{"id":2620908,"date":"2026-08-27T15:10:24","date_gmt":"2026-08-27T13:10:24","guid":{"rendered":"https:\/\/www.luklagroup.com\/uncategorized\/ai-act-2026-ia-generative-entreprise\/"},"modified":"2026-08-27T16:12:14","modified_gmt":"2026-08-27T14:12:14","slug":"ai-act-2026-generative-ai-business","status":"publish","type":"post","link":"https:\/\/www.luklagroup.com\/en\/cloud-cyber-en\/ai-act-2026-generative-ai-business\/","title":{"rendered":"You\u2019re Already Using AI. Have You Defined the Rules That Go With It?"},"content":{"rendered":"\n

ChatGPT to rewrite an email, Copilot to summarise a document, Gemini to search for information, or AI to generate visuals or analyse data\u2026 Generative AI has become part of everyday professional life.<\/strong><\/p>\n\n\n\n

In some cases, this has happened before companies have had time to clearly define the rules governing its use.<\/p>\n\n\n\n

Since 2 August 2026<\/strong>, a new milestone has been reached: the EU AI Act is now broadly applicable, and new transparency requirements have come into force.<\/p>\n\n\n\n

For businesses, the question is therefore no longer simply \u201cShould we use AI?\u201d<\/em>, but rather: how can we use it in a controlled, secure and compliant way?<\/strong><\/p>\n\n\n\n

AI Act: What Changed in 2026?<\/h2>\n\n\n\n

The AI Act, the European Union\u2019s regulation on artificial intelligence, follows a risk-based approach, with requirements proportionate to the level of risk associated with different AI systems and uses.<\/p>\n\n\n\n

Its implementation is gradual.<\/p>\n\n\n\n

Some provisions have already applied since February 2025<\/strong>, including rules on prohibited AI practices and AI literacy. Governance rules and certain obligations concerning general-purpose AI models have applied since August 2025.<\/p>\n\n\n\n

Since 2 August 2026<\/strong>, the regulation has entered a new phase with its broader application and the introduction of transparency obligations, notably those set out in Article 50.<\/p>\n\n\n\n

For organisations, this new stage makes the need to map and govern their AI uses<\/strong> increasingly concrete.<\/p>\n\n\n\n

Transparency: Do AI-Generated Contents Need to Be Labelled?<\/h2>\n\n\n\n

This is one of the significant developments of summer 2026.<\/p>\n\n\n\n

The AI Act introduces several transparency requirements depending on the type of system, the content generated and the organisation\u2019s role.<\/p>\n\n\n\n

Users must notably be informed when they are interacting directly with certain AI systems. Providers of systems that generate or manipulate content must also enable such content to be identifiable in a machine-readable format.<\/p>\n\n\n\n

Under certain conditions, deepfakes<\/em> must be disclosed as artificially generated or manipulated. Specific requirements also apply to certain AI-generated texts published for the purpose of informing the public on matters of public interest.<\/p>\n\n\n\n

This does not mean that every email rewritten using ChatGPT or every illustration created with AI must automatically carry an \u201cAI-generated\u201d label.<\/strong><\/p>\n\n\n\n

The applicable obligation depends on the context, the type of content and how the system is being used.<\/p>\n\n\n\n

For companies regularly producing content with AI, the right approach is therefore to identify the relevant use cases and establish appropriate transparency rules.<\/p>\n\n\n\n

December 2026: Another Deadline to Anticipate<\/h2>\n\n\n\n

Not all requirements became applicable at the same time on 2 August.<\/p>\n\n\n\n

A transitional period notably applies to certain generative AI systems placed on the market before 2 August 2026<\/strong>: their providers have until 2 December 2026<\/strong> to comply with certain requirements concerning the marking and detection of AI-generated or manipulated content.<\/p>\n\n\n\n

The regulatory timetable will continue to evolve, with obligations relating to certain systems classified as high-risk becoming applicable at a later stage.<\/p>\n\n\n\n

For businesses, the challenge is therefore less about memorising every date and more about establishing AI governance capable of adapting to an evolving regulatory framework<\/strong>.<\/p>\n\n\n\n

Do Your Employees Know the Rules?<\/h2>\n\n\n\n

The AI Act does not only concern legal, IT or compliance teams.<\/p>\n\n\n\n

Since February 2025, providers and deployers of AI systems have been required to take measures to ensure a sufficient level of AI literacy<\/strong> among the people using these systems on their behalf, taking into account factors such as their knowledge, experience and the context in which AI is used.<\/p>\n\n\n\n

This requirement reflects a very practical challenge: AI adoption cannot rely solely on individual initiatives.<\/strong><\/p>\n\n\n\n

Employees need to understand the limitations of the tools they use, maintain a critical perspective on AI-generated results and know the internal rules governing their use.<\/p>\n\n\n\n

Awareness and training are therefore becoming essential components of a responsible AI strategy.<\/p>\n\n\n\n

AI Governance: What Rules Should Companies Define?<\/h2>\n\n\n\n

Banning every AI tool is rarely an adequate response. Conversely, allowing each employee to freely choose their tools and practices can expose the organisation to new risks.<\/p>\n\n\n\n

AI governance provides a common framework.<\/p>\n\n\n\n

It can notably define:<\/p>\n\n\n\n