Prohibited practices
AI applications posing an unacceptable risk are prohibited, including certain forms of manipulation, social scoring and biometric categorisation.
EU AI Act
Responsible AI starts with knowing what is running in your organisation.
The EU AI Act is the European regulation governing the development and use of artificial intelligence. Its rules are risk-based: the greater the potential impact on people and society, the more extensive the obligations.
What does this mean?
Not every AI application faces the same rules.
The AI Act considers the application, its risk and your organisation’s role. A company building an AI model has different responsibilities from an organisation deploying an existing AI solution.
That is why compliance does not start with a generic checklist, but with a reliable inventory and classification of the systems actually in use.
Risk-based framework
Four levels for assessing AI.
High risk
Systems in sensitive areas, such as employment, education, essential services or critical infrastructure, may face extensive governance and documentation duties.
Transparency risk
For chatbots, deepfakes and certain AI-generated content, it must be clear that AI is being used or that content was artificially generated.
Minimal risk
Most everyday AI systems have no additional AI Act obligations, although other laws and sound risk management remain relevant.
Phased introduction
Some rules already apply.
2 February 2025
Prohibited AI practices and the duty to ensure sufficient AI literacy apply.
2 August 2025
Governance rules and obligations for providers of general-purpose AI models apply.
2 August 2026
A large part of the remaining rules, including key transparency obligations, becomes applicable.
Afterwards
Specific rules for certain high-risk systems follow later. The EU reached political agreement on an adjusted timeline in 2026, so always consult the latest official schedule.
Status: July 2026. The official EU sources linked above are authoritative.
How BridgeView helps
From obligation to manageable process.
We make responsible AI use part of operations: visible, executable and demonstrable. We connect policy to technology and day-to-day work.
AI inventory
We bring AI systems, models, suppliers, data flows and responsible teams together in one overview.
Role and risk classification
For each application, we determine your operational role and identify the likely relevant risk category and obligations.
Governance and documentation
We put practical policies, ownership, decision-making, supplier records and a demonstrable change process in place.
Technical controls
Where needed, we build in logging, human oversight, access controls, monitoring, incident handling and transparency notices.
AI literacy
We translate policy into clear instructions and training for employees who develop, procure or use AI.
Continuous control
We periodically verify that systems, use and documentation remain aligned with practice and current official guidance.
AI governance
Do you know which AI systems your organisation uses and who is responsible for them?
An initial inventory makes risks, gaps and practical next steps visible.
BridgeView supports the operational and technical implementation of AI governance. This page provides general information and is not legal advice; where needed, we work with your legal or compliance specialists.