# AI Act 2026: what it really requires of you if you use AI in your business

AI Act 2026: what it really requires of you if you use AI in your business It starts to apply on 2 August 2026. These are the obligations that do affect you —and those that don't— with the calendar now updated. In recent weeks it has been repeated everywhere that the new Artificial Intelligence Act "has been delayed". It is a half-truth. And in your business, a half-truth can be expensive. Yes, there has been a postponement. But not of everything, and not of what probably already affects you. Let's clarify it without jargon and without drama. What the AI Act is and why it affects you even if you don't know it The European Artificial Intelligence Regulation (known as the AI Act) is the world's first law to regulate the use of AI comprehensively. It works like the GDPR did in its day: it applies directly in Spain, without needing a national law to copy it, and it binds any company operating in the European Union. And here is the key that many businesses overlook: you use AI more than you think. A chatbot on your website, texts or images generated with AI tools, an assistant that answers your customers… all of that counts. The real dates (this is what changed) The law came into force in August 2024, but its obligations arrive in phases: February 2025: prohibited practices and the obligation of AI training are already in force. August 2025: obligations for large AI models. 2 August 2026: the bulk of the regulation starts to apply. December 2027: the obligations for "high-risk" systems, which is exactly what has been postponed. That is: what has been delayed are the heaviest obligations, for high-risk systems. The rest follows its course. Confusing the two is the mistake that is spreading. The law classifies AI by risk (and this places you) The regulation does not treat all systems the same. It ranks them into four levels according to the danger they pose: Unacceptable risk: uses that are directly prohibited (for example, manipulating people's behaviour). High risk: sensitive systems such as staff selection or access to essential services. These carry the most obligations… and are the ones postponed to 2027. Limited risk: this is where most businesses fall. They must meet the transparency obligations (stating that AI is involved). Minimal risk: the vast majority of everyday uses, with no extra obligations. Where is your business? Almost certainly in "limited risk". And that is exactly what starts to apply in August. What does bind you from August 2026 For an ordinary business —a consultancy, a firm, a clinic, a freelancer— there are two points worth being clear about: 1. Transparency. If you have a chatbot that serves your customers, or you publish content created with AI, you are obliged to make clear that it is AI. Users have the right to know when they are talking to a machine or viewing artificially generated content. 2. Training your team. Since February 2025, the law requires that anyone using AI in your company understands what they are using and what risks it carries. It is not a master's degree or a certificate: it is proportionate, documented training. What changes in August 2026 is that the Spanish authority (AESIA) can already inspect and sanction. It is not meant to scare you: it is about adapting in time. The good news is that, for most businesses, complying is not complicated. A well-placed notice, clear guidelines for the team and a review of where you are using AI is usually enough. The problem is not the difficulty; it is not knowing where to look and realising too late. Adapting before the date saves you rushing, scares and the risk of a penalty for something that could be solved with simple changes. How we see it at Bytechip At Bytechip we work with AI on real projects for freelancers, small businesses and firms: we automate tasks, integrate tools and help technology work for the business, not the other way round. That is why this regulation does not catch us by surprise: we know where the blind spot usually is for each type of company. If you use AI in your day-to-day and are not clear whether the law affects you —or how to comply without complications— we can review it with you Request your quote and we'll look at it with no commitment. CONTACTWant to consult the full text? You can read the full Regulation (EU) 2024/1689 here. ← Back to the blog