Update on the EU’s AI Act

The EU AI Act has transitioned from legislative debate into a regulatory framework that requires the immediate attention of small business owners across Ireland. The Act is a landmark regulatory framework that categorises AI systems by risk level, strictly prohibiting harmful practices while imposing rigorous transparency and safety standards on high-risk technologies.

For Irish small business owners, it mandates operational compliance and "AI literacy" for staff to ensure that machine-learning tools are used ethically, legally, and safely within the European market. As of March 2026, several critical updates have been introduced to streamline the implementation process.

Last week, two lead European Parliament committees—Internal Market (IMCO) and Civil Liberties (LIBE)—voted overwhelmingly (101 to 9) to adopt their joint position on the AI Omnibus. This vote is a major milestone because it sets the Parliament’s official stance for the final negotiations with the EU Council. On the 26th of March there will be a full Plenary Vote in the European Parliament to formally adopt this mandate. This will be followed by "Trilogue" negotiations will begin between the Parliament, the Council, and the Commission to finalise the text into law

Since February 2025, certain AI applications have been strictly outlawed within the EU. It is now illegal to deploy systems that engage in social scoring or biometric categorization based on sensitive characteristics. Furthermore, the use of AI for emotion recognition in workplace or educational environments is prohibited. Irish employers should audit their HR and monitoring tools to ensure continued compliance.

In response to the complexity of technical requirements, the European Commission has proposed a "Digital Omnibus" delay. The enforcement deadline for high-risk AI systems- such as those utilised in recruitment, credit scoring, or essential public services—is expected to be extended to December 2, 2027. This extension provides businesses with necessary additional time to ensure their software vendors and internal processes meet the new standards.

By mid-2026, businesses utilising generative AI for marketing or communication must adhere to new transparency mandates. This includes the prominent display of the "EU AI Icon" on synthetic content to inform consumers that they are interacting with machine-generated media.