Governance. Transparency. Compliance.

EU AI Act: get ready for the European AI Regulation

The EU AI Act (Reg. EU 2024/1689) already applies to bans, AI literacy and GPAI models; with the Digital Omnibus of June 2026 the obligations for high-risk systems move to 2 December 2027 (2 August 2028 when embedded in products). Companies must identify their AI systems, classify use cases by risk level and ensure human oversight, documentation and traceability. Violations involving banned systems carry fines of up to 7% of global turnover or 35 million euros. AtWorkStudio, based in Piacenza, guides you through compliance with dedicated consulting and a free assessment based on NIST CSF 2.0.

Request AI Act consulting

Learn more

Free online assessment

AI governance starts with a structured assessment

Our assessment based on the NIST Cybersecurity Framework 2.0 helps you map risks and build a solid foundation for AI Act compliance. A concrete starting point for AI governance in your organisation.

106 questions · Instant report · No commitment

Start the free assessment

EU Regulation 2024/1689

What the AI Act requires from businesses

The AI Act is the world's first regulation on artificial intelligence. It applies directly in all EU member states and requires companies to identify their AI systems, classify them by risk level and ensure transparency, traceability and human oversight. Companies must also define responsibility roles for AI governance.

AI system classification

Companies must inventory all artificial intelligence systems in use and classify each use case according to the risk level defined by the regulation: unacceptable, high, limited or minimal.

Human oversight and traceability

Human oversight is mandatory for automated decisions affecting rights, employment, credit and services. Full logging and traceability of decisions made by AI systems are required.

Documentation and compliance

The AI Act requires detailed technical documentation, impact assessments and usage records. A structured approach to compliance is essential to avoid penalties and demonstrate conformity.

Governance and responsibilities

Companies must define clear roles for AI governance, with precise responsibilities for the oversight, monitoring and ongoing management of AI systems over time.

Penalties

Up to 7% of global turnover or 35 million euros for prohibited systems. Up to 3% or 15 million for other violations. The regulation provides a proportionate sanctioning regime based on severity.

Deadlines: December 2026 and December 2027

From 2 December 2026 transparency for AI-generated content applies; from 2 December 2027 the obligations for standalone high-risk systems (2 August 2028 when embedded in products). Companies must have inventoried their AI systems, classified use cases, prepared documentation and defined governance roles.

The AI Act as an opportunity: govern artificial intelligence in your business

Contact us for dedicated consulting on AI Act compliance. We will guide you through AI system classification, governance definition and meeting the regulation's requirements.