The EU AI Act's August 2 Deadline Looms as GPAI Obligations Bite

The EU AI Act's August 2 Deadline Looms as GPAI Obligations Bite

In little more than a week, the European Union's landmark Artificial Intelligence Act crosses a threshold that the world's largest AI developers have spent the better part of two years trying to move. On August 2, 2026, the European Commission's supervision and enforcement powers over providers of general-purpose AI (GPAI) models switch on — turning a body of paper obligations into a regime with teeth, including the power to demand documentation, run model evaluations, order recalls, and levy fines.

The date is not new. The GPAI obligations in Chapter V of the AI Act formally took effect on August 2, 2025, but providers were handed a one-year adjustment period before Brussels could actually enforce them. That grace window closes on August 2, 2026. For companies that placed foundation models on the EU market after August 2, 2025, compliance is expected now; providers of models released before that date have until August 2, 2027 to fall fully in line.

What Actually Changes on August 2

The milestone is best understood as the moment the Commission's enforcement toolkit becomes operational rather than a fresh set of rules landing overnight. From August 2, the AI Office — the Commission's dedicated GPAI supervisor — can request technical documentation and information from model providers, conduct or commission evaluations of models, require providers to take mitigating measures, and impose penalties for non-compliance.

The obligations those powers back up are already familiar to compliance teams: GPAI providers must maintain up-to-date technical documentation, publish summaries of the data used to train their models, put in place a policy to respect EU copyright law, and — for models deemed to carry "systemic risk" — conduct model evaluations, adversarial testing, incident reporting, and cybersecurity protections.

The penalties are where the pressure concentrates. For GPAI providers specifically, the Act caps fines at the greater of €15 million or 3% of total worldwide annual turnover. That sits below the headline figure most often cited for the AI Act — up to €35 million or 7% of global turnover — which applies to violations of the Act's outright prohibitions on banned practices such as social scoring and certain biometric surveillance, not to GPAI documentation failures. A lower tier, up to €7.5 million or 1% of turnover, covers supplying incorrect or misleading information to regulators.

Enforcement itself is split. The Commission polices GPAI models directly, while member states are responsible for designating national competent authorities and setting their own penalty rules for other parts of the Act — a decentralized structure that has left compliance officers tracking both Brussels and a patchwork of national regulators.

The Fight Over the Clock

The August 2 date survived an intense lobbying campaign. In the summer of 2025, a group of major European companies — among them Airbus, ASML, Lufthansa, Mercedes-Benz and Siemens — signed an open letter urging the Commission to "stop the clock for two years" on the heaviest obligations, citing missing technical standards and high compliance costs. The tech-industry group CCIA Europe pressed the same case, arguing that "a bold 'stop-the-clock' intervention is urgently needed to give AI developers and deployers legal certainty, as long as necessary standards remain unavailable or delayed."

The Commission held firm on the principle. "There is no stop the clock, there is no grace period, there is no pause," spokesperson Thomas Regnier told reporters in July 2025. Digital chief Henna Virkkunen has repeatedly framed the rules as "based on our European values" and necessary for "trustworthy" technology, while saying she wants to implement the Act "in an innovation-friendly manner."

That messaging papered over a real retreat elsewhere. Through the Digital Omnibus package, EU lawmakers reached a provisional deal in May 2026 to push the most contested high-risk requirements — covering AI in areas such as biometrics, critical infrastructure, education, employment and border control — back to December 2, 2027, a delay of roughly 16 months. Crucially, that reshuffle left the August 2, 2026 GPAI enforcement date standing. The clock stopped for high-risk systems; it kept ticking for foundation models.

The Compliance Burden and the Brussels Effect

The practical weight of August 2 falls hardest on a handful of frontier labs whose models meet the systemic-risk threshold, but the ripple runs wider. Because the largest providers serve a global market, the EU's documentation, transparency and evaluation demands tend to become the default worldwide — the familiar "Brussels effect" that turned GDPR into a de facto planetary standard. Some vendors have already treated the EU as a distinct release track: at least one major model launched this month was initially withheld from the bloc, a timing choice that coincided with the looming GPAI obligations.

Brussels is also building capacity around the edges. On July 7, 2026, the Commission unveiled an Action Plan on Cybersecurity and Artificial Intelligence, promising a dedicated European capability to evaluate AI models with a security focus by 2027 and a secure testing platform, developed with ENISA and the Joint Research Centre, by the end of 2026. The plan imposes no new legal obligations, but it signals where enforcement muscle — particularly the model-evaluation function underpinning GPAI oversight — is being pointed next.

What to Watch

The open question is not whether the rules apply but how aggressively the AI Office chooses to wield its new powers from day one. With the general-purpose AI Code of Practice still bedding in and harmonized standards incomplete, the near-term test is whether Brussels opens early information requests or evaluations, or gives providers room to demonstrate good-faith compliance. Watch, too, for how the December 2027 high-risk delay interacts with GPAI enforcement, and whether any member state moves first on national penalties. After years of debate over deadlines, the AI Act's credibility now rests on what happens after the clock finally runs out.