The EU AI Act High-Risk Deadline Moved to December 2027. The Work Didn't. — Compliance Pack v1.1

July 29, 2026

On 27 July 2026, every High-Risk AI programme in Europe got sixteen months handed back to it. Regulation (EU) 2026/1744 — the Digital Omnibus on AI — deferred the Annex III high-risk obligations from 2 August 2026 to 2 December 2027, and the Annex I obligations for AI embedded in regulated products to 2 August 2028.

Most organisations will read that as permission to stop. It is the opposite: it is the first time the compliance calendar has been long enough to do the work properly.

A deferral is not an exemption

Two things about the new date matter more than the date itself.

First, it is a fixed calendar date. The deferral is not conditional on harmonised standards arriving, and there is no stop-the-clock mechanism behind it. 2 December 2027 will arrive whether the programme is ready or not.

Second, nothing about the scope of the work changed. Role determination, the Article 27 FRIA — which moves with the Annex III date, since it attaches to the same obligations — human oversight design, Annex IV technical documentation, and vendor evidence are exactly as heavy as they were in July. The organisations that treated 2 August 2026 as a scramble deadline have not had the scramble cancelled. They have had it scheduled.

What sixteen months is actually for

A High-Risk compliance programme run against a real runway looks different from one run against a panic deadline:

Now — classification. The deferral changed when High-Risk obligations bite, not which systems are High-Risk. Until every AI use case is mapped to a tier, the runway cannot be planned against. That is the job of the companion AI Regulatory Compliance Risk Register — classify first, then execute.
2026 — role determination and vendor evidence. Provider-versus-deployer questions and vendor documentation requests have the longest lead times in the whole programme. Sixteen months is generous only if these start early.
2027 — FRIA, oversight design, Annex IV assembly. The instruments that depend on how the system is actually deployed, sequenced without compressing them into a final quarter.

For consulting and advisory teams, the deferral is not a lost engagement — it is a different one. “What should we do with the extension” is a question every client with a High-Risk system is asking right now, and a 2027-readiness roadmap is the answer they are buying.

What changed in the Pack (v1.1)

Instructions tab and legal disclaimer — version date, regulatory-status references, and every date cross-checked against the Official Journal text, now reading v1.1, 29 July 2026
“Publication pending” caveats carried in v1.0 — removed, now that the Digital Omnibus is published and in force
The new Article 5(1) prohibition introduced by the Omnibus — noted for regulatory completeness; classification of prohibited practices belongs to the Risk Register's Prohibited tier, updated separately to v1.1
Role Determination, FRIA Template, Human Oversight Design, Annex IV Checklist, Vendor Questionnaire — unchanged. The working logic did not move; only the regulatory-status references did.

The calendar as it now stands

2 August 2026 — Article 50 transparency obligations apply, untouched by the Omnibus
2 December 2026 — the new Article 5 prohibited practice applies (Register scope)
2 December 2027 — Annex III high-risk obligations apply; the Article 27 FRIA duty attaches here
2 August 2028 — Annex I obligations for AI embedded in regulated products apply

If you already own v1.0

You don't need to buy anything new. The v1.1 update is folded into the same product — no separate release, no upgrade fee. Re-download the file from your Payhip library to get the current version.

Source: Regulation (EU) 2026/1744 of the European Parliament and of the Council of 8 July 2026 amending Regulations (EU) 2024/1689, (EU) 2018/1139 and (EU) 2023/1230 as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI). Official Journal of the European Union, published 24 July 2026, in force 27 July 2026.

Read the official text: https://eur-lex.europa.eu/eli/reg/2026/1744/oj/eng

Legal disclaimer

This tool provides structured guidance based on publicly available regulatory texts as of the version date (29 July 2026). It does not constitute legal advice, does not create an advisor-client relationship, and does not replace qualified legal counsel. No claim is made that use of this tool constitutes or evidences compliance with the EU AI Act or any other law. Validate all conclusions with qualified counsel before relying on them.

Frequently asked questions

Does the deferral mean High-Risk compliance work can pause until 2027?

No. 2 December 2027 is a fixed calendar date with no extension mechanism attached. Classification, role determination, and vendor evidence gathering have lead times measured in quarters — a programme that starts in mid-2027 recreates the August 2026 scramble against a date that will not move again.

When should a FRIA now be completed?

The Article 27 FRIA duty attaches to the Annex III obligations and therefore applies from 2 December 2027 — but a FRIA depends on deployment context, oversight design, and vendor inputs that take months to assemble. Treat 2027 as the completion window, not the start date.

What should an organisation do first with the extension?

Classify. The deferral changed the deadline, not the risk tiers — until every use case is mapped against the Prohibited / High-Risk / Limited / Minimal waterfall, the runway cannot be planned. That is the AI Regulatory Compliance Risk Register's job; this Pack is the execution layer once a system is classified High-Risk.

Do I need to pay again for v1.1?

No. The update is folded into the same product. Existing buyers should re-download from their Payhip library.

Get the tool

EU AI Act High-Risk Compliance Pack — v1.1

The execution layer for a fixed 16-month runway: role determination, FRIA template, human oversight design, a 26-item Annex IV checklist, and a 31-question vendor questionnaire.

Confirmed Annex III (2 Dec 2027) and Annex I (2 Aug 2028) dates
Built for programmes — and the consultants running them — planning toward December 2027
Existing buyers re-download at no charge

https://viksya.com/eu-ai-act-high-risk-compliance-pack

Direct download: https://viksya.com/eu-ai-act-high-risk-compliance-pack

Classify first: AI Regulatory Compliance Risk Register — https://viksya.com/ai-regulatory-compliance-risk-register