Jargon Busted: Extraterritorial Effect
Where your company is registered doesn’t come into it.
TL;DR: The EU AI Act follows your AI’s output, not your company’s postcode. Being headquartered outside Europe buys you nothing.
For anyone outside the EU who saw the AI Act go live on 2 August and thought “not my problem”, here’s your five-second decryption.
Extraterritorial effect is a law reaching companies with no office, no staff and no servers in the place that wrote it. The AI Act does this through Article 2(1)(c): if the output of your AI system gets used inside the EU, the Act applies to you, wherever you happen to be sitting. Think of a smoking ban that follows the smoke rather than the smoker.
So what actually triggers it? Where your company is registered doesn’t come into it. The test is where the output lands.
Why it matters:
A US chatbot answering questions from EU customers is caught. So is an Australian lender scoring EU loan applicants. So is a UK tool licensed to a German employer.
The bar sits lower than GDPR’s. GDPR asks whether you targeted the EU market. The AI Act only asks whether the output got used there, even via a reseller you’ve never heard of.
Enforcement is live now, not theoretical. Breaching the transparency rules carries fines up to €15 million or 3% of worldwide annual turnover, whichever is bigger.
Watch for the first action brought against a company with no EU presence at all. That’s when the theory gets tested. 👀