Back to Blog
Tyrone May

The EU AI Act Omnibus: What Changed for Small Businesses

The EU AI Act Omnibus: What Changed for Small Businesses

Short answer: The EU AI Act's core stays in place, but timelines and SME relief have changed. If you publish AI-generated content, the 2 December 2026 labelling deadline is the date to check first.

What Happened

In May 2026 the Council and Parliament reached a provisional agreement, known as the AI omnibus, that recalibrates parts of the EU AI Act. Legal commentary from Mishcon and DLA Piper describes the main changes.

  • The risk-based framework and its core obligations remain.
  • High-risk rules now apply once the Commission confirms that the supporting standards and tools are available, instead of on a fixed date.
  • Relief that once applied only to SMEs now reaches small mid-caps, meaning companies with fewer than 750 employees and under EUR 150 million in annual turnover or a EUR 129 million balance sheet.
  • Smaller firms get reduced fine caps and priority access to regulatory sandboxes.
  • National sandbox deadlines move to 2 August 2027, and a new EU-level sandbox gives priority access to SMEs and startups.
  • AI-generated content must be labelled by 2 December 2026.
  • Two new prohibitions cover generating or manipulating intimate images of identifiable people, and child sexual abuse material, without consent.
  • The staff AI literacy duty has shifted from a firm mandate to a duty to support literacy development.

Some SME guides still give 2 August 2026 as the main application date for high-risk systems. Those guides pre-date the omnibus. Check current Commission guidance before you rely on any single date.

Why It Matters to a UK Business

The Act can apply to you even if you are based in the UK. The usual test is whether you place AI systems on the EU market, or whether the output of your AI is used in the EU. If you sell to EU customers, or your tools produce content that EU customers see, you should assume it is relevant until you have checked.

If you only use AI internally and have no EU customers, your exposure is usually lower. You still need to know which tools you use and what they do.

What the Changes Mean in Practice

The most useful change for a small business is the wider relief. A company with 200 staff can now claim relief that was limited to SMEs, because the small mid-cap definition covers firms under 750. Reduced fine caps and priority sandbox access also lower the cost of getting it wrong while you learn.

The labelling deadline is the nearest hard date. If your business uses AI to produce text, images, audio or video that customers or the public will see, you need a plan to label it. That covers marketing copy, product images, chatbot replies and automated emails, depending on how the final rules apply to you.

The softer literacy duty does not mean you can ignore training. Staff who use AI without understanding its limits are still a risk. The change affects what you must prove, not whether training is sensible.

What I Would Do This Week

  1. List every AI tool your business uses, including features inside software you already pay for.
  2. Mark the ones that generate content customers or the public will see.
  3. Decide how you will label that content before 2 December, and who is responsible.
  4. Check whether you place anything on the EU market, or whether EU customers see your AI output.
  5. Keep a short written record of what you decided and why.

This list is the foundation for everything else, including any labelling plan.

What to Watch For

The omnibus is a provisional agreement, and details can still shift as it moves through formal adoption. Check the current position before you commit money to a compliance project.

Be cautious about guides, including vendor guides, that quote dates without saying when they were written.

Frequently Asked Questions

Does the EU AI Act apply to UK businesses? It can, if you place AI systems on the EU market or your AI output is used in the EU.

Is the AI literacy requirement gone? No. Reports say it is softer, as a duty to support development rather than a firm mandate.

What counts as a small mid-cap? Reports define it as a company with fewer than 750 employees and under EUR 150 million in annual turnover or a EUR 129 million balance sheet.

Where can I start? My free toolkit at polynym.co/eu-ai-act-toolkit is a sensible first step.

Sources: Mishcon, "EU AI Act simplified: unpacking the AI omnibus agreement of May 2026"; DLA Piper (June 2026); Solicitors Journal. This is general information, not legal advice.