Artificial intelligence, also known as “AI”, is increasingly being used by Danish and international businesses. At the same time, AI is becoming more common in the digital solutions that our clients encounter. The AI Act is the EU’s common regulatory framework for artificial intelligence. Among other things, it regulates how certain types of artificial intelligence may, and may not, be used. The Regulation entered into force on 1 August 2024 and will gradually become applicable towards 2028.
Through the AI Act, the EU seeks to create more harmonised and transparent conditions for businesses and public authorities. At the same time, the Regulation aims both to protect individuals and to support innovation and the development of responsible and trustworthy AI.
The AI Act applies a risk-based approach, under which AI systems are divided into four categories: (i) unacceptable risk, (ii) high risk, (iii) limited risk and (iv) minimal risk. In addition, specific rules apply to general-purpose AI models.
The scope of the obligations depends on the risk level of the individual AI system. For example, high-risk AI systems are subject to stricter requirements, including requirements relating to human oversight, risk management, data quality, transparency and other safeguards.
For businesses that use AI in their day-to-day operations, there are therefore four key points to be aware of in relation to the AI Act:
Map your company’s AI systems, including your role and the risk level of each system: The obligations under the AI Act vary depending on, for example, whether the company acts as a provider or deployer, and whether the system is a high-risk AI system.
Map the requirements that apply to your AI systems: Identify the requirements under the AI Act that apply to your company’s specific use of AI, and establish the necessary processes for, among other things, documentation, governance and human oversight.
Ensure AI literacy within the organisation: Providers and deployers must, to the extent possible, ensure a sufficient level of AI literacy among employees and other persons who deal with the operation and use of AI systems on their behalf. The AI Literacy requirement depends, among other things, on their technical knowledge, experience, education and training, as well as the context in which the AI systems are to be used.
Ensure compliance throughout the supply chain: Although not all provisions of the AI Act have yet become applicable, businesses should already now incorporate the upcoming requirements into contracts concerning AI systems to ensure timely compliance.
Today, on 2 August 2026, additional rules become applicable. You can read more about them here.
If you have any questions about the AI Act, or would like to discuss how the rules may affect your business, you are always welcome to contact CO:PLAY.