images or child sexual abuse material.
  • Broader exemptions: The new deal extends compliance exemptions to small mid-caps (SMCs) in addition to SMEs, aiming to foster innovation. Arba Kokalari, European Parliament rapporteur, called it a move to “support startups and scaleups.” (Reuters)
  • Transparency requirements: When seeking exemption from high-risk classification, AI providers must register those systems in the EU’s dedicated database to preserve oversight and ensure legal clarity.

Marilena Raouna, Cyprus’s Deputy Minister for European Affairs, said, “Today's agreement...significantly supports our companies by reducing recurring administrative costs and strengthening the EU’s digital sovereignty.” (Reuters)

The deal aims to drive innovation and protect fundamental rights by cementing new obligations while giving industry clearer, more manageable compliance timelines.

By the numbers:

  • 2 December 2027 — Deadline for high-risk stand-alone AI system compliance
  • 2 August 2028 — Deadline for embedded high-risk AI systems compliance
  • 2 December 2026 — Ban on nudification and CSAM AI systems takes effect

What's next: Formal adoption by the Council and Parliament is the next legislative step.