AI Omnibus enters into force across the European Union
The European Union’s AI Omnibus Regulation has entered into force, introducing targeted changes to the implementation of the AI Act. The amendments extend compliance timelines, simplify administrative requirements, strengthen support for smaller businesses, and clarify AI governance while maintaining existing safeguards for safety and fundamental rights.
On 27 July 2026, the AI Omnibus entered into force across the European Union, marking the first significant update to the EU AI Act’s implementation framework. Originally proposed as part of the Digital Omnibus package in November 2025, the regulation introduces targeted amendments intended to simplify compliance, improve legal clarity, and support AI innovation without altering the AI Act’s core safeguards.
The regulation seeks to reduce administrative burdens, particularly for small and medium-sized businesses. Several compliance measures previously available only to small and medium-sized enterprises (SMEs) have been extended to small mid-cap companies (SMCs), enabling a broader range of businesses to benefit from simplified regulatory requirements.
The AI Omnibus also expands opportunities for testing and innovation. It broadens access to regulatory sandboxes, including the establishment of a new EU-level regulatory sandbox, enabling companies to develop and test AI systems under regulatory supervision before placing them on the market. These measures are intended to support innovation while facilitating compliance with the AI Act.
The regulation introduces revised implementation timelines for certain categories of high-risk AI systems. Requirements for high-risk AI systems listed in Annex III of the AI Act will now apply from 2 December 2027, while obligations for high-risk AI embedded in products covered by Annex I legislation, such as machinery, toys, and lifts, will begin on 2 August 2028. The extended timelines are intended to provide developers, manufacturers, and regulators with additional time to prepare for implementation.
Several administrative requirements have also been simplified. The AI Omnibus extends simplified legal obligations to SMCs, streamlines requirements for registering certain exempt AI systems in the EU’s central database, and revises AI literacy provisions by assigning a greater role to the European Commission and Member States in promoting AI literacy initiatives.
The regulation also includes new provisions relating to safety and fundamental rights. It prohibits AI systems designed to generate non-consensual sexually explicit or intimate content, including AI-generated child sexual abuse material. In addition, it clarifies that special categories of personal data may be processed where necessary to detect and mitigate bias in AI systems, subject to applicable safeguards.
Changes to AI governance are another key element of the regulation. The AI Omnibus expands the supervisory powers of the AI Office, particularly regarding certain AI systems built on general-purpose AI models and those embedded in very large online platforms and search engines. It also provides additional legal clarification on the relationship between the AI Act and other EU legislation while simplifying procedures for conformity assessment bodies responsible for evaluating compliance.
