PrivacySignal
Enforcement

GPAI obligations under the EU AI Act: Enforcement has started 2 August 2026

Taylor Wessing · · International · Enforcement

Enforcement of obligations for general-purpose AI (GPAI) models under the EU AI Act formally began on 2 August 2026. Companies that develop or deploy GPAI models in the EU are now subject to active regulatory requirements, not just preparation deadlines.

Why this matters: This is the moment the EU AI Act stops being a planning exercise and starts having teeth. If you build, sell, or rely on general-purpose AI models in Europe, the rules are no longer coming — they are here. That means documentation, transparency requirements, and accountability for systemic risks are now enforceable. Companies that treated compliance as a future problem now face real exposure. The bigger story is whether regulators actually have the capacity to enforce, and how hard they push first.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Related stories

Enforcement
Nextgov/FCW · · US Federal

Lawmakers call for watchdog review of Transportation’s passenger privacy practices

Senators Ron Wyden and Representative Shontel Brown have asked the Government Accountability Office to investigate the Department of Transportation's handling of passenger privacy, citing the agency's apparent failure to bring any enforcement actions in that area.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
The Record · · International

Meta pledges to overhaul kids’ safety protections, pay $17 billion to settle social media case

Meta has agreed to a $17 billion settlement with attorneys general from nearly every U.S. state and territory over its handling of children's safety on its platforms. The deal requires Meta to implement new privacy and safety protections across its products.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
K KTVU · · International

Parents, teens, data privacy experts react to $17 billion Meta settlement

Meta has reached a $17 billion settlement, drawing reactions from parents, teenagers, and data privacy advocates. The settlement appears tied to concerns about how the company handled user data, particularly involving younger people.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
A Al Jazeera · · International

Brazil fines TikTok $30m for child data privacy violations

Brazil's data protection authority has fined TikTok approximately $30 million for violations related to the privacy of children's data. The penalty marks one of the more significant enforcement actions against a major platform under Brazilian privacy law.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
DataBreaches.net · · International

New Utah law protects student privacy after BYU research found K-12 apps were collecting and sharing data

BYU researchers found that K-12 educational technology apps were collecting and sharing student data in ways that violated privacy obligations, according to a report prepared for the Utah State Board of Education. The findings prompted Utah to pass new legislation tightening privacy requirements for EdTech vendors operating in the state.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →