EU AI Act Compliance Checklist

Timeline: What When

7 Steps to Compliance

1. Create AI System Inventory

• Identify all AI systems in the company
• Document: name, provider, version, purpose
• Assign responsible persons (AI Owner)
• Categorize input/output data

2. Conduct Risk Classification

3. Check Prohibitions (Article 5)

These practices have been forbidden since 2 February 2025:

• Manipulative AI that leads people to harmful decisions
• Social Scoring - classification by social behavior
• Automated risk assessment by authorities
• Untargeted collection of facial images from the internet
• Emotion recognition in the workplace
• Biometric categorization (exceptions: security)

4. Fulfill Transparency Requirements

For chatbots and AI-generated content:

• Disclosure: Let users know they are talking to AI
• Labeling: Mark AI-generated images/audio/text as such
• Copyright compliance: Documentation of training data
• Update terms of service

5. Ensure AI Literacy (Art. 4)

• Train employees on AI systems
• Document training records
• Establish basic understanding in the company

Sources

• EU AI Act Original Text (EUR-Lex)
• LittleData EU AI Act Checklist
• EYreACT: Article 5 Guide