The AI Act: what has changed since August 2025?

AI act

ICT is becoming simpler and more human also when it comes to artificial intelligence (AI). With the advent of the European AI Act organizations in Europe must be more careful with AI applications. The law is being introduced in stages and since Aug. 2, 2025 new obligations apply. What has changed and what does it mean for your organization?

What did the first phase entail?

In February 2025, the first phase of the AI Act was launched. The focus then was mainly on:

  • Awareness and basic knowledge of AI in organizations.
  • Avoiding prohibited AI applications (the category unacceptable risk).
  • Underlining that not only developers are responsible, but also providers, users and other links in the chain.

What has changed since August 2025?

Since August, a new step has been taken. In particular, organizations working with generative AI (such as chatbots or AI assistants) will have to deal with this.

Key commitments:

  1. Transparency Users need to know that they are interacting with AI, including clear notification that AI can make mistakes.
  2. Human supervision AI should not just make decisions that have major consequences. An employee should always be able to intervene and assess.
  3. Documentation & accountability Organizations must document how models work, what data they are trained with and how risks such as bias are mitigated.

What does this mean for different roles?

RoleObligations
Developer/providerEnsure transparency, security and technical requirements.
UserDeploy AI responsibly, inform employees and test outcomes.
Importer/RepresentativeEnsure AI products comply with the law and enable audits.

Many companies perform multiple roles simultaneously - and with them, multiple responsibilities.

Outlook: 2026

From August 2026 is when things get really exciting. Then the rules for high-risk AI applications, for example, in healthcare, education, justice or security. This category has strict monitoring, testing and documentation requirements.

Those who start now with good processes and clear agreements will soon be a lot stronger.

What can you do now?

  • Map what AI applications exist within your organization.
  • Check which risk category they fall under.
  • Make sure employees know when they are dealing with AI.
  • Always maintain human supervision when making important decisions.
  • Document the use of AI and continue to monitor.

Our vision

At Analyst ICT, we see AI as an opportunity, if applied properly. The AI Act helps to create clarity and handle AI responsibly. By taking the right steps now, you avoid stress and hassle the moment the stricter rules take effect. Do you enjoy learning about AI? Or do you need help with the proper application in this? Please get in touch.

Recent blogs

kwantumcomputers
Blog
What are quantum computers? And why is everyone suddenly talking about them?
Chances are you've been hearing more and more about quantum computers in recent months. In the news, on LinkedIn, or perhaps even during conversations about AI and cybersecurity. Especially now that a Dutch chip developer is gaining global attention with a new generation of quantum chips, the technology suddenly seems closer than ever. But what exactly is a quantum computer? And why is so much expected of it? From Ordinary Computer to Quantum Computer To understand quantum computers, it's helpful to first look at how a normal computer works. A traditional computer — like your laptop or server — works with bits. A…
frankberry
Blog
With our feet in the mud
Here we are. Not quite recognizable anymore, thanks to AI trying to protect children. Understandable, of course. But believe us: these really are Berry and Frank. More than ten years apart, but in reality, we've always been brothers from another mother. And what do we have in common? A lot... and at the same time, almost nothing. Berry is often the good cop. Calm, down-to-earth, and always working to get things done. I'm usually the bad cop. Direct, critical, and always looking for ways to improve. But that combination is precisely what works. What completely unites us, though, is our love for...
Macadmins Leiden
Blog
MacAdmins Meeting: What's relevant for your organization?
Last week, we attended the MacAdmins Meeting in Leiden. It's a gathering focused on Apple administration, security, and innovation. What stood out? Developments are moving fast. But more importantly: they are becoming increasingly relevant for SMEs. We'd like to share the key insights with you. What's happening? And what does that mean for your organization? Running AI Locally: Control Over Data and Costs AI is now everywhere. But one question remains central: where does your data reside? A significant topic during the meeting was running AI models (LLMs) locally. Instead of relying on external cloud platforms, more and more...

A newsletter

Superlogic right?