The EU AI Act regulates AI systems by risk: some practices are banned, high-risk systems face strict requirements, certain systems must be transparent, and most applications face no new obligations. It entered into force in August 2024, with obligations applying in phases.
Fairness, transparency, privacy, safety and accountability are becoming everyday requirements for AI teams. Frameworks such as NIST's AI Risk Management Framework — organized around Govern, Map, Measure and Manage — offer a practical starting point.