The EU Whistleblower Protection Directive provides comprehensive protection for whistleblowers reporting violations of EU law, including the EU AI Act, with employees, contractors and others able to report internally, to authorities or publicly and receiving protection against retaliation.
From August 2026, the EU Commission will have full control functions over AI providers; GPAI providers are subject to procedural and substantive obligations with a one-year transition period, and various actors—market surveillance authorities, downstream providers, and scientific bodies—can support enforcement.
Article 50 of the EU AI Act requires providers and users to ensure transparency about AI use and AI-generated content from August 2026 in four situations; the rules apply to all AI systems, not just high-risk systems, and represent one of the greatest compliance challenges for organizations.
The EU AI Act is being reformed to reduce bureaucracy and ease the burden on small and medium-sized enterprises; most provisions will not be fundamentally changed, but rather their applicability postponed, with compliance obligations to focus more strongly on large enterprises in the future.
