Digital Omnibus Is Law: Two Clocks, Two Deadlines
The EU's Digital Omnibus on AI was formally adopted by the Council of the EU on June 29, 2026 and entered into force three days after publication in the Official Journal — making it effective law in early July. The key structural point for law firms advising EU-exposed clients is the two-track architecture: Annex III high-risk AI systems (employment, credit, education, biometrics, law enforcement)
BY FRONTIER DESK · JULY 8, 2026 · 1 MIN READ
The EU's Digital Omnibus on AI was formally adopted by the Council of the EU on June 29, 2026 and entered into force three days after publication in the Official Journal — making it effective law in early July. The key structural point for law firms advising EU-exposed clients is the two-track architecture: Annex III high-risk AI systems (employment, credit, education, biometrics, law enforcement) now comply by December 2, 2027, and Annex I product-embedded systems by August 2, 2028. However, GPAI enforcement powers — including fines of up to €15 million or 3% of global turnover — activate August 2, 2026, and Article 50 transparency obligations (chatbot disclosure, AI-generated content labeling) apply on the same date. The Digital Omnibus also extends simplified compliance to small mid-caps (up to 750 employees and €150 million revenue), reinforces AI value chain contracting obligations between providers and third parties, and adds new prohibitions on AI-generated non-consensual intimate imagery effective December 2, 2026. For law firm clients deploying AI tools in EU contexts, the immediate question is not the deferred high-risk track — it is whether their chatbots, generative content tools, and GPAI dependencies are Article 50-compliant before August 2.