EU AI Act Article 50 Is Live — And the Digital Omnibus Reshaped What That Means

The EU AI Act's enforcement era formally began on August 2, 2026, but the Regulation (EU) 2026/1744 — the Digital Omnibus on AI — entered into force on July 27, just days before enforcement started, amending the Act in ways that significantly altered the compliance landscape. The key change: Annex III high-risk obligations (covering recruitment and employment, credit scoring, education, biometrics, law enforcement, and justice) have been deferred to December 2, 2027, and Annex I high-risk obligations to August 2, 2028. Article 50 transparency obligations, however, remain fully in force from August 2, 2026. DLA Piper's August 6 analysis identified the provider-versus-deployer distinction as the sleeper compliance risk: any organization that customizes, retrains, fine-tunes, or rebrands a third-party AI system risks reclassification as a provider rather than a deployer — triggering full technical documentation, conformity assessment, and registration obligations. For law firms deploying custom AI agents built on foundation models, this reclassification risk is live and requires immediate assessment. Penalties remain unchanged: up to €15 million or 3% of global turnover for Article 50 violations.