AI Deadline | Thursday 14 May 2026
Things moving through AI regulatory pipelines that will matter in the next 3 to 6 months
đŽ Act now
The EU Digital Omnibus deal closed on May 7. After months of failed trilogues, the European Parliament and Council reached a provisional agreement. A lot changed. But one thing didnât: if youâre a GPAI provider, your obligations under Articles 51 to 55 still kick in on August 2. Thatâs 80 days.
Those obligations include maintaining and publishing technical documentation, complying with copyright law requirements, and publishing summaries of training data. If you put any general-purpose AI model into the EU market, or access the EU market via an API, youâre covered. The GPAI category isnât something that only applies to the GPT-4 tier. A smaller model with broad capability can qualify. If your model can do a reasonable range of tasks and you make it available to others, read the GPAI chapter.
The practical gap most founders have is training in data documentation. The AI Office expects a summary of what you trained on and where copyright clearance comes from. If you donât have that now, you canât generate it retroactively. Commissioning that work in week eleven isnât a strategy.
The watermarking obligation for AI-generated content under Article 50 did move. Itâs now December 2, 2026, with a transitional period for systems already on the market. Thatâs meaningful relief. But it doesnât shift the August 2 date for GPAI documentation.
If youâve been watching the Omnibus saga and telling yourself the delay means your August deadline got pushed, check whether youâre actually in GPAI scope. If you are, you got nothing from this deal. Start the documentation work this week.
đĄ Heads up
Coloradoâs legislature passed SB 189 on May 12, repealing and replacing the original AI Act with something far less demanding. The duty of care, risk management programs, and algorithmic impact assessments are gone. What replaced them is a disclosure framework: when your automated decision-making system contributes to an adverse decision, the affected person gets a plain-language explanation within 30 days and the right to request human review. Effective date is January 1, 2027. Governor Polis has said heâll sign. The court-imposed enforcement pause on the original Act runs through June 30, so the original law is effectively dead before the new one arrives. If youâre building automated decision-making tools for US customers, update your compliance roadmap. Coloradoâs obligations are simpler than what they replaced, but theyâre real and coming.
The ICOâs consultation on automated decision-making and profiling closes May 29. Thatâs 15 days. This is the first detailed interpretation of the Data (Use and Access) Actâs changes to UK GDPR, and it sets out what the ICO expects from companies using AI to make or assist decisions about individuals. The guidance covers transparency requirements, the right to human review, and documentation standards. Whatever lands in final guidance becomes your compliance floor. If you use AI in hiring, credit, content moderation, or any context where individual-level decisions are made, the guidance addresses your product directly. Reading the consultation and submitting a response takes a few hours and costs nothing. The form is at ico.org.uk.
In focus
đȘđș | The EU AI Omnibus deal: who got the reprieve and who didnât
The May 7 deal was greeted with headlines about delays and simplification. Thatâs accurate but incomplete. The benefit is not evenly distributed, and understanding whoâs actually better off matters a lot if youâve been building compliance plans around assumptions that might not apply to your product.
The clear winners are companies deploying high-risk AI in the Annex III categories: employment, education, credit, biometrics, and similar. Their deadline moved from August 2, 2026, to December 2, 2027. Thatâs 16 months of additional runway. If youâve been sweating your AI hiring product or credit-scoring model under EU law, this is a genuine reprieve.
Companies deploying AI embedded in CE-marked products like medical devices get even more time, until August 2, 2028.
The losers, in relative terms, are GPAI providers. The Omnibus explicitly did not move the GPAI obligations in Articles 51 to 55. Those still apply from August 2. The AI Office has been consistent about this throughout the negotiations. If youâre a GPAI provider, the deal changed nothing about your timeline.
Thereâs a subtler problem too: the political agreement isnât law yet. It still needs formal endorsement from Parliament and Council, then publication in the Official Journal. That process takes two to three months. A deal from May 7 probably doesnât appear in the Official Journal until July or August. For Annex III companies, the delay needs to be in force before August 2 to actually protect you. If publication slips, August 2 is still legally binding. Donât stand down your compliance work on the assumption that the delay is already operative.
The watermarking story is separately worth explaining because itâs genuinely confusing. The Omnibus moved the general content labeling obligation under Article 50 to December 2, 2026. But GPAI providers still face watermarking requirements as part of their GPAI obligations from August 2. If youâre a GPAI provider and youâre thinking the watermarking grace period helps you, it doesnât. That transitional window is for deployers using generative AI in content creation, not for providers of the underlying models.
One thing nobody predicted: a full EU ban on ânudification apps,â meaning AI systems whose primary purpose is generating non-consensual intimate images. These products have until December 2, 2026, to comply or shut down. Itâs a narrow category, but any founder operating anywhere adjacent to that space should read the prohibition text directly.
The practical conclusion is that this deal requires you to know which category youâre in before you can know how much it helps you. If you havenât classified your AI systems against the GPAI and Annex I/III frameworks yet, the Omnibus deal isnât a reason to delay that classification. Itâs a reason to do it now.
đą On the radar
đșđž USA | Bartz v. Anthropic fairness hearing held today. No confirmed outcome at time of writing. Judge MartĂnez-OlguĂn heard arguments on the $1.5 billion settlement this afternoon. If approved, the ~$3,000 per book benchmark becomes the operative reference point for future training data copyright disputes. Check anthropiccopyrightsettlement.com for updates.
đŹđ§ UK | Childrenâs online safety consultation closes May 26. If your product can reach under-16s, 12 days remaining. AI chatbots and generative tools accessible to minors are in scope. Final obligations land in 2027, but the window to respond is closing.
đșđž USA | Colorado original AI Act enforcement pause holds through June 30. SB 189 now awaits Polisâs signature. Once signed, the original Act is dead and the new disclosure framework is the operative one. Effective January 1, 2027.
đȘđș EU | GPAI Code of Practice expected in June. The AI Officeâs Code of Practice covering transparency and watermarking for GPAI providers is due to be finalised this month or next. This is the document that explains in practical terms what your August 2 obligations actually require. GPAI providers should be tracking the drafts.
đșđž USA | Connecticut governor expected to sign AI Responsibility and Transparency Act imminently. Employment notification obligations from October 1, 2026. If youâre selling hiring automation to US customers and covered this last week, the clock is ticking.
The one thing to do this week
If you put a general-purpose AI model into the EU market, check right now whether the Omnibus delay applies to you. It probably doesnât. GPAI obligations hit August 2 regardless.
Deadline tracker
EU | GPAI model enforcement (Articles 51-55: documentation, copyright compliance, training data summaries) | 2 August 2026 | 80 days; Omnibus deal does not apply; confirmed unchanged
EU | AI-generated content watermarking and labeling (Article 50) | 2 December 2026 | Moved by Omnibus from August 2; transitional period for existing systems on market
EU | Annex III high-risk AI systems (employment, credit, biometrics, education, law enforcement, borders) | 2 December 2027 | Moved from August 2, 2026, by Omnibus deal; requires Official Journal publication to take legal effect. August 2, 2026 still binding until then
EU | High-risk AI embedded in regulated products (Annex I: medical devices, machinery, etc.) | 2 August 2028 | Moved by Omnibus deal; same publication caveat applies
EU | Nudification app ban | 2 December 2026 | New prohibition added by Omnibus; AI systems generating non-consensual intimate imagery must cease or come into compliance
EU | Digital Omnibus Official Journal publication | Estimated July/August 2026 | Political agreement reached May 7; formal endorsement and publication required before new dates take effect
USA | Colorado original AI Act enforcement pause | 30 June 2026 | Court order holds; SB 189 now passed; Polis expected to sign; original Act effectively superseded
USA | Colorado SB 189 (replacement disclosure framework for ADM) | 1 January 2027 | Passed May 12 with bipartisan majority; governor to sign; replaces duty-of-care model with disclosure and human review rights
USA | Connecticut AI Responsibility and Transparency Act: employment notification obligations | 1 October 2026 | Passed House May 1; governor signature pending; hiring AI affected
USA | Connecticut AI Responsibility and Transparency Act: companion chatbot and frontier model obligations | 1 January 2027 | Same bill; age verification, manipulative design prohibitions, minor access controls
USA | Bartz v. Anthropic copyright settlement | Fairness hearing 14 May 2026 | $1.5B settlement; ~$3,000/book benchmark; outcome pending at time of writing
USA | Texas TRAIGA high-risk AI obligations | 1 January 2026 | In force
USA | Oregon SB 1546 / Washington HB 2225 (AI companion chatbots) | 1 January 2027 | Advancing
UK | SI 2026/425: ICO Code of Practice regulations | 12 May 2026 | In force; ICO now has a statutory obligation to draft ADM Code of Practice
UK | ICO automated decision-making consultation | 29 May 2026 | 15 days remaining; respond at ico.org.uk
UK | Childrenâs online safety consultation | 26 May 2026 | 12 days remaining; AI tools accessible to under-16s in scope
UK | FCA Mills Review report | Summer 2026 | Incoming; AI in financial services focus
NOT ADVICE