EU AI Act Compliance High-Risk, GPAI and Governance

What you'll learn

---

Understand why the EU AI Act exists, how its risk-based approach works, and how the four-tier pyramid organizes every obligation.
Determine whether the AI Act applies to your organization, including its extraterritorial reach beyond the European Union.
Identify the six roles under the Act, understand how your role can change, and know which obligations attach to each one.
Master the ten prohibited practices, including the two red lines most training programs still are not covering.
Classify AI systems like an auditor using both Annex I and Annex III routes, and apply the filter to legitimately exit high-risk.
Apply the seven provider requirements for high-risk systems plus conformity assessment, CE marking, and registration duties.
Understand deployer obligations, the compliance gap most of the market is ignoring, and how to close it in your organization.
Comply with the Article 50 transparency rules already in force, covering disclosure, content marking, and deepfake labelling.
Navigate GPAI model obligations, systemic risk requirements, and what to demand from providers when you build on their models.
Build a right-sized compliance program with inventory, triage, governance, monitoring, and a concrete 90-day action roadmap.
Requirements

---

No legal or technical background required, this course explains the regulation in plain language from the ground up.
No prior knowledge of the AI Act is needed, every concept, article, and obligation is introduced clearly and in order.
All you need is a role that touches AI systems, compliance, risk, or product decisions in an organization operating in Europe
Description

---

Updated August 2026. Includes the Digital Omnibus changes (Regulation 2026/1744) that rewrote the AI Act's deadlines in July 2026.
The EU AI Act is being enforced right now. Transparency rules, the penalty regime and the enforcement authorities all switched on in August 2026, with fines reaching 35 million euros or 7% of worldwide turnover. Most companies still do not know which of their systems are affected.
This course takes you from the legal text to a working compliance program, with the templates to run it.
What you will be able to do
- Decide whether the Act applies to you, including if your company sits outside the EU
- Identify your role for each system, and spot when your role changes without you noticing
- Screen any system against the ten prohibited practices, including the two added for generative AI in 2026
- Classify high-risk systems through both Annex I and Annex III, and apply the Article 6(3) filter to legitimately exit
- Meet the Article 50 transparency rules that are already enforceable today
- Build an inventory, a governance structure and a 90-day plan sized to your organization
What you download
Every section ships with working files, not slides: a quick reference card with all the dates and fines, an applicability and role-finder kit, a classification engine in Excel, a self-assessment template for Article 6(4), a requirements tracker with separate provider and deployer tabs, a FRIA template with DPIA cross-references, ready-to-use disclosure texts, a vendor questionnaire, and the full inventory workbook with the 90-day tracker.
What makes this course different
Most AI Act training covers providers and stops there. For every company that builds a high-risk system, hundreds simply use one. Article 26 gets a full lesson here, and the deployer obligations run through every toolkit. The course also teaches the two prohibitions added by the Omnibus, applicable from December 2026, which most training programs have not caught up with yet.
Who this is for
Compliance, legal, risk, product and technology professionals. No legal background required.
Who this course is for

---

Compliance officers and AI governance professionals responsible for meeting EU AI Act obligations across their organization.
Legal counsel and regulatory affairs professionals who need a practical, operational understanding of the AI Act in force.
Data Protection Officers extending their remit to AI systems and navigating the overlap between GDPR and the AI Act.
Risk managers and internal auditors building AI inventories, classification processes, and control frameworks from scratch.
Product managers and engineering leaders who need to know which obligations attach to the AI features they are shipping.
CTOs, CIOs, and technology executives making build, buy, and deployment decisions under a live regulatory framework.
HR and recruitment professionals using AI systems that fall squarely into the high-risk category under Annex III.
Consultants and advisors helping organizations classify systems, close compliance gaps, and prepare for enforcement.
Founders and executives at SMEs and startups who need proportionate compliance without enterprise-scale legal budgets.
Anyone working with AI in Europe who wants to understand their obligations before enforcement reaches their organization.
Homepage

---