Quality and Safety AI on the Factory Floor Isn’t Waiting for 2027
A political agreement pushing the EU AI Act’s high-risk obligations out to December 2027, and to August 2028 for AI embedded as a safety component in regulated machinery, has led a lot of manufacturers to file the whole regulation under “next year’s problem.” That reading is wrong. The deferral covers specific chapters of the Act. Several other obligations were never touched by it, and some are already in force for quality and safety AI tools today.
The practical risk is a manufacturer that quietly stops all AI governance work, only to discover that transparency duties and obligations on general-purpose AI providers, whose models often sit underneath a quality-inspection tool, were never part of the postponement. This article sets out what the deferral actually covers, what it leaves untouched, and what that means for AI governance work that should already be underway.
Executive Summary
The Digital Omnibus amendment to the EU AI Act deferred high-risk system obligations, currently to December 2027 for standalone systems and August 2028 for AI embedded as a safety component in regulated machinery, in response to unfinished technical standards. That deferral does not touch the Act’s prohibited-practice bans, its obligations on providers of general-purpose AI models, or its transparency requirements, several of which are already binding on manufacturers today.
Key Takeaways
- Only Chapter III high-risk system obligations, and Annex I embedded safety-component obligations, were deferred, not the whole Act.
- Transparency obligations under Article 50 were not delayed and are already active.
- Obligations on general-purpose AI model providers were untouched by the deferral. Many quality and safety tools sit on top of general-purpose models.
- Prohibited AI practices remain banned regardless of the high-risk timeline.
- Governance infrastructure built now for transparency and documentation carries forward into any future high-risk classification.
What the Digital Omnibus Actually Deferred for Quality and Safety AI
The deferral mechanism was introduced because the technical standards needed to operationalise high-risk obligations were not ready in time.
A Targeted Delay to Chapter III and Annex I, Not a Reset of the Act
The postponement applies to conformity assessment and the fuller compliance regime that high-risk and embedded safety-component systems are subject to. Everything outside those categories proceeds on the timeline the Act originally set.
Backstop Dates Exist Precisely Because Standards Are Still Catching Up
The new dates function as backstops, with 2027 and 2028 as the outer limits regardless. Regulators expect manufacturers to keep preparing during the extension.
What Is Already in Force for Manufacturers, Deferral or Not
Several obligations sit outside the deferred categories entirely and have applied on their original schedule.
General-Purpose AI Model Obligations Predate the Deferral Entirely
Providers of general-purpose AI models, which underpin many quality and safety monitoring tools, have been subject to documentation obligations since before the Digital Omnibus was proposed.
Transparency and Disclosure Duties Are Live Now
Requirements around AI-generated content and AI interaction disclosure applied on the Act’s original schedule and were not moved by the Omnibus.
Why Treating the Delay as a Pause Costs More Later
A manufacturer that stops all AI governance work is discarding groundwork that would have made the eventual high-risk deadline easier to meet.
Building AI Governance Around What Actually Applies Today
The practical starting point is separating the obligation calendar into what is live now and what is on a backstop timeline, prioritising governance work against the first list immediately.
How a Data Control Plane Supports AI Governance Obligations Already in Force
The Kiteworks Data Control Plane applies data-aware, zero-trust controls to every action any user or AI agent takes across every channel, and captures each one in a tamper-proof, unthrottled audit log that feeds directly into SIEM tooling, giving manufacturers the detailed, queryable record current transparency obligations expect.
Manufacturers that want to see how this applies to their current AI deployments can schedule a custom demo.
Frequently Asked Questions
Only Chapter III high-risk system obligations and Annex I embedded safety-component obligations were deferred, to December 2027 for standalone systems and August 2028 for AI in regulated machinery.
Transparency obligations under Article 50, obligations on general-purpose AI model providers, and prohibited-practice bans are already active and were not affected by the deferral.
Stopping governance work now risks non-compliance with live rules on transparency and general-purpose models, while also losing the benefit of groundwork that will simplify future high-risk deadlines.
It applies data-aware, zero-trust controls and captures every action in a tamper-proof audit log that feeds directly into SIEM tooling, providing the detailed records required by active transparency rules.