Category
In-depth analyses and practical insights about the European AI Act and compliance requirements.
69 articles
On 30 October, the EU and Canada agreed to work towards mutual recognition of conformity assessment results for AI systems. These assessments examine whether a system meets specified requirements. The intention appears in parag...
Read moreOn 12 October, the European Commission published a draft implementing regulation on how it will conduct its own cases under the AI Act. The draft implements Articles 75c and 75d and covers three things: when a company may acces...
Read moreOn 14 October, the reference to EN 18286:2026 was published in the EU Official Journal. The standard concerns quality management for providers of high-risk AI, including post-market monitoring. Compliance creates a presumption ...
Read moreLast week, the European Commission reported a special meeting of its scientific AI panel on the safety of advanced AI. The panel is investigating incidents involving loss of control over AI and has worked with the AI Office on ...
Read moreOn 21 September, the privacy organisation noyb published a leaked negotiating text of the Council of the EU. It is document 12535/26 of 3 September: a revised compromise text from the Irish Presidency on the Digital Omnibus, th...
Read moreWhat OpenAI's textGrain watermark means for Article 50 AI Act, AI detection and publication policies. Primary sources and a practical decision matrix.
Read moreOn 9 September, the European Commission announced an Apply AI webinar on the public sector for 30 September. Its focus is practical adoption, interoperability and European open-source solutions. The agenda also includes the AI ...
Read moreOn 31 August, the European Commission designated ChatGPT as a very large online search engine under the Digital Services Act. The service reported more than 45 million average monthly users in the EU and has four months, until ...
Read moreSince 2 August the Commission has been enforcing the GPAI rules and Article 50 applies. But anyone who went looking for their national AI supervisor this summer mostly found a construction site. In the Netherlands, the implemen...
Read moreArticle 50 has applied since 2 August and the enforcement powers are active. The next hard date in the regulation is 2 December 2026, 99 days from now. Two things converge on that date.
Read moreAfter 2 August 2026, the next hard AI Act date is 2 December 2026. That is when the transitional period for machine-readable marking ends and the new prohibitions on deepfakes and non-consensual intimate content start to apply.
Read moreA licensed voice clone of a well-known actor is still a deepfake under the AI Act. Anyone producing radio and TV commercials with AI voices has carried a transparency duty since 2 August 2026 that is separate from the contract with the voice.
Read moreSince 2 August, the enforcement powers under the AI Act have been operational. Over the past week, the European Commission has made the corresponding structure concrete through three distinct reporting routes. The distinction m...
Read moreSince 2 August 2026 the Commission can actually enforce the general-purpose AI model obligations: request documentation, evaluate models, require measures and impose fines. This is what that means for model providers and for organisations that use GPAI.
Read moreOn 2 August 2026 the Article 50 transparency obligations started to apply and enforcement began. This is what changed that day, what still sits under a transitional period, and which date is now next.
Read moreLast Sunday, Article 50 entered into application. In concrete terms: an AI system that interacts directly with people must say so, unless it is obvious. Providers of generative systems must mark output in a machine-readable way...
Read moreAttention is on 2 August, but there is an earlier date that many organisations are missing. On 10 June the European Commission published the Code of Practice on transparency of AI-generated content. To appear on the list of ini...
Read moreWe asked the same service question to the chatbots of ten major Dutch organisations. Three explicitly tell you that you are talking to AI (NS, Ziggo and CZ), two call themselves a chatbot without using the word AI, three choose softer labels such as digital assistant or digital service employee, and two had no publicly reachable chat. Since 2 August 2026, Article 50(1) of the EU AI Act requires that people know they are interacting with an AI system.
Read moreIn just over three weeks, on 2 August 2026, two parts of the AI Act become genuinely enforceable. And shortly before that, expected between 18 and 30 July, the high-risk delay is due to appear in the Official Journal. For the f...
Read moreDeploying Microsoft 365 Copilot makes you a deployer under the EU AI Act. See which Article 4 measures, role-based training and evidence records your rollout needs.
Read moreThe Dutch Data Protection Authority coordinates algorithm supervision, the RDI covers the technical side, sectoral regulators keep their own turf and Brussels supervises GPAI itself. What is already settled, what still depends on the Dutch implementation act, and who will actually send the letter.
Read moreYes. AI agents are AI systems under Article 3(1) of the AI Act, autonomy is literally part of the definition. There is no separate agent regime. What this means per risk category, who carries what when agents run on GPAI models, and what changes when an agent acts autonomously.
Read moreFine-tune a model, white-label a purchased tool or repurpose an AI system, and under Article 25 of the AI Act you may become the provider yourself. The three routes explained, with the practical reality of GPT fine-tunes, rebranded tools and RAG applications.
Read moreSince 2 August 2026, providers of AI systems that generate synthetic audio, image, video or text must ensure the output is marked in a machine-readable format and detectable as artificially generated or manipulated. The duty sits with the provider, the solution must be effective and interoperable, and systems already on the market have a backstop until 2 December 2026.
Read moreSince 2 August 2026, anyone who uses AI to generate or manipulate text that is published to inform the public on matters of public interest must disclose that the text is artificial. The duty sits with the deployer, the scope is narrow, and it falls away when a human holds editorial responsibility after substantive review. Text is not a deepfake.
Read moreThe transparency obligations under Article 50 are enforceable since 2 August 2026 and were not postponed by the Digital Omnibus. A breach can lead to a fine of up to 15 million euro or 3 percent of total worldwide annual turnover, whichever is higher (lower for SMEs, start-ups and small mid-caps). Enforcement generally sits with the national market surveillance authorities. The duty depends on your role: providers disclose AI interaction and mark synthetic output, deployers inform about emotion recognition and disclose deepfakes and certain AI text; build an evidence layer for it.
Read moreSince 2 August 2026, anyone who provides an AI system that interacts directly with people must design that system so the person knows they are dealing with AI. The duty sits with the provider, it is a design duty, and the disclosure must be clear and distinguishable at the latest at first interaction. Disclosing alone is not enough if the chatbot steers users.
Read moreSince 2 August 2026, anyone who uses AI to generate or manipulate a deepfake must disclose that the content is artificially generated. This covers image, audio and video that appear authentic, not text. The duty sits with the deployer, the disclosure must be clear and given at the latest at first exposure, and a lighter form applies to artistic or satirical work.
Read moreEmotion recognition in the workplace and in education is banned by the AI Act, except for medical or safety reasons. Elsewhere, people must be informed.
Read moreRegulation (EU) 2026/1744 moves Annex III high-risk duties to 2 December 2027 and Annex I to 2 August 2028. Article 50 still applies. What changed and why.
Read moreLinkedIn Recruiter and Talent Insights deploy AI heavily: Recommended Matches, AI-assisted messaging, Hiring Assistant. Almost every EU employer uses it — almost none have it in their AI register.
Read moreHiBob's Bob is popular with Dutch scale-ups thanks to UX and flexibility. The AI layer (Bob AI, talent scoring, sentiment) changes the classification question under the EU AI Act.
Read moreAFAS deliberately takes a cautious position on AI. For Dutch employers using Profit and Insite that is reassuring on the surface — but the classification question does not disappear.
Read moreOn 19 May 2026 the European Commission released draft guidelines for the classification of high-risk AI. A deep dive into the two routes of Article 6, the Article 6(3) filter and the three pitfalls every provider and deployer needs to understand.
Read morePersonio is dominant in DACH and growing in the Dutch SME market. The AI roadmap (Personio Conversations, AI sourcing, automation) changes the classification question. Practical analysis.
Read moreSAP has built an enterprise AI stack with Joule and the Talent Intelligence Hub that runs through HR processes end to end. Practical classification and vendor questions under Annex III point 4.
Read moreHireVue scores candidates on responses, language and game-based assessments. Under the EU AI Act that means: defensive starting point is high-risk. Practical analysis and vendor questions.
Read moreOn 20 April 2026 the Dutch State Secretary Aerdts launched the public consultation on the Implementation Act of the AI Regulation. The law defines who supervises the EU AI Act in the Netherlands, and why organisations should pay attention now.
Read moreRecruitee positions itself as a user-friendly ATS, but Smart Capture, candidate matching and Hire AI hit Annex III point 4(a) directly. Practical analysis and vendor questions.
Read moreArticle 9 requires a continuous risk management system for high-risk AI. Here is what providers must document, test, mitigate, and review before go-live.
Read moreBullhorn is dominant in Dutch recruitment agencies and staffing firms. With AI Recruiter, automation and the GPT layer almost every Bullhorn deployment is within Annex III point 4(a) — for the agency and their clients.
Read moreA municipality needs a FRIA for high-risk AI from Annex III from 2 December 2027. Systems already running have until 2 August 2030. How to organise it.
Read moreWhat Article 10 demands of high-risk AI providers, paragraph by paragraph: the eight data governance areas, quality thresholds, bias rules, and what to document.
Read moreVisma is strongly represented in the Dutch SME and (semi-)public sector. The HR portfolio (Visma Recruit, Talent, Verzuim, Loon) is more conservative on AI — but the classification question does not disappear.
Read moreArticle 14 requires human oversight for all high-risk AI systems. Here is what it means in practice: who oversees, what authority they need, and how to avoid automation bias.
Read moreOn 29 July 2025 the European Commission published guidelines on when software qualifies as an AI system under the AI Act. Seven elements determine whether your tool falls under the regulation.
Read moreLever positions itself as Talent Relationship Management — CRM approach to recruitment. AI features in sourcing, nurture and analytics hit Annex III point 4(a). Practical analysis.
Read moreGreenhouse is known for structured interviewing and bias mitigation. The AI layer (matching scores, AI writing, sourcing recommendations) makes the classification question relevant nonetheless.
Read moreA FRIA is the fundamental rights impact assessment of Article 27 AI Act: who needs one, from when, the six required elements and how to complete it.
Read moreBambooHR is popular with SMEs and scale-ups for its simplicity. The AI layer rolled out since 2024 (Ask BambooHR, AI screening, performance) changes the compliance question under the EU AI Act.
Read moreEuropean Commission missed its February 2026 deadline for high-risk AI guidance. What this means for your compliance timeline and what next steps to take.
Read moreFrom the European AI Office to national supervisors: discover which agencies and authorities will enforce the EU AI Act and what this means for your...
Read moreWhat the EBA letter means for banks: how AI Act duties for credit scoring overlap with CRR/CRD and DORA, and where you must add controls instead of duplicating them.
Read moreThe AI Regulation requires each member state to have at least one operational AI regulatory sandbox by 2 August 2027.
Read moreFRIA, conformity assessment, Article 9 risk management, Annex III classification and GPAI evaluation, and which apply to your role in the value chain.
Read moreThe European Commission published guidelines on July 29, 2025, explaining when software qualifies as an AI system.
Read moreAn in-depth look at the new General-Purpose AI Code of Practice and what it means for model providers, downstream developers, and regulators in the.
Read moreWhy AI compliance starts with procurement and which contractual requirements you must set for suppliers to prevent risks.
Read moreHuman oversight of AI isn't just a checkbox—it requires concrete competencies, tools, and protocols. Public sector guide to meaningful AI control.
Read moreEpisode 4 of the series 'AI in the public sector'. How contaminated data can undermine carefully crafted FRIAs and which techniques government...
Read moreHow government organizations can inventory and classify their AI systems according to the EU AI Act, including a practical approach to risk classification.
Read moreA complete handbook for government organizations on EU AI act implementation, focusing on deadlines, obligations, and practical compliance steps for the...
Read moreEleven months after the EU AI Act entered into force: the first prohibitions apply, employees must be AI-literate, and Brussels is flooded with consultations. Here is what happened and what it means for your organization.
Read moreAn in-depth analysis of the EU AI act implementation in 2025, focusing on initial applications, Commission guidelines, and implications for businesses.
Read moreIn this blog post, we explain how AI sandboxes enable innovation under the EU AI Act while managing risk.
Read moreDiscover how the EU AI Act affects start-ups and SMEs. From compliance requirements to practical tips, including exceptions and supporting measures for...
Read moreWhen do we actually speak of AI? Dive into the official definition and discover why the EU opts for a broad interpretation of artificial intelligence.
Read moreDiscover the world's first comprehensive AI legislation. What does this milestone mean for the future of artificial intelligence in Europe?
Read moreA general exploration of the EU AI Act and its key aspects.
Read more