Updated May 8, 2026: Provisional political agreement on the EU Digital Omnibus was reached May 7, 2026. The Annex III deadline extension to December 2, 2027 is agreed in principle. Formal adoption and Official Journal publication remain pending.
The EU AI Act Annex III (high-risk AI) deadline is being extended. Provisional agreement was reached May 7. Below is the current status and what to do.
| Event | Date | Status |
|---|---|---|
| Digital Omnibus proposal published | December 2025 | Done |
| First trilogue | March 2026 | Done — partial alignment |
| Second trilogue | April 28, 2026 | Done — no agreement |
| Third trilogue | May 7, 2026 | AGREEMENT REACHED |
| Formal adoption by Parliament + Council | June 2026 | Expected |
| Official Journal publication | July 2026 | Expected |
| Current Annex III deadline | August 2, 2026 | In force until OJ publication |
| New Annex III deadline (Omnibus) | December 2, 2027 | Agreed — not yet enacted |
| New Annex I deadline (Omnibus) | August 2, 2028 | Agreed — not yet enacted |
What the Digital Omnibus Changes
The EU Digital Omnibus agreement (May 7, 2026) changes three things about the EU AI Act:
Annex III high-risk deadline: The Omnibus moves the August 2, 2026 compliance deadline for Annex III (high-risk AI systems in hiring, credit, healthcare, education, etc.) to December 2, 2027 — a 16-month extension.
Annex I deadline: The Annex I category (AI used in regulated products like medical devices, machinery, vehicles) moves from August 2, 2027 to August 2, 2028 — a one-year extension.
Documentation requirements for SMEs: The agreement includes reduced conformity assessment documentation requirements for small and medium-sized enterprises and small mid-caps. The EP and Council added carve-outs: critical infrastructure, justice, democratic processes, law enforcement, and financial institutions are excluded from the lighter-touch documentation process. Those sectors must still follow full conformity assessment requirements even if the deployer is an SME.
What Happened: May 7 Agreement
The third trilogue between the European Parliament, the Council of the EU, and the European Commission produced a provisional political agreement on May 7, 2026.
The key sticking point from the April 28 failure was resolved: the Commission's proposed "conditional application mechanism" was dropped. The agreed text uses fixed dates — December 2, 2027 for Annex III, August 2, 2028 for Annex I — which is what the EP and Council demanded.
Provisional agreement means the political deal is done. What remains is:
- Legal-linguistic review of the agreed text (typically 4-6 weeks)
- Formal vote by the European Parliament
- Formal adoption by the Council of the EU
- Publication in the EU Official Journal (when the new dates take legal effect)
When Does the Extension Take Legal Effect?
The May 7 agreement is politically binding but not yet law. The extension takes effect only when published in the EU Official Journal. The realistic timeline:
- June 2026: Formal adoption by Parliament and Council
- July 2026: Official Journal publication
- On publication: December 2, 2027 becomes the operative deadline for Annex III
If publication happens before August 2, 2026 — which the current timeline suggests it will — organizations will have a clean extension with no gap. If there is any delay and publication slips to August or later, August 2, 2026 would technically be the deadline for a brief period. This scenario is unlikely but not impossible.
Practical guidance: Plan for December 2027, but do not cancel the compliance work you have already started.
GPAI Model Rules Are Already in Force
The GPAI (General Purpose AI) model obligations under Articles 51-56 came into force on August 2, 2025 — not 2026. The Digital Omnibus does not affect this. The Commission's enforcement powers for GPAI providers activate on August 2, 2026 regardless of what happens with the Omnibus.
If you use Claude, GPT-4, or Gemini as underlying models in your product, this enforcement date is relevant to your providers — it is not directly your obligation as a deployer, but it means your AI vendors are now subject to active Commission supervision.
What To Do Right Now (6-Point Checklist)
Agreement is reached. The extension is coming. Here is what to do this week:
- Do not cancel compliance work already in progress. The extension gives you more time — it does not mean the AI Act goes away. High-risk AI deployers still have obligations by December 2027.
- Inform your leadership. The August 2, 2026 compliance sprint is likely unnecessary — but send them the confirmation that this is provisional agreement, not final law yet.
- Update your project timelines. If you built an August 2026 deadline into your compliance roadmap, the new target is December 2, 2027 for Annex III systems.
- Do not stop GPAI-related work. The GPAI enforcement date (August 2, 2026) is not affected by the Omnibus. If you use frontier AI models (Claude, GPT-4, Gemini) in your products, your vendors face active Commission enforcement from August 2.
- Request vendor documentation for a December 2027 timeline. If vendors were slow to respond because of the August crunch, re-engage with the new timeline — you may get better documentation with more time.
- Monitor for Official Journal publication. The extension is not law until published. Set a calendar reminder for July 2026 to confirm the OJ publication has happened.
References
- EU Digital Omnibus AI proposal: digital-strategy.ec.europa.eu/en/library/digital-omnibus-ai-regulation-proposal
- EU AI Act Legislative Train: europarl.europa.eu/legislative-train/package-digital-package/file-digital-omnibus-on-ai
- Morrison Foerster European Digital Compliance update, May 1, 2026
- Related: EU AI Act August 2 countdown action plan
- Related: EU AI Act compliance checklist
