The EU AI Act Newsletter

From first requests for information to crisis preparedness and ChatGPT's designation under the Digital Services Act.
Welcome to the EU AI Act Newsletter, a brief biweekly newsletter by the Future of Life Institute providing you with up-to-date developments and analyses of the EU artificial intelligence law.
Legislative Process
EU orders leading AI labs to detail security practices: Maximilian Henning from Euractiv reports that the European Commission has made first use of its new AI Act enforcement powers, requesting information from leading developers on cybersecurity, safety and copyright compliance. This follows a string of high-profile cybersecurity incidents at several leading AI labs just weeks ago. Tech Commissioner Henna Virkkunen told Euractiv that some providers of the “most advanced” models had received requests, without naming them, adding that others were left out because the Commission has “already had very close dialogue” with them. Anthropic, OpenAI, Google, Meta and Mistral did not immediately respond to Euractiv questions. According to Virkkunen, the Commission wants to know how labs prevent humans or AI from stealing their models, how much access they give external evaluators, and how usage is monitored once a model is public. Separately, more than 30 companies that had not published [...]
---
Outline:
(00:36) Legislative Process
(01:53) Analyses
---

First published:

September 8th, 2026


Source:

https://artificialintelligenceact.substack.com/p/the-eu-ai-act-newsletter-110-powers

---

Narrated by TYPE III AUDIO.

---
Images from the article:
Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

Anthropic sets out how it will mark Claude's text as the new transparency obligations take effect, while experts reject claims that watermarking degrades AI writing.
Legislative Process
Fourth GPAI Signatory Taskforce meeting: The European Commission's AI Office reports on the Taskforce's 17 July 2026 session, which covered the Safety and Security and Copyright chapters of the GPAI Code of Practice. On the former, the Office explained how analysing model usage can form part of post-market monitoring under Measure 3.5, since information about how a model is used, and its behaviour during usage, complements pre-deployment evaluations and informs several stages of systemic risk assessment. Participants also discussed ‘marginal-risk’ clauses, which indicate that, should competitors begin pushing the frontiers of capabilities by deploying unsafe models, a provider could consider doing likewise. The Office highlighted that such clauses could be invoked only in exceptional circumstances and under appropriate evidentiary and procedural safeguards. Turning to copyright, Measure 1.3(4) commits signatories to publishing information that enables affected rightsholders to learn which web crawlers are used and their robots.txt features, and to notifying them automatically of updates.
How are AI agents addressed within the AI Act? The Commission's AI Act Service Desk sets out [...]
---
Outline:
(00:38) Legislative Process
(03:07) Analyses
(08:40) Discussion about this post
(08:44) Ready for more?
---

First published:

August 24th, 2026


Source:

https://artificialintelligenceact.substack.com/p/the-eu-ai-act-newsletter-109-the

---

Narrated by TYPE III AUDIO.

---
Images from the article:
Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

New transparency obligations apply, and the AI Office opens complaint and whistleblower channels.
Legislative Process
Commission starts enforcing AI Act rules and new transparency requirements: The European Commission reports that, from 2 August 2026, its AI Office, alongside national authorities, has begun enforcing the AI Act. Additionally, the new transparency rules have also taken effect. Under those rules, chatbots and other interactive systems must tell users they are dealing with AI rather than a human, deepfakes must be labelled, and AI-generated or altered content must carry machine-readable marks so it can be detected more easily. Alongside this, the Commission published a first list of more than 180 organisations that have signed the Code of Practice operationalising those transparency rules. Enforcement now also covers prohibited practices and providers of general-purpose AI models, including their documentation, copyright policy and training-data summaries, with extra obligations for models posing systemic risks. Responsibility for enforcing the transparency rules and prohibited practices is shared between the AI Office, national competent authorities and the European Data Protection Supervisor. The AI Omnibus, meanwhile, postpones the high-risk rules to 2 December 2027 and the rules for high-risk AI systems integrated into regulated products to 2 August 2028.
[...]
---
Outline:
(00:35) Legislative Process
(03:05) Analyses
(06:41) Jobs
(08:50) Discussion about this post
(08:54) Ready for more?
---

First published:

August 12th, 2026


Source:

https://artificialintelligenceact.substack.com/p/the-eu-ai-act-newsletter-108-enforcement

---

Narrated by TYPE III AUDIO.

---
Images from the article:
Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

The Commission publishes new transparency guidelines and confirms the Code of Practice on AI-generated content, as attention turns to the EU's enforcement powers taking effect on 2 August.
Legislative Process
Commission publishes guidelines on transparency obligations for providers and deployers of certain AI systems: The European Commission announces guidelines to help providers and deployers of AI systems meet the AI Act's transparency obligations, which begin to apply on 2 August 2026. According to the Commission, these obligations are intended to help people recognise when they are interacting with AI or when content has been generated or altered by AI, thereby reducing the risk of deception and manipulation. In practical terms, providers must design systems that inform users of direct interaction with an AI and add machine-readable marks to enable detection of AI-generated or manipulated content. Deployers must disclose deep fakes, unreviewed AI-generated content on matters of public interest, and emotion recognition or biometric categorisation systems. The guidelines clarify key concepts, exemptions and examples, and explain how compliance may be demonstrated, including through a code of practice. Systems placed on the market before August must comply with marking obligations from 2 December 2026.
Commission opinion on the assessment of [...]
---
Outline:
(00:41) Legislative Process
(02:56) Analyses
(07:43) Discussion about this post
(07:47) Ready for more?
---

First published:

July 27th, 2026


Source:

https://artificialintelligenceact.substack.com/p/the-eu-ai-act-newsletter-107-enforcement

---

Narrated by TYPE III AUDIO.

---
Images from the article:
Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.

Experts call for robust enforcement of the rules on general-purpose AI with systemic risk, as the Commission unveils a new plan on advanced AI and cybersecurity.
Legislative Process
New EU plan to address the risks and opportunities of advanced AI for cybersecurity: The European Commission sets out a plan to manage the risks and seize the opportunities of advanced AI in cybersecurity. While AI can strengthen security, it can also be misused to find vulnerabilities, automate attacks, and increase the scale and speed of cyber incidents. Accordingly, the plan brings together member states, industry and EU-level organisations. Among its key actions, the Commission will help build an EU evaluation capacity to support the AI Office, work with ENISA to define a blueprint for structured access to advanced models, and create a secure testing platform for cybersecurity with the Joint Research Centre. Furthermore, it calls for stronger cyber hygiene, greater use of AI to fix vulnerabilities, and continued investment through AI Factories, Gigafactories, and a new EU Grand Challenge on AI for cybersecurity. The plan builds on existing rules, including the AI Act, the Cyber Resilience Act, the Network and Information Systems Directive and the Cyber Solidarity Act.
Council [...]
---
Outline:
(00:41) Legislative Process
(03:00) Analyses
(07:51) Discussion about this post
(07:55) Ready for more?
---

First published:

July 13th, 2026


Source:

https://artificialintelligenceact.substack.com/p/the-eu-ai-act-newsletter-106-calls

---

Narrated by TYPE III AUDIO.

---
Images from the article:
Apple Podcasts and Spotify do not show images in the episode description. Try Pocket Casts, or another podcast app.