Back to research

Compliance

Compliance Checklist Under the New EU AI Act: Transparency Rules 2026

The EU’s AI Act enforcement and transparency obligations go live August 2 2026. Companies using or deploying AI systems need to understand which rules apply and ensure operational readiness.

By NomadicTax Research Team · 5-8 min read

What Is the AI Act & Why It Matters for Tax & Digital Businesses

The EU’s Artificial Intelligence Act (Regulation (EU) 2024/1689) is the world’s first comprehensive legal framework governing AI. It’s structured around risk-levels (prohibited, high, limited, minimal) and imposes requirements on how AI systems are developed, deployed and labelled. (digital-strategy.ec.europa.eu)

From 2 August 2026, the EU began enforcing the AI Act’s transparency rules: providers and deployers of AI systems must inform users when they are interacting with an AI and label AI-generated or manipulated content. Deepfakes, altered audio/video, and content on public interest need specific disclosure; machine-readable marks are required. (digital-strategy.ec.europa.eu) These obligations may affect companies using chatbots, generative AI content, or AI-enabled services.

The AI Omnibus, which entered into force on 27 July 2026, extended timelines for implementation of high-risk AI in certain scenarios: systems embedded in regulated products (e.g. medical devices, toys) now have until 2 August 2028, and use cases listed in Annex III have until 2 December 2027. It also adds simplifications for SMEs and small mid-caps (SMCs), regulatory sandboxes, and clearer governance. (digital-strategy.ec.europa.eu)

Key Compliance Obligations from August 2, 2026

What To DoWho It Applies ToDeadline / SinceAction Items
Label content as AI-generated / manipulatedProviders of generative AI systems, deployers publishing public interest contentFrom 2 August 2026Establish workflows to tag content; register labelling tools; monitor content pipelines for detection
Disclose when interacting with chatbots or interactive AI systemsChatbot deployers, customer service platforms, digital assistantsFrom 2 August 2026Update UI/UX to include “You are interacting with an AI” notices; logged disclosures; user consent where needed
Deepfake content requirementsAnyone publishing or distributing manipulated multimediaFrom 2 August 2026Use visible labels; adopt machine-readable metadata; establish internal compliance policies
Simplified rules for SMEs & small mid-capsFirms under defined turnover / employee thresholdsAlready in force via OmnibusAssess if your firm qualifies; adjust documentation, reporting accordingly

Tax & Digital Businesses: Why Transparency & AI Governance Matter for Taxes

  • Tax risk management: AI tools used for tax analysis, transfer pricing documentation, or financial audits—mistakes or opaque models could trigger penalties or audit exposure.
  • Reputational risk: Label breaches—e.g. failing to disclose deepfakes or chatbot interaction—can harm brand trust, leading to indirect financial liability.
  • Data protection & privacy: Many AI transparency obligations intersect with GDPR; companies must ensure metadata, user-info handling is compliant.

Practical Checklist to Prepare Rollout

  1. Inventory AI tools: Map all AI systems in use: generative models, customer assistants, content tools, etc. Categorize by risk under AI Act.
  2. Define labels & metadata templates: Prioritize machine-readable markers and visible labelling standards; coordinate UI, content management systems, and marketing teams.
  3. Update contracts & policies: Ensure your contract or terms with users declare AI usage; update privacy policies; disclosure policies for content.
  4. Train staff: From content creators to compliance/legal teams—ensure awareness of what constitutes manipulated content, rules on disclosure.
  5. Monitor compliance: Assign internal audit or compliance owner; set review process for content; use external or internal tools for deepfake detection and model transparency.

Example

A digital media agency regularly using generative AI to draft articles and social media posts. From 2 August 2026, posts on public interest topics must show whether text is AI-generated. If the agency qualifies as an SMC, it can use simplified documentation. If it fails to label a post or reveal use, it could face regulatory enforcement, especially if content is misleading.

Takeaway

Even though AI transparency might seem tangential to taxes, the regulation’s implications are far-reaching—intersecting with compliance risk and tax administration expectations. For digital and tax-adjacent companies, now is the time to map AI usage, establish labelling and disclosure infrastructure, and ensure you qualify for any simplifications under the AI Omnibus.

Sources

Structured source metadata was not recorded; see citations in the article body.