Does the EU AI Act apply to UK companies?
Check your systems, role and EU exposure.
It can apply to UK firms placing AI systems on the EU market. Your legal owner should check each system’s role, classification and current duties against the published timetable. This is not legal advice.
30 minutes with James · how this would work in your organisation
The basis for this approach
This guide reuses the dated regulatory position and official sources already published in Tenhaw’s governance guide. This is delivery guidance, not legal advice. Your legal owner determines the duties and classification for each system.
The demand signal
Regulation (EU) 2026/1744 entered into force on 27 July 2026. It moved the application of Chapter III, Sections 1 to 3, except Article 6(5), to 2 December 2027 for Article 6(2)/Annex III high-risk systems and 2 August 2028 for Article 6(1)/Annex I systems. Its amended Article 4 still requires providers and deployers to take measures supporting the AI literacy of staff and people using systems on their behalf, without guaranteeing any individual’s specific level. Confirm your system’s classification, your role and the duties that follow with the legal owner.
Bring the reason this is on your agenda to a 30-minute call with James, and we can explore what it would take in your organisation.
Book a 30-minute callWhy it stalls
2 failure modes we keep meeting
UK location is mistaken for the whole scope test
A UK firm selling or deploying into the EU needs its legal owner to check the systems and the firm’s role. Location alone does not settle the question. This is not legal advice.
A moved date becomes a reason to stop the inventory
The inventory, decision owners and evaluation records still help the business decide what to test or change next. Confirm the current legal duties rather than assuming every use case has the same obligations.
If one of these sounds familiar, bring it to a 30-minute call with James and we can explore a way past it.
Book a 30-minute callHow we approach it
3 moves, in order
- 01
Count and describe the systems
Identify purposes, owners, source access, review points and evidence gaps. Keep embedded vendor features and tools adopted outside a formal programme in view.
- 02
Run the classification with counsel
Use practical consequence triage first, then the legal test against the current regulation with counsel. Keep the classification live as scope and use change. This is delivery guidance, not legal advice. Your legal owner determines the duties and classification for each system.
- 03
Produce the records during delivery
The governance method connects audit trails, evaluation results, approval records and change history to the workflow. Review which records support the legal owner’s decisions for your system.
Review which records support the legal owner’s decisions for your system.
Prefer to talk it through? Ask us on a discovery call →
Sources
Every source below was opened and read before it was attached. Where nothing survived that check, the claim on this page was softened rather than given a plausible-looking link.
Tenhaw, AI governance and regulatory evidenceRegulation (EU) 2026/1744, final Official Journal textOfficial Journal 24 July 2026, checked 5 November 2026. Article 1(5) replaces AI literacy duties; Article 1(40)(b) amends high-risk application dates; Article 4 governs entry into force.European Commission, AI Act framework and application timelinePrimary overview checked 5 November 2026, with a link to the final AI Omnibus text and current high-risk dates.European Commission, AI Omnibus enters into forcePublished 27 July 2026. Confirms entry into force, amended high-risk dates and the simplification of the previous company AI-literacy requirement.EU AI Act, original Regulation2024/1689Original legal text. Read it with the amending legislation linked by the Commission, not as an unchanged current timetable.The closest guides to this one
Nearest first, then the rest. Each one carries the same label: written from delivery, or the method we would bring. All 34 are on the hub.
What should an AI governance framework include?
Keep the AI inventory, accountable decisions and evidence connected.
Our approachISO 42001 certification in the UK: what it covers and what it doesn’t
Prepare your AI management evidence.
Our approachHow to run an AI risk assessment
Run an AI risk assessment from a proportionate inventory through consequence triage, legal classification and records kept current during delivery.
Our approachHow do we verify an AI agent beyond a vendor demo?
Give your release decision evidence the business can inspect.
Our approachAgent identity and access
Give each workflow the authority it needs, with a way to take it away.
DeliveredWhat does an AI-native software delivery lifecycle look like?
Connect requirements, AI engineering and human release decisions.
Or bring the problem to a call instead of reading three more of these.
Book a 30-minute callWork out the next step for your team.
A 30-minute call with James Rooney to discuss your workflow, people and budget. Leave with a rough scope and a useful next step.
90-day outcome programme · £120k or £180k fixed · 90 days · excluding VAT
No time that suits? Email hello@tenhaw.com. Calendar not loading? Open it on cal.com.
Describe the work
Describe the work in a paragraph. James replies with a rough scope and budget range within two working days.
Questions this guide answers
Does the EU AI Act apply after Brexit?
It can. UK firms placing systems on the EU market need to check the Act against their systems and role. Your legal owner should establish the duties for the particular case. This is not legal advice.
When do the high-risk rules apply?
Regulation (EU) 2026/1744, Article 1(40)(b), sets application of Chapter III, Sections 1 to 3, except Article 6(5), at 2 December 2027 for systems classified as high-risk under Article 6(2) and Annex III, and 2 August 2028 for those under Article 6(1) and Annex I. Other provisions have their own dates. Confirm the current position with your legal owner; this is not legal advice.
Should we pause governance work because the deadline moved?
Continue with a proportionate inventory and clear decision ownership. The changes include more than timing, so your legal owner should verify current duties while delivery teams identify purposes, owners, access, review points and evidence gaps. This is not legal advice.
Does ISO 42001 cover the EU AI Act?
No. ISO/IEC 42001 certifies how an AI management system is run; the Act asks what a particular system evidences. The disciplines overlap, but certification does not discharge per-system obligations. This is not legal advice.
What evidence does a high-risk system need?
The existing governance guide identifies conformity assessment, technical documentation, risk management, data governance, human oversight, registration and post-market monitoring. Your legal owner must establish which duties apply to your system and role. This is not legal advice.
Who classifies our systems?
Delivery and risk teams can first triage the inventory by consequence. The legal test belongs with counsel and the accountable legal owner, using the current official text. Record the decision and revisit it when the system’s scope changes.