The EU Artificial Intelligence Act comes into full force on August 2, 2026 — just 7 weeks away. If you're a UK-based business that sells AI products or services to EU customers, this law applies to you.
Penalties for non-compliance can reach €35 million or 7% of global annual revenue — whichever is higher. Yet most UK SMEs haven't started preparing.
This guide covers exactly what UK businesses need to do, the risk tiers, the documentation you need, and how to get compliant before the deadline.
Yes. The EU AI Act has extraterritorial reach. If your AI system is used by someone in the EU — even if you're based in London, Manchester, or Edinburgh — you're in scope.
This applies to UK businesses that:
The AI Act classifies AI systems into four risk levels. Most UK AI businesses fall into Limited Risk or High Risk:
Social scoring systems, real-time biometric surveillance in public spaces. Banned outright. Unlikely to apply to most UK businesses.
This is where most UK AI companies land. Includes AI used for:
AI systems that interact with humans (chatbots, AI customer service, content generation). You must clearly inform users they're interacting with AI.
AI used for internal processes, spam filters, AI in games. No obligations beyond voluntary codes of conduct.
Our EU AI Act Compliance service maps your systems to the correct risk tier and produces all required documentation — delivered in 48-72 hours.
Get Your Compliance Gap Analysis →Identify every AI system you operate. Document what it does, what data it processes, and whether it affects EU users. This is the foundation of your compliance documentation.
Map each system to its AI Act risk tier (Prohibited, High, Limited, or Minimal). Most AI customer service tools, content generators, and analytics platforms fall under Limited Risk with transparency obligations.
For high-risk systems, you need:
Set up processes for ongoing monitoring, incident reporting, and regular audits. The AI Act doesn't stop at compliance — you need to stay compliant.
The EU AI Act has some of the harshest penalties in tech regulation:
Our team maps your AI systems, identifies gaps, and produces all required compliance documentation. Fixed price from £2,000.
Start Your Compliance Check →Yes. The Act applies extraterritorially — any business that places AI systems on the EU market or affects EU residents must comply, regardless of where the business is based.
Regulators can issue fines up to €35 million or 7% of global revenue. Enforcement begins August 2, 2026 for high-risk systems. Some obligations (like AI literacy) are already in effect.
A basic compliance audit and documentation pack can be completed in 48-72 hours. Full conformity assessment for high-risk systems may take 2-4 weeks depending on complexity.
Not necessarily. The AI Act's requirements are primarily technical documentation, risk management, and transparency measures — not legal advice. A technical compliance partner is often more practical than a law firm.
GDPR governs personal data processing. The AI Act governs AI system safety, transparency, and risk management. They overlap but are separate regulations. Most businesses need to comply with both.