# EU AI Act Compliance Guide

Comprehensive framework for EU AI Act compliance (2025-2027).

## Overview

The EU AI Act is the world's first comprehensive AI regulation. It entered into force on 1 August 2024 with phased enforcement through 2027.

## Key Dates

| Date | Requirement |
|------|-------------|
| Feb 2025 | Prohibited AI practices banned, AI literacy obligations |
| Aug 2025 | GPAI model compliance (transparency, copyright, documentation) |
| Aug 2026 | Full high-risk AI system compliance, Article 50 transparency |
| Aug 2027 | Extended transition for high-risk AI in regulated products |

## Risk Classification

| Risk Level | Examples | Requirements |
|------------|----------|--------------|
| **Unacceptable** | Social scoring, emotion recognition at work, manipulative AI | Prohibited |
| **High** | Biometrics, critical infrastructure, employment, education AI | Full compliance |
| **Limited** | Chatbots, recommendation systems, deepfakes | Transparency only |
| **Minimal** | Games, spam filters | None |

## High-Risk AI Domains (Annex III)

1. **Biometrics** - Remote identification, categorization
2. **Critical Infrastructure** - Energy, transport, water, digital
3. **Education** - Admissions, assessment, proctoring
4. **Employment** - Recruitment, HR decisions, performance
5. **Essential Services** - Credit scoring, insurance, emergency services
6. **Law Enforcement** - Risk assessment, crime prediction
7. **Migration** - Visa, asylum, border control
8. **Justice** - Legal research, dispute resolution

## Penalties

| Violation | Maximum Fine |
|-----------|--------------|
| Prohibited AI deployment | EUR 35M or 7% global turnover |
| High-risk non-compliance | EUR 15M or 3% global turnover |
| Other violations | EUR 7.5M or 1% global turnover |
| False information | EUR 7.5M or 1% global turnover |

## Documentation Structure

| Document | Purpose |
|----------|---------|
| [README.md](README.md) | This overview |
| [checklist.md](checklist.md) | Compliance checklist |
| [examples.md](examples.md) | Practical examples |
| [templates.md](templates.md) | Documentation templates |
| [llm-prompts.md](llm-prompts.md) | Prompts for compliance tasks |

## Quick Start

1. **Inventory** - List all AI systems in your organization
2. **Classify** - Determine risk level for each system
3. **Gap Analysis** - Compare current state vs requirements
4. **Remediate** - Implement required controls
5. **Document** - Create compliance documentation
6. **Monitor** - Establish ongoing compliance processes


## Agent Selection

| Task | Model | Rationale |
|------|-------|----------|
| Compliance assessment | opus | Legal/regulatory analysis |
| Risk documentation | sonnet | Documentation |
| Control implementation | sonnet | Process design |

## Sources

- [EU AI Act Official Text](https://artificialintelligenceact.eu/)
- [European Commission AI Policy](https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai)
- [AI Act Implementation Timeline](https://trilateralresearch.com/responsible-ai/eu-ai-act-implementation-timeline-mapping-your-models-to-the-new-risk-tiers)

---

*ML Engineer Methodology - faion-network*
