Regulation (EU) 2024/1689 - the Artificial Intelligence Act

Why it matters

It is the first comprehensive AI law from a major regulator, and its risk-tier structure - unacceptable, high, limited, minimal - has become the reference vocabulary other jurisdictions draft against, whether or not they adopt EU rules themselves.

Key takeaways

• Entered into force 1 August 2024; obligations phase in over roughly two years, with prohibited-practice bans applying earliest.
• Classifies AI systems into four risk tiers, with the bulk of compliance obligations falling on "high-risk" systems (e.g. in employment, credit scoring, law enforcement, critical infrastructure).
• Has extraterritorial reach: it applies to providers placing AI systems on the EU market or whose system's output is used in the EU, regardless of where the provider is based.
• Sets separate, lighter transparency obligations for general-purpose AI models, with extra duties for models found to carry "systemic risk."

UAE / MENA relevance

Any UAE company selling AI products or services into the EU market, or whose AI system's output reaches EU users, falls within scope regardless of where the company is headquartered - the Act's territorial reach is the most common reason a UAE AI business needs to read it at all.

Part of these reading paths

• Understanding AI Governance