EU Delays Key High-Risk AI Rules Until 2027 to Boost Innovation

In a significant regulatory pivot, the European Commission has proposed delaying several high-risk obligations of its AI Act until December 2027. This represents a departure from the legislation’s original schedule, which slated stricter enforcement for August 2026.

The change is part of a broader “Digital Omnibus” package, designed to streamline and modernize the EU’s technology rulebook. Alongside the AI Act delay, the Commission is also proposing updates to GDPR, the e-Privacy Directive, and the Data Act, with the goal of minimizing red tape and making Europe a more competitive hub for innovation.

Under the revised timeline, AI systems used in highly sensitive areas — such as biometric identification, credit scoring, health services, job applications, and law enforcement — will have more time to comply with new regulatory standards. The Commission says the delay will give companies breathing room while preserving the core principles of the AI Act.

Critics argue this could erode fundamental protections. Privacy advocates and some MEPs warn that loosening the rules may benefit Big Tech disproportionately, weakening oversight in critical use cases like biometric surveillance and automated hiring.

Proponents, however, contend that recalibrating the EU’s tech regulation is essential for maintaining its competitive edge. They say the reforms are a pragmatic response to economic pressures and the need to accommodate technological growth without stifling innovation.

As the proposal heads to the European Parliament and member states for negotiation, the tech industry is watching closely. The outcome could reshape Europe’s regulatory stance on AI, balancing ethical risks with economic opportunity.