The EU AI Act is Now Being Enforced. What Does That Mean for the Way We Build AI?
By Alison Morano
A few weeks ago, the EU AI Act entered a new phase: implementation and enforcement.
That makes this a useful moment to ask a harder question than “Are companies compliant?”
Are the rules changing how organizations actually design, deploy, and govern AI?
So now we can start asking the question I've been most interested in: Is it working?
It's still too early for a verdict, but we're beginning to see what happens when AI governance moves from principles and policies into operational requirements.
The Rules Are Real
Since August 2, Article 50's transparency requirements have applied. Providers of generative AI systems must take steps to make certain AI-generated or manipulated outputs machine-readable and detectable, where technically feasible. Providers of generative AI also face requirements intended to make synthetic content detectable.¹
At the same time, the European Commission's AI Office and national authorities have begun enforcing the Act. The AI Office has direct enforcement powers for general-purpose AI models, while national authorities supervise many other AI Act obligations.²
That's a significant shift.
We've talked about responsible AI, transparency, and accountability for years. Europe is now asking organizations to demonstrate what those principles look like in practice.
Industry Is Responding
One early signal is participation in the EU's voluntary Code of Practice on Transparency of AI-generated Content.
By the end of July, approximately 190 organizations had signed it, and about half were small or recently established companies.³
The Code isn't mandatory. But organizations that use another approach must still demonstrate that their measures adequately comply with the law.⁴
That is where governance gets interesting.
It's no longer enough to say your organization supports responsible AI. You have to show what you actually did.
For XR, these rules raise practical design questions. When an avatar, virtual guide, synthetic voice, or immersive scene is AI-generated or manipulated, how will people know? The answer cannot live only in terms-of-service language. It may need to appear in the experience itself—clearly, accessibly, and at the moment it matters.
But Europe Is Adjusting Too
The implementation hasn't been seamless.
The EU recently extended deadlines for major high-risk AI requirements. Rules covering high-risk systems in areas including employment, education, biometrics, critical infrastructure, and migration now apply beginning December 2, 2027. Requirements for high-risk AI embedded in regulated products extend to August 2, 2028.⁵
That exposes one of the biggest challenges in AI regulation: balancing urgency with operational reality.
So, Is It Working?
A few weeks isn't enough time to know.
I'm also less interested in how quickly Europe issues a massive fine than whether organizations change their behavior.
Are companies inventorying their AI systems? Are developers building transparency and traceability into them? Can organizations explain who is responsible when AI makes a consequential decision?
And can regulators distinguish real governance from compliance theater?
For now, I'm watching behavior, not fines.
If organizations start designing AI differently because they know they'll have to identify it, document it, monitor it, explain it, and defend it, the EU AI Act will have accomplished something much bigger than enforcement.
It will have changed how we build AI.
References
European Commission. (2026). Guidelines on transparency obligations for providers and deployers of AI systems. Shaping Europe's Digital Future.
European Commission: Article 50 GuidelinesEuropean Commission. (2026). AI Act. Shaping Europe's Digital Future.
European Commission: AI Act and EnforcementEuropean Commission. (2026). Strong backing for the Code of Practice on Transparency of AI-generated Content. Shaping Europe's Digital Future.
European Commission: Code SignatoriesEuropean Commission. (2026). Code of Practice on Transparency of AI-generated Content. Shaping Europe's Digital Future.
European Commission: Transparency Code of PracticeEuropean Commission. (2026). AI Omnibus enters into force. Shaping Europe's Digital Future.
European Commission: AI Omnibus
