EU AI Act, without the noise.

I train and advise teams so they know exactly what to do, by when, for their role and risk.

Request a Scoping Call
Audience

Who I Work With

I help legal, data, and product teams prepare for the EU AI Act in a way that's practical and actionable.

Legal & Compliance

Responsibilities, documentation requirements, and the right questions to ask vendors. I help compliance teams cut through regulatory ambiguity.

Data & Engineering

Model transparency, testing obligations, logging requirements, and technical documentation. Practical guidance for the teams building and maintaining AI.

Product & Leadership

What's in scope, key dates, budget planning, and strategic implications. I help leaders understand what the Act means for their roadmap and bottom line.

Advisory

What I Offer:
Consultation

Focused sessions to assess your use case, compliance risk, and readiness. Includes a mapped plan by role and risk level.

  • Strategy calls to assess scope and priority
  • "Gap check" audits (2-4 weeks) to identify compliance gaps and map next steps
Request a Scoping Call

Strategy Calls

Quick, focused conversations to understand your AI landscape, assess which systems are in scope, and determine what level of preparation you need.

Gap Check Audits

A structured 2-4 week engagement where I review your AI systems, documentation, and processes against the Act's requirements and deliver a prioritized action plan.

Online Course

EU AI Act on Udemy

My comprehensive Udemy course gives you a solid foundation in the EU AI Act — from prohibited practices and risk classification to compliance strategies for high-risk systems. Constantly updated with the latest regulatory changes.

4.7
Rating
3,500+
Learners
10h+
Content
View on Udemy

Bestseller & Highest Rated

Recognized by Udemy as both a bestseller and highest-rated course in EU AI Act compliance. Available on Udemy for Business and Personal Plan.

87 Lectures Across 10 Sections

Covering everything from AI fundamentals and prohibited practices to risk assessment frameworks, high-risk system compliance, and enforcement authorities.

Training Programs

Role-Specific Trainings

Each training is tailored to the role, context, and risk level of the audience.

AI Literacy for Employees

Article 4 Compliance

1-2 hours

EU AI Act for Developers & Data Scientists

Technical compliance deep-dive

1 day

EU AI Act for Leaders & Executives

Strategic overview & decision framework

2 hours

EU AI Act for Product Owners

Scope, risk, and product implications

3-6 hours

EU AI Act for Legal & Compliance Professionals

Obligations, documentation & enforcement

1 day

EU AI Act Preparedness for Business Professionals

Cross-functional readiness

3-6 hours
Request a Scoping Call
Regulation Timeline

What's Coming —
Key Deadlines

The EU AI Act doesn't hit all at once. Here's a simple breakdown:

Update: the Digital Omnibus shifted the timeline (May 2026)

On May 7, 2026, the European Parliament and Council provisionally agreed to defer the high-risk deadlines: stand-alone high-risk systems (Annex III) move from August 2026 to December 2, 2027, and AI embedded in regulated products (Annex I) from August 2027 to August 2, 2028. This is not yet formally adopted — final adoption is expected in summer 2026, so the deferred dates below could still shift. Items marked "pending adoption" reflect the agreement, not yet final law.

February 2, 2025

Banned AI practices are already illegal

Things like social scoring, emotion detection in schools or workplaces (unless safety-related), and certain forms of biometric identification are prohibited. The Omnibus agreement adds two more bans: AI that generates non-consensual intimate imagery or child sexual abuse material.

August 2, 2025

General-purpose AI rules in force

Providers of general-purpose AI models must meet transparency and copyright duties, with extra obligations for "systemic risk" models. The EU's governance and penalty regime also took effect.

August 2, 2026

General application — with deferred high-risk rules

Most remaining rules apply, including telling users when they're interacting with AI and labelling AI-generated content like deepfakes (labelling solutions get a grace period until December 2, 2026). The high-risk obligations originally due on this date are deferred — see below.

December 2, 2027

High-risk obligations start (pending adoption)

If you're building or using stand-alone high-risk AI systems (e.g., in hiring, education, finance, or public services — Annex III), this is the deferred go-live date for compliance under the Omnibus agreement.

August 2, 2028

High-risk AI in regulated products (pending adoption)

AI embedded in products already covered by EU product-safety law (Annex I — machinery, medical devices, vehicles, toys…) must comply from this deferred date.

Good to know

  • Already using a high-risk system? If it doesn't substantially change after its go-live date, it may stay out of scope.
  • Using open-source models? Some duties are lighter — unless the model is labelled "systemic risk."
  • Large public IT systems have extra time until Dec 31, 2030.
Common Questions

Frequently Asked
(but rarely answered clearly)

Does not constitute legal advisory (informative character only)

What exactly is a "high-risk" AI system?

If your AI is used in sensitive areas — like hiring, credit scoring, insurance, education, policing, or border management — it's likely classified as high-risk. That means documentation, risk management, human oversight, and more.

We use a US-based model. Are we still responsible?

Yes, often. If you put it on the EU market, brand it, or control how it's used — you're likely the "provider" or "deployer" under the Act and bear responsibility.

Are some AI practices already banned?

Yes. For example:
  • Social scoring
  • Real-time biometric ID in public spaces
  • Emotion recognition at school or work
  • Predictive policing based on profiling
These bans already apply from Feb 2025. The May 2026 Omnibus agreement adds two more: AI generating non-consensual intimate imagery and child sexual abuse material.

Didn't the deadlines just change? (Digital Omnibus)

Yes — mostly for high-risk systems. Under the Digital Omnibus agreement of May 7, 2026, high-risk obligations for stand-alone systems (Annex III) move to December 2, 2027, and for AI in regulated products (Annex I) to August 2, 2028. The bans, GPAI rules, and transparency duties keep their original dates. Note: the Omnibus is provisionally agreed but not yet formally adopted, so details could still shift.

Do we have to label AI-generated content or chatbots?

Yes — if it's not obvious, you must disclose when users are talking to a machine. Also, synthetic content (e.g. deepfakes) should be labelled unless you fall under a specific exemption. These duties apply from August 2, 2026, with a grace period for labelling solutions until December 2, 2026.

Do open-source models have fewer rules?

Yes, if: the model is truly open-source (weights, architecture, and license), and it's not designated as a "systemic risk" model by the EU. In that case, fewer obligations apply to the provider.

What's a "fundamental rights impact assessment"?

If you're using high-risk AI in public services (e.g., education, social support, insurance), you'll need to assess how the system may affect people's fundamental rights before deployment.

Can we get help checking if our AI system is in scope?

Yes. Try the Use Case Checker below or book a quick call and we'll figure it out in 15 minutes.
Self-Assessment

Use Case Checker

See how the Act classifies your AI use case. Check whether your system is considered high-risk and what obligations may apply.

Want to discuss your
compliance readiness?

Let's figure out where you stand and what to prioritize.

Request a Scoping Call robert@barcik.training