EU AI Act, without the noise.

I train and advise teams so they know exactly what to do, by when, for their role and risk.

Request a Scoping Call

Who I Work With

I help legal, data, and product teams prepare for the EU AI Act in a way that's practical and actionable.

Legal & Compliance

Responsibilities, documentation requirements, and the right questions to ask vendors. I help compliance teams cut through regulatory ambiguity.

Data & Engineering

Model transparency, testing obligations, logging requirements, and technical documentation. Practical guidance for the teams building and maintaining AI.

Product & Leadership

What's in scope, key dates, budget planning, and strategic implications. I help leaders understand what the Act means for their roadmap and bottom line.

What I Offer: Consultation

Focused sessions to assess your use case, compliance risk, and readiness. Includes a mapped plan by role and risk level.

  • Strategy calls to assess scope and priority
  • "Gap check" audits (2-4 weeks) to identify compliance gaps and map next steps
Request a Scoping Call

Strategy Calls

Quick, focused conversations to understand your AI landscape, assess which systems are in scope, and determine what level of preparation you need.

Gap Check Audits

A structured 2-4 week engagement where I review your AI systems, documentation, and processes against the Act's requirements and deliver a prioritized action plan.

EU AI Act on Udemy

My comprehensive Udemy course gives you a solid foundation in the EU AI Act — from prohibited practices and risk classification to compliance strategies for high-risk systems. Constantly updated with the latest regulatory changes.

4.7Rating
3,500+Learners
10h+Content
View on Udemy

Bestseller & Highest Rated

Recognized by Udemy as both a bestseller and highest-rated course in EU AI Act compliance. Available on Udemy for Business and Personal Plan.

87 Lectures Across 10 Sections

Covering everything from AI fundamentals and prohibited practices to risk assessment frameworks, high-risk system compliance, and enforcement authorities.

Prefer reading? Two free companion textbooks

The EU AI Act — An Introduction

A plain-language guided tour of the regulation — prohibited practices, high-risk systems, transparency, GPAI — with post-Omnibus dates and a quiz after every chapter. Free to read online or download as PDF.

Read the textbook

EU AI Act for Developers

The AI Act read as a requirements document — classification, data governance, logging, human oversight, and technical documentation translated into practices and runnable Python. Free to read online or download as PDF.

Read the textbook

Role-Specific Trainings

Each training is tailored to the role, context, and risk level of the audience.

Request a Scoping Call

What's Coming — Key Deadlines

The EU AI Act doesn't hit all at once. Here's a simple breakdown:

Update: the Digital Omnibus shifted the timeline (in force since July 27, 2026)

The Digital Omnibus on AI is now law: Regulation (EU) 2026/1744 was published in the Official Journal on July 24, 2026 and entered into force on July 27, 2026. It defers the high-risk deadlines: stand-alone high-risk systems (Annex III) move from August 2026 to December 2, 2027, and AI embedded in regulated products (Annex I) from August 2027 to August 2, 2028. These are fixed dates. The bans, the general-purpose AI rules and the transparency duties kept their original dates.

  1. February 2, 2025

    Banned AI practices are already illegal

    Things like social scoring, emotion detection in schools or workplaces (unless safety-related), and certain forms of biometric identification are prohibited. The Digital Omnibus adds two more bans, applying from December 2, 2026: AI that generates non-consensual intimate imagery or child sexual abuse material.

  2. August 2, 2025

    General-purpose AI rules in force

    Providers of general-purpose AI models must meet transparency and copyright duties, with extra obligations for "systemic risk" models. The EU's governance and penalty regime also took effect.

  3. August 2, 2026

    General application — with deferred high-risk rules

    Most remaining rules apply, including telling users when they're interacting with AI and labelling AI-generated content like deepfakes (labelling solutions get a grace period until December 2, 2026). The high-risk obligations originally due on this date are deferred — see below.

  4. December 2, 2027

    High-risk obligations start

    If you're building or using stand-alone high-risk AI systems (e.g., in hiring, education, finance, or public services — Annex III), this is the go-live date for compliance, as deferred by the Digital Omnibus.

  5. August 2, 2028

    High-risk AI in regulated products

    AI embedded in products already covered by EU product-safety law (Annex I — machinery, medical devices, vehicles, toys…) must comply from this deferred date.

Good to know

  • Already using a high-risk system? If it doesn't substantially change after its go-live date, it may stay out of scope.
  • Using open-source models? Some duties are lighter — unless the model is labelled "systemic risk."
  • Large public IT systems have extra time until Dec 31, 2030.

Frequently Asked (but rarely answered clearly)

Does not constitute legal advisory (informative character only)

What exactly is a "high-risk" AI system?
If your AI is used in sensitive areas — like hiring, credit scoring, insurance, education, policing, or border management — it's likely classified as high-risk. That means documentation, risk management, human oversight, and more.

We use a US-based model. Are we still responsible?
Yes, often. If you put it on the EU market, brand it, or control how it's used — you're likely the "provider" or "deployer" under the Act and bear responsibility.

Are some AI practices already banned?
Yes. For example:
  • Social scoring
  • Real-time biometric ID in public spaces
  • Emotion recognition at school or work
  • Predictive policing based on profiling
These bans already apply from Feb 2025. The Digital Omnibus adds two more from December 2, 2026: AI generating non-consensual intimate imagery and child sexual abuse material.

Didn't the deadlines just change? (Digital Omnibus)
Yes, mostly for high-risk systems. The Digital Omnibus on AI (Regulation (EU) 2026/1744, in force since July 27, 2026) moved high-risk obligations for stand-alone systems (Annex III) to December 2, 2027, and for AI in regulated products (Annex I) to August 2, 2028. The bans, GPAI rules, and transparency duties keep their original dates. The new dates are fixed in the regulation.

Do we have to label AI-generated content or chatbots?
Yes — if it's not obvious, you must disclose when users are talking to a machine. Also, synthetic content (e.g. deepfakes) should be labelled unless you fall under a specific exemption. These duties apply from August 2, 2026, with a grace period for labelling solutions until December 2, 2026.

Do open-source models have fewer rules?
Yes, if: the model is truly open-source (weights, architecture, and license), and it's not designated as a "systemic risk" model by the EU. In that case, fewer obligations apply to the provider.

What's a "fundamental rights impact assessment"?
If you're using high-risk AI in public services (e.g., education, social support, insurance), you'll need to assess how the system may affect people's fundamental rights before deployment.

Can we get help checking if our AI system is in scope?
Yes. Book a quick call and we'll figure it out in 15 minutes.

Want to discuss your compliance readiness?

Let's figure out where you stand and what to prioritize.

Request a Scoping Call robert@barcik.training