South Africa AI regulation 2026: operators guide.
South Africa AI regulation 2026 for operators. POPIA enforcement, the national AI policy framework, SARB AI guidance, and how South African obligations compare to the EU AI Act.
An index of analyses, briefings, and references maintained by the editorial desk. Entries are dated, footnoted, and kept current as new guidance arrives from European supervisors and standards bodies. The archive covers regulation, case monitoring, market intelligence, and the standards work underneath operator liability.
South Africa AI regulation 2026 for operators. POPIA enforcement, the national AI policy framework, SARB AI guidance, and how South African obligations compare to the EU AI Act.
Article 72 of the EU AI Act requires post-market monitoring systems for high-risk AI. What deployers must implement, what providers must maintain, and how the two obligations interact.
How Germany's BaFin, the Netherlands' AFM and DNB, and France's ACPR are building EU AI Act enforcement capacity in 2026. Practical obligations for financial services deployers across the EU.
What EU AI Act Article 73 requires of deployers when a high-risk AI system causes a serious incident. Who reports, to which authority, within what timeframe, and what documentation is required.
Article 15 of Regulation (EU) 2024/1689 requires high-risk AI systems to meet accuracy, robustness, and cybersecurity standards. A deployer-focused reading of every obligation.
Article 43 of Regulation (EU) 2024/1689 governs conformity assessment for high-risk AI. This guide explains both tracks, notified body requirements, and deployer verification duties.
Article 6 of Regulation (EU) 2024/1689 determines which AI systems are high-risk. This guide explains both classification tracks and the Article 6(3) exception.
What Article 11 of Regulation (EU) 2024/1689 requires, what Annex IV specifies, and what deployers should expect from providers before August 2026.
Annex III of Regulation (EU) 2024/1689 lists eight high-risk AI categories across critical sectors. This guide maps each category to specific use cases and explains the August 2026 obligations for deployers.
Article 16 of Regulation (EU) 2024/1689 sets out ten obligations for providers of high-risk AI systems. This guide explains each obligation and what deployers must verify before putting a high-risk system into service.
Article 12 of Regulation (EU) 2024/1689 mandates automatic logging for high-risk AI. This guide explains what deployers must retain, for how long, and why the log record is also insurance evidence.
Article 5 of EU Regulation 2024/1689 lists eight prohibited AI practices that have been in force since February 2025. A deployer's guide to each prohibition and its scope.
Article 10 of Regulation (EU) 2024/1689 sets binding data governance standards for high-risk AI. Here is what deployers must understand and document before August 2026.
How the EU AI Act's general-purpose AI model provisions in Articles 51 to 56 affect deployers who build products on foundation models, and when a deployer becomes a GPAI provider.
Article 17 of Regulation (EU) 2024/1689 compels providers to produce technical documentation before deployment. This guide explains what deployers must require and how to evaluate adequacy.
A complete reading of Article 26 of Regulation (EU) 2024/1689. Every deployer duty, from instructions compliance to FRIA to incident notification, mapped to practical action before August 2026.
Article 9 of Regulation (EU) 2024/1689 requires a risk management system for all high-risk AI. This guide explains what deployers must understand, verify, and document before August 2026.
The Digital Omnibus delays the EU AI Act high-risk obligations to 2 December 2027. The 2026 operator's reference. What changed, what stays mandatory, what to do.
Article 50 of Regulation (EU) 2024/1689 imposes four distinct disclosure duties on deployers: emotion recognition notification, machine-readable marking of AI-generated content, deepfake disclosure, and public-interest text labelling. This guide reads each obligation in sequence and sets out what deployers must have in place before 2 August 2026.
A country-by-country tracker of EU AI Act national supervisory authority designations, implementing legislation, and transposition status across all 27 Member States as of April 2026.
100 days remain until the EU AI Act operator provisions enter application on 2 August 2026. The deployer checklist, week by week, with the minimum file.
How AI policy exclusions work in 2026. ISO CG 40 47, carrier-specific endorsements, the silent vs affirmative distinction, and the renewal questions to ask.
The EU AI Act and the revised Product Liability Directive create a double exposure for AI deployers in 2026. The dates, the rebuttable presumption, the operator file.
The 90-day FRIA countdown for EU AI Act Article 27. A deployer checklist, template structure, and supervisor notification guide for the 2 August 2026 deadline.
A 2026 guide to the Fundamental Rights Impact Assessment under Article 27 of the EU AI Act. Who must file, what it contains, and how to maintain it.
What Article 14 of the EU AI Act requires deployers to build, staff, and document for high-risk AI systems ahead of the 2 August 2026 enforcement deadline.
How the EU AI Act enforcement architecture works: the AI Office, national market surveillance authorities, and the penalty tiers that apply from 2 August 2026.
EIOPA's August 2025 opinion on AI governance for European insurers, mapped to EU AI Act obligations under Articles 9, 14, 17, and 26 of Regulation (EU) 2024/1689.
Article 13 of Regulation (EU) 2024/1689 requires high-risk AI systems to be transparent. This guide sets out what providers must supply and what deployers must pass on.
When an AI agent causes harm, who is liable: the model provider, the integrator, or the deployer? A structured reading of EU law's multi-party liability framework.
Directive 2024/2853 makes AI software a product subject to strict liability. A European operator's guide to the exposure that lands in December 2026.
A practical 2026 guide to the EU AI Act operator obligations: Article 26 duties, human oversight, logging, incident reporting, and the deadlines every deployer must meet.
A clear reading of AI agent liability under the Revised Product Liability Directive, the EU AI Act, and national case law beginning to shape deployer responsibility.
A practical nine-document framework for AI agent risk management documentation under the EU AI Act: Article 9, Article 12, Article 26, and ISO 42001 in one file.
A close reading of Article 13 and the transparency obligations it places on providers of high-risk AI systems, with a guide to the information operators must pass through the deployment chain.
A practical walk through the Chapter III deployer duties, the human oversight standard, and the documentation every European operator should hold on file before 2 August 2026.
A reading of the Revised Product Liability Directive, the AI Act, and national case law beginning to shape deployer responsibility for autonomous decisions.
The nine artefacts a European operator should produce and maintain to satisfy Article 9, Article 12, and Article 26 in a single coherent file.
A walk through Article 26 and its neighbours in the order a deployer meets them. Updated to reflect the April guidance from the AI Office.
Verification, governance, standards. Why insurers cannot yet price autonomous agent risk, and the artefacts that close the distance.
The European Insurance and Occupational Pensions Authority opens its consultation on AI and insurance. An early reading of the paper, the questions that matter most, and the deadline for submissions.
The Dutch institute for human rights issues a non binding opinion on algorithmic hiring tools and points toward Article 27 as the appropriate documentation vehicle.
A short reading of the first publicly circulated draft of harmonised standards work supporting the AI Act. What has moved since the autumn and where the most contested language sits.
When a retrieval layer, a system prompt, or a fine tune converts an operator into a provider with full upstream obligations. A set of worked examples for compliance teams.
The archive is maintained as a working record. Entries are revised in place rather than republished when the underlying text changes. Each revision is stamped with a date and a short note in the footnotes section. Readers who need the earlier wording should write to the editors.
A published framework from Future Proof Intelligence for assessing autonomous AI agent deployments. Seven dimensions. Independent. Continuously maintained.
Read the framework