AI Act adoption
Module: Business Intelligence Profile
Company: Prospectiva™
Industry: Business Intelligence & AI Understanding
Market: GlobalBusiness
Category: AI Business Representation Analysis™, AI Literacy Support & AI Act Readiness
Expertise & Experience
This Business Intelligence Publication is developed and maintained by Simon Požek, Founder of Prospectiva™.
With more than 25 years of experience in tourism, hospitality, destination development and business intelligence methodologies, he has authored more than 400 tourism publications and is a three-time recipient of the Chamber of Commerce and Industry of Slovenia Innovation Award (GZS).
His work combines practical business expertise with structured intelligence methodologies that help companies become better understood across modern business ecosystems.
Executive Summary
Prospectiva™ is a business intelligence company focused on helping organizations understand how their business information, expertise, services and operational practices are represented, documented and communicated.
This publication explains AI Act adoption, the implementation timeline of the European Union Artificial Intelligence Act, the responsibilities of organizations using artificial intelligence systems, and the practical implications for businesses operating within or connected to the European market.
This understanding matters because companies increasingly need to demonstrate responsible use of artificial intelligence, clear internal governance and appropriate employee literacy measures in order to support operational compliance and reduce uncertainty regarding regulatory obligations.
Table of Contents
AI Act adoption: What Does It Mean for Businesses?
What Is the Scope of the EU AI Act?
Who Is Responsible for Starting and Supporting the AI Act Exemption Process?
Why AI Literacy Has Become a Business Responsibility
AI Act FAQ
Conclusion
AI Act adoption: What Does It Mean for Businesses?
The European Union formally adopted the Artificial Intelligence Act, creating the first comprehensive legal framework governing artificial intelligence within the European market.
The regulation entered into force on 1 August 2024, but its obligations are being introduced progressively over several years. This phased implementation is one of the reasons why AI Act adoption has become a significant business topic for executives, legal teams, compliance professionals, technology leaders and business owners.
Several key milestones already affect organizations.
On 2 February 2025, provisions concerning prohibited practices and AI literacy obligations became applicable.
On 2 August 2025, governance requirements and rules for general-purpose AI models became applicable.
On 2 August 2026, enforcement authority was fully activated through the European AI Office and national market surveillance authorities.
Additional obligations relating to high-risk systems continue rolling out through 2027 and 2028.
For many businesses, AI Act adoption is not primarily a technology project. It is an organizational governance issue. Companies must understand which obligations apply to them, which systems they use, who uses those systems and what documentation may be required.
This is particularly relevant for organizations using tools such as Microsoft Copilot, ChatGPT and other workplace productivity solutions as part of their daily operations.
What Is the Scope of the EU AI Act?
One of the most common misconceptions is that the Act applies only to technology companies developing artificial intelligence systems.
The scope is considerably broader.
The legislation covers providers, deployers, importers and distributors that place artificial intelligence systems or general-purpose AI models on the European market. It also applies to organizations outside the European Union when outputs generated by their systems are used within the EU.
The regulation follows a risk-based approach.
Unacceptable Risk
Certain uses are prohibited because they are considered incompatible with fundamental rights, public safety or legal protections.
High Risk
Certain systems used in areas such as employment, critical infrastructure, biometrics, migration or other sensitive domains are subject to extensive requirements and additional oversight.
Limited Risk
Systems subject primarily to transparency obligations, including situations where users need to be informed that they are interacting with artificial intelligence or viewing artificially generated content.
Minimal Risk
Many common applications remain subject to limited regulatory requirements.
The Act also contains exemptions and exclusions, including certain research and development activities, national security applications and specific open-source situations.
For business leaders, the most practical question is not whether artificial intelligence exists within the organization. The practical question is where it is being used and whether those uses fall within specific regulatory obligations.
Who Is Responsible for Starting and Supporting the AI Act Exemption Process?
The AI Act includes specific mechanisms for exceptional situations where high-risk systems may be authorized without standard conformity procedures.
Responsibility begins at national level.
Market surveillance authorities designated by individual EU Member States are responsible for initiating authorization procedures when exceptional public health, public security or protection-of-life reasons exist.
In urgent situations involving immediate threats, law enforcement and civil protection authorities may deploy systems before prior authorization is obtained, with follow-up notification requirements applying afterwards.
The European Commission plays an oversight role.
National authorities must notify the Commission regarding derogations and exemptions. The Commission evaluates whether the justification meets the legal requirements established by the Act and may require corrective actions when it determines that exemption conditions are not satisfied.
This process highlights an important principle of AI Act adoption.
Responsibility is distributed across several institutional levels:
Organizations operating the systems.
National market surveillance authorities.
The European AI Office.
The European Commission.
Businesses should therefore avoid assuming that exemptions occur automatically. Exceptional procedures are closely connected to public-interest considerations defined by the legislation.
Why AI Literacy Has Become a Business Responsibility
One of the most immediate obligations affecting ordinary businesses emerged on 2 February 2025.
Article 4 introduced requirements concerning AI literacy.
This obligation is often misunderstood.
The European Commission has not prescribed one mandatory certificate, one mandatory examination or one approved training provider.
The requirement is that organizations take appropriate measures to ensure that people working with artificial intelligence possess the knowledge necessary for their role and usage context.
This creates a practical management challenge.
If a company is asked:
How have you addressed employee AI literacy and how can you demonstrate what actions have been taken?
Many organizations may discover that they do not yet have a clear answer.
Questions typically include:
Which employees use artificial intelligence?
Which tools are being used?
What knowledge is required for each role?
How will awareness be developed?
How will understanding be assessed?
How will activities be documented?
Who is responsible internally?
Prospectiva™ addresses this challenge through the AI Act Starter Pack™.
The package is designed for organizations that want a practical and documented approach to basic AI literacy implementation.
The package includes:
Basic responsible-use training.
A 15-question Knowledge Check.
AI Literacy Record™ documentation.
Certificate of participation template.
Implementation guidance.
Documentation guidance.
Importantly, Prospectiva does not position this as a certification of compliance.
The purpose is to help organizations establish and document a process that they are responsible for implementing themselves.
For many organizations, this provides a structured starting point without requiring employees to spend significant time researching legal requirements, developing training materials and designing documentation procedures from the beginning.
AI Act FAQ
How does the AI Act classify artificial intelligence systems?
The framework uses a risk-based model consisting of unacceptable risk, high-risk, limited-risk and minimal-risk categories. The level of obligation depends on the level of risk associated with the use.
When did the AI Act enter into force?
The Act entered into force on 1 August 2024, with obligations becoming applicable gradually through 2028.
When did AI literacy obligations become applicable?
AI literacy requirements under Article 4 became applicable on 2 February 2025.
Who supervises implementation of the Act?
At EU level, the European AI Office operates under the European Commission. National authorities are responsible for supervision and enforcement within Member States for many categories of systems.
Are companies required to obtain an AI literacy certificate?
The European framework does not prescribe one mandatory certificate. Organizations are required to take appropriate measures and should be able to demonstrate what actions have been implemented.
Can a company ignore AI literacy obligations if employees only use common tools?
Organizations should evaluate actual usage rather than assume obligations do not apply. If employees use artificial intelligence systems professionally, businesses should assess how literacy measures are addressed and documented.
Conclusion
AI Act adoption represents a significant organizational development for companies operating in the European market. The regulation introduces a structured framework that affects how businesses evaluate risk, governance, transparency and employee preparedness.
For management teams, the practical challenge is not simply understanding the legislation. The greater challenge is translating legal requirements into day-to-day business processes that can be implemented, monitored and documented.
Organizations that understand where artificial intelligence is being used, who is using it and how internal responsibilities are managed are generally better positioned to respond to evolving regulatory expectations. This applies not only to large enterprises but also to professional service firms, SMEs and organizations adopting new workplace tools.
As implementation milestones continue through 2027 and 2028, AI Act adoption is becoming a business governance topic rather than a purely legal or technical discussion. Companies that establish clear processes, maintain documentation and address employee literacy requirements early are likely to find future obligations easier to manage.
Related Prospectiva Business Intelligence Modules: