EU AI Act: High-Risk AI Delayed to 2027, But Article 4 Training Obligation Stays at August 2026

On March 13, 2026, the Council of the European Union agreed to extend the deadlines for high-risk artificial intelligence systems to comply with the EU AI Act. The news spread across every tech publication. "Relief for businesses," the headlines said. "EU slows down AI Act."

If you are a compliance officer, CTO, or anyone with responsibility for AI in your organisation, you probably saw those headlines and thought: good, I have more time.

I need you to read what comes next carefully.

Because the delay is real, yes. But it does not affect you the way you think. And while everyone is looking at the high-risk headlines, there is one obligation that nobody has postponed and that expires in five months: the mandatory AI training for every single member of your staff.

What the Council agreed on March 13

The Council adopted a position to modify the EU AI Act's implementation timeline. The agreement still needs to go through the European Parliament, which voted its position on March 26, 2026 as part of the Digital Omnibus package. But the political direction is clear and the agreement is in place.

The underlying reason is twofold. First, the European Commission missed its February 2026 deadline to publish technical guidance on high-risk AI systems. Without that guidance, companies have no clear criteria to evaluate whether their AI systems fall within the high-risk category. Second, only 8 of the 27 EU member states have designated their national contact points, leaving the supervisory infrastructure largely inoperative.

The Council's conclusion was that applying high-risk obligations in August 2026, without official guidance and without a supervisory infrastructure in most member states, would be applying a rule in a vacuum.

What is delayed and by how long

There are two categories of high-risk systems, and each has a new deadline:

Stand-alone systems are those not embedded in a physical product: credit scoring systems, recruitment tools, critical infrastructure management AI, educational assessment systems, and so on. These move from August 2026 to December 2027, a delay of 16 months.

Systems embedded in products regulated by Annex I of the AI Act (machinery, medical devices, aviation, motor vehicles, etc.) move from August 2027 to August 2028.

This is a significant delay. But for most businesses, the practical question is not whether their AI systems are high-risk under Annex III classification. The practical question is whether they have trained their staff. And there, nothing has changed.

Article 4 has not changed

Article 4 of the EU AI Act establishes the obligation of AI literacy for all personnel working with AI systems. This obligation entered into force on February 2, 2025. Its effective compliance deadline is August 2, 2026. And it has not been modified.

Not in the Council's March 13 agreement. Not in the Digital Omnibus package. Not in any proposal that has circulated to date.

The article applies to providers and deployers. Providers are those who develop or commercialise AI systems. Deployers are those who use them in their operations. If your company uses any AI tool, you are a deployer.

The obligation makes no distinction by sector, company size, or type of AI used. It is not only for tech companies. It is not only for those with high-risk systems. It applies to any organisation that uses artificial intelligence.

Why this happened

The delay on high-risk systems responds to a real problem: the EU AI Act's implementation has moved slower than expected across several dimensions.

The European Commission was due to publish in February 2026 its official guidance on how to classify high-risk AI systems and demonstrate conformity. That guidance has not arrived. Without it, companies that want to comply do not know exactly how to do so. And national regulators would also lack a uniform basis for supervision.

Furthermore, the EU AI Act requires each member state to designate a competent supervisory authority and a national contact point. To date, only 8 of the 27 member states have done so. In a regulatory system that depends on coordinated national supervision, this is a structural problem.

Faced with this situation, the Council preferred to extend the deadline rather than create a scenario where obligations exist on paper but there is no real capacity to enforce them or to guide those who want to comply.

What has not been postponed is what is already operational: Article 4 can be applied today because it does not require complex technical guidance. It requires companies to train their staff. That is something any organisation can do right now.

Penalties for Article 4 non-compliance

Penalties under the EU AI Act for non-compliance with Article 4 fall under the intermediate level of the sanctioning regime: up to EUR 7.5 million or 1% of global annual turnover, whichever is greater.

For a company with EUR 10 million in revenue, 1% is EUR 100,000. For one with EUR 50 million, EUR 500,000. This is not a symbolic amount.

Beyond the financial figure, there is the reputational impact. The AI Act allows employees, rejected job candidates, or consumer associations to file complaints with the national authority. An investigation by your national regulator into AI literacy compliance at your company is not the kind of news you want associated with your brand.

The penalty is not the most important thing. The most important thing is that August 2026 arrives in five months. And training an entire organisation takes time.

What to do now

The headline about the high-risk delay is real, but it does not give you more time on training. What gives you time is starting to train now.

These are the three things a company should do this week:

The EU AI Act is not bureaucracy you can ignore until the last moment. Companies that are trained and documented before August 2026 will have a solid defensive position. Those that are not will face penalties and, more importantly, will be making decisions about AI without the knowledge to make them well.

The high-risk delay gives the Commission time to publish its guidance. It does not give you time to postpone training.

Read the headlines. But read the fine print too. August 2, 2026 is still there.