Category: EU AI Act
The EU AI Act (Regulation (EU) 2024/1689) is the world’s first comprehensive AI law, applying risk-based obligations to providers and deployers of AI systems — including UK and other non-EU organisations whose systems or outputs reach the EU market. This section covers the Act as it applies in practice: how risk classification works across the prohibited, high-risk, limited-risk and minimal-risk tiers, what obligations attach to each role in the AI value chain, and how to build the documentation, oversight and monitoring arrangements the Act expects. The articles here are written for compliance, legal and risk professionals who need to move beyond summaries of the legislation to defensible implementation — with particular attention to the questions that arise for UK organisations and SMEs caught by the Act’s extraterritorial reach under Article 2. Key compliance dates are staged: prohibitions and AI literacy duties have applied since 2 February 2025, general-purpose AI obligations since 2 August 2025, and the main high-risk framework applies from 2 August 2026.
-
How to Assess AI System Impacts Properly
Learn how to assess AI system impacts with a defensible workflow for EU AI Act obligations, ISO 42001 controls, evidence, ownership and review cycles.
-
Is ISO 42001 Mandatory? What UK Firms Need
Is ISO 42001 mandatory? Understand when certification is voluntary, how the EU AI Act changes expectations, and how to build audit-ready AI governance.
-
How to Build an AI Risk Register That Stands Up to Audit
Build an AI risk register with clear ownership, evidence and control mapping for EU AI Act and ISO/IEC 42001 audit-ready assurance across your organisation.
-
AI Conformity Assessment: Evidence You Need
AI conformity assessment requires more than a risk register. Build the technical file, quality controls and evidence needed for EU AI Act readiness now.
-
AI Compliance Evidence Checklist for Audits
Use this AI compliance evidence checklist to build an audit-ready record for the EU AI Act and ISO 42001, from inventory and risk to controls and review.
-
ISO 42001 versus AI Act: Which Comes First?
ISO 42001 versus AI Act: understand the difference between voluntary AI management systems and binding EU legal duties, then build one evidence base.
-
AI Supplier Due Diligence for EU AI Act Readiness
AI supplier due diligence for legal, technical and operational evidence, supporting EU AI Act readiness, ISO 42001 assurance and clear audit decisions.
-
Which AI Systems Qualify Under the EU AI Act?
Which AI systems qualify for EU AI Act obligations? Identify in-scope systems, classify risk, assign ownership and maintain audit-ready evidence at scale.
-
How to Audit AI Systems Without Missing Evidence
Learn how to audit ai systems with an evidence-led process for EU AI Act and ISO/IEC 42001 assurance, controls, owners, reporting and audit readiness.
-
How to Prepare ISO 42001 for Certification
Learn how to prepare ISO 42001 with an audit-ready AI management system, defined ownership, evidence-led controls and proportionate risk governance now.