The Digital Omnibus on AI entered into force on July 27, and the headline everyone read was that Europe has softened its AI rules. It has. The European Union's high-risk obligations moved out by up to sixteen months: to December 2, 2027 for standalone systems in areas like hiring and credit, and August 2, 2028 for AI embedded in regulated products like medical devices and machinery. If your company builds AI into a regulated product, that is real relief.

What almost nobody has been told is that the transparency rule was not moved at all. Article 50 applies on August 2, 2026. The European Commission confirmed it in a single sentence in its own guidance, and published a full set of interpretive guidelines for it on July 20 — which is not what regulators do a fortnight before a deadline they intend to postpone.

Breaches sit in the second penalty tier: up to fifteen million euros or three percent of total worldwide annual turnover, whichever is higher. Worldwide, not European. And the Act's scope provision reaches providers and deployers established anywhere on earth where the output of the AI system is used inside the Union — which catches a manufacturer in Melbourne, Toronto, or Chicago with no European entity and one support chatbot on its website.

Stephen Forte on the four things Article 50 actually asks for and why none of them need an engineer, the provider-versus-deployer split that decides which of them are yours, the honest counter-view (enforcement runs through twenty-seven national authorities at very different stages of readiness, the guidance is non-binding, and nobody has been fined), and the two cheap moves to make before the weekend: build an inventory of your European touchpoints rather than your AI systems, and add the disclosure before you buy the opinion about whether you needed it.