August 2, 2025 - A Critical Date in the EU AI Act Enforcement Timeline

After the August 2 deadline, several obligations for GPAI providers and other national regulators will come into effect. The GPAI model providers must ensure compliance with the transparency, documentation, and copyright safeguards, particularly for the high-risk foundational models. The confidentiality clauses for the Commission and other bodies that collect data as part of their activities will also come into effect. Organizations must assess which categories their activities and AI models fall under and align their internal practices accordingly.

The Notified Bodies are EU-accredited entities that assess high-risk AI systems for their compliance with the AI Act’s various requirements. August 2 onwards, these bodies will be able to perform conformity assessments before such systems are deployed or marketed in the EU.

After August 2, all entities subject to the AI Act, including providers, notified bodies, market surveillance authorities, as well as the Commission, must observe confidentiality protections for protected business information they may collect while performing their duties. This includes trade secrets, proprietary algorithms, and documentation disclosed during audits or compliance checks. They must have the appropriate data handling protocols in place to ensure the competitive integrity and legal protection for the data being collected.