EU publishes AI Act Omnibus with new deadlines and a ban on non-consensual AI intimate images
LuizaJarovsky · x · 2026-07-24
The EU has published the Digital Omnibus amending the AI Act in the Official Journal, with several substantive changes.
Key changes
- New timelines: high-risk systems under Annex III move to 2 Dec 2027; Annex I systems to 2 Aug 2028; AI regulatory sandboxes must be in place by 2 Aug 2027; transparency duties for AI-generated content already on the market get a grace period ending 2 Dec 2026.
- New banned practice: non-consensual sexual/intimate content and CSAM generated by AI are prohibited; nude-image generation or removing clothes from real people’s photos is banned starting Dec 2026.
- AI Office scope clarified: the EU AI Office will supervise certain GPAI-based systems when both the model and the downstream system are developed by the same provider, while some domains remain under national authorities.
- Sector rules and machinery exemption: the Omnibus narrows overlap with existing sectoral laws and exempts machinery-regulated products from direct AI Act applicability, while empowering the Commission to add safety requirements under machinery rules.
- Compliance burden: the Commission must provide guidance to reduce compliance burden for Annex I high-risk systems already covered by sectoral regulation.
More from Safety
- Anthropic S-1: revenue $41M to $16.3B in half a year, ~900% NRR, and AI-attacker warnings — colinmcnamara · 2026-10-26
- ESR on the Bugpocalypse: locking down frontier models only hands the game to Chinese open weights — colinmcnamara · 2026-10-26
- OpenCode breach exposed AI API keys of 1.4% of Console users — thione · 2026-10-26
- Morgan Stanley and US banks block third-party AI agents over credentials — thione · 2026-10-26
- DHS orders DeepSeek products removed from US civilian agency systems — thione · 2026-10-26
- One hacker breached 100+ company websites using AI, scope unknown — thione · 2026-10-26