EU AI Act and Strategic Roadmap for Companies
The EU AI Act affects businesses far beyond EU borders. Risk classification, compliance timelines and a practical roadmap for companies in Turkey, Albania and Kosovo.
AI Regulation
The EU Artificial Intelligence Act (EU AI Act) — the world's first comprehensive regulatory framework for artificial intelligence — entered into force in August 2024. Its phased implementation creates immediate obligations for many companies, including those based in Turkey, Albania and Kosovo.
Who Must Comply?
The EU AI Act has extra-territorial reach. It applies to any company that:
• Deploys AI systems in the EU market
• Places AI products on the EU market
• Is a provider or deployer of AI in the EU — regardless of where the company is established
This means Turkish, Albanian and Kosovar companies that serve EU customers or deploy AI in EU-regulated sectors must assess their obligations under the Act.
Risk Classification
Unacceptable Risk (Prohibited): AI systems for social scoring, real-time biometric surveillance in public spaces, subliminal manipulation — banned entirely.
High Risk: AI in employment, education, healthcare, critical infrastructure, law enforcement and migration — subject to conformity assessment, technical documentation, human oversight and post-market monitoring.
Limited Risk: Chatbots, emotion recognition, deepfakes — transparency obligations apply.
Minimal Risk: Spam filters, AI-enabled video games — minimal obligations.
Key Compliance Timelines
• February 2025: Prohibited AI systems banned
• August 2025: GPAI model obligations apply
• August 2026: Full obligations for high-risk systems take effect
• August 2027: Specific product safety obligations apply
Strategic Compliance Roadmap
Step 1 — Inventory: Map all AI systems used or deployed. Classify each by risk tier under the Act.
Step 2 — Gap Analysis: Assess current governance against EU AI Act requirements for your risk tier.
Step 3 — Documentation: Prepare technical documentation, conformity declarations and risk management systems for high-risk AI.
Step 4 — Human Oversight: Design and implement meaningful human oversight mechanisms for high-risk AI deployments.
Step 5 — Contracts: Update AI vendor contracts to include EU AI Act compliance obligations, liability allocation and audit rights.