AI Act Changes for 2027

AI Act Changes for 2027

The AI Act introduces strict obligations for high-risk AI systems starting December 2, 2027, impacting businesses in the UK. High-risk AI systems must comply with new regulations to ensure safety and transparency.

What is Changing in 2027

The AI Act has been delayed, with obligations for high-risk AI systems now set for 2 December 2027 ^[1]. Providers of standalone high-risk AI systems under Annex III must complete Annex IV documentation and conformity assessments by this date ^[3].

What it Means for Your Business

The AI Act applies to high-risk systems only ^[1], which means businesses using such systems need to ensure compliance by the new deadline. High-risk AI systems include those that could significantly impact individuals' rights or public safety ^[2]. For example, AI used in hiring processes, financial services, or healthcare falls under this category.

Practical Examples

• Hiring Processes: If your business uses AI to screen job applications, you must ensure the system is transparent and does not discriminate against candidates. This involves conducting regular audits to check for biases and ensuring the system provides clear explanations for its decisions. For instance, you might implement a feature that allows candidates to request a review of the AI's decision-making process.
• Financial Services: AI systems used in credit scoring or fraud detection must be robust and fair, with clear documentation of how decisions are made. This includes setting up a system to review and challenge AI-generated decisions, ensuring they are fair and accurate. For example, you could establish a dedicated team to manually review and override decisions made by the AI system when necessary.
• Healthcare: AI tools that assist in diagnosing diseases or prescribing treatments must be accurate and reliable, with thorough testing and validation. This involves rigorous testing protocols and maintaining detailed logs of system performance and updates. For instance, you might conduct regular clinical trials and peer reviews to validate the AI's diagnostic accuracy.

What to Do Now

1. Assess Your AI Systems: Identify which of your AI systems are high-risk and fall under the new regulations. This involves reviewing the specific functions and impacts of your AI systems to determine if they meet the criteria for high-risk status. For example, you could use a risk assessment framework to evaluate the potential risks and impacts of your AI systems.
2. Review the Annex III List: Check if your AI systems are listed as high-risk in the EU's Annex III. This list includes systems that have a significant impact on individuals' rights or public safety, such as those used in critical infrastructure, healthcare, and financial services. You can refer to the official EU AI Act documentation to see if your systems are listed.
3. Hire an Expert: Consult with a specialist like Total Group to understand the compliance requirements and ensure your systems meet the standards. Our team can help you navigate the complexities of the AI Act and provide guidance on how to meet the requirements effectively. For instance, we can conduct a thorough compliance audit and provide tailored recommendations to help you meet the necessary standards.
4. Document Your Processes: Begin compiling the necessary documentation as outlined in Annex IV to demonstrate compliance. This includes creating detailed records of your AI system's design, development, and testing processes, as well as any updates or changes made over time. For example, you might maintain a comprehensive log of all system modifications and updates, including the rationale behind each change.
5. Conduct Conformity Assessments: Ensure your systems undergo the required assessments to prove they meet the high-risk criteria. This involves working with accredited bodies to conduct thorough evaluations of your AI systems, ensuring they meet all necessary standards and requirements. For instance, you could engage an accredited third-party auditor to conduct a compliance review and provide a certification of conformity.
6. Train Your Staff: Educate your team on the new regulations and how to maintain compliance. This includes providing training sessions and resources to help your staff understand the implications of the AI Act and how to implement necessary changes. For example, you could offer regular training workshops and online resources to keep your team up-to-date with the latest compliance requirements.
7. Monitor Updates: Stay informed about any further changes or clarifications to the AI Act. This involves regularly reviewing updates from the EU and other relevant bodies to ensure your business remains compliant with the latest requirements. For instance, you could subscribe to official EU AI Act newsletters and participate in industry forums to stay informed about any updates.

Key Dates

• 2 December 2027: Deadline for Annex III systems to complete documentation and conformity assessments ^[3].

Total Group helps businesses adopt AI safely, starting with an AI Readiness Assessment. Talk to us on 01727 881 224.

How Total Group can help

Total Group helps businesses adopt AI safely, starting with an AI Readiness Assessment. Talk to us on 01727 881 224.

• AI for business
• Private AI on hardware you own
• Free AI Readiness Review

Talk to us about what 2027 means for your business or call 01727 881 224.

Sources

1. AI Act | Shaping Europe's digital future – European Union (digital-strategy.ec.europa.eu)
2. Implementation Timeline | EU Artificial Intelligence Act (artificialintelligenceact.eu)
3. EU AI Act and assessment: 2027 is not a snooze button (uniwise.eu)
4. EU agrees to delay key AI Act compliance deadlines (traverssmith.com)
5. The EU Artificial Intelligence (AI) Act | FAQs (puntersouthall.law)