Action requiredEU
Article 73 gives you 2, 10 or 15 days. Which clock runs?
The AI Act sets three serious incident deadlines, not one. Which applies depends on the harm, and the fastest gives a provider two days to notify.
RegulationSep 12, 20268 min
Marta Lindqvist edits The Guardrail and covers regulation. The brief is narrow and unglamorous: read the operative text, find the article number, establish the date it applies, and say what a team has to have written down by then.
Her working rule is that a compliance claim without an article reference is an opinion. Every obligation described here names the instrument, the provision and the date, so a reader can check it against the primary source rather than trusting us.
She treats consultancy summaries as leads to verify, never as citations, because secondary sources routinely repeat deadlines that have since moved.
How to reach Marta
Tips, corrections and documents go to marta@theguardrailreport.com. If you are reporting an error in a published briefing, quote the sentence and, where it concerns a legal obligation, the provision you believe we misread.
Briefings by Marta Lindqvist
Plan nowEU
16 more months for high-risk. Which duties still bind you now?
The AI Act amendment moved two dates and left the rest untouched. Prohibitions, GPAI duties and Article 50 transparency all apply today, delay or no delay.
RegulationSep 11, 20267 min
In forceEU
Article 50 has applied since 2 August. What must you label?
Four duties, two on providers and two on deployers. Machine-readable marking, deepfake disclosure, and a 2 December 2026 cutoff for legacy systems.
RegulationSep 10, 20268 min
Check scopeEU
Three ways a deployer becomes the provider under Article 25
Put your name on it, modify it substantially, or change its purpose so it becomes high risk. Any of the three moves the provider obligations onto you.
RegulationSep 5, 20267 min
Scope checkEU
You only use foundation models. Which GPAI duties reach you?
Chapter V binds providers of general purpose models, not their users. Fine tuning and rebranding are the two routes by which a user acquires those duties.
RegulationSep 1, 20267 min
In forceEU
AI literacy has been mandatory since February 2025. What counts?
Article 4 binds providers and deployers alike and has no threshold, no exemption for small firms and no template. It also has no penalty of its own.
RegulationAug 30, 20266 min