A living timeline of the deadlines, official guidance, standards and enforcement that shape the EU AI Act — curated and kept current by the Conformly team.
Full obligations for Annex III high-risk systems — risk management, data governance, technical documentation, logging, human oversight, accuracy/robustness/cybersecurity — become enforceable.
Source: EU AI Act, Annex III
Systems already on the market must have machine-readable marking of synthetic content in place.
Source: EU AI Act, Art. 50
Chatbots must disclose they are AI, and AI-generated or manipulated content (incl. deepfakes) must be marked in a machine-readable way.
Source: EU AI Act, Art. 50
The voluntary Code of Practice helps GPAI providers demonstrate compliance ahead of harmonised standards.
Source: European Commission
General-purpose AI model providers must maintain technical documentation, a training-data summary, and a copyright policy. Rules for GPAI with systemic risk also begin.
Source: EU AI Act, Art. 53–55
Providers and deployers must ensure staff dealing with AI systems have a sufficient level of AI literacy (Art. 4).
Source: EU AI Act, Art. 4
Article 5 prohibited AI practices (social scoring, untargeted scraping for facial recognition, workplace/education emotion recognition, certain biometric categorisation) are banned across the EU.
Source: EU AI Act, Art. 5
Conformly turns these developments into a per-system action plan — with owners, evidence and in-app alerts, so nothing slips.