News-EU-AI-Act-Omnibus-Deal-May-2026

May 7, 2026 — European Union legislators reached a provisional agreement early on May 7, 2026, to delay and water down key provisions of the EU AI Act, marking the first significant rollback of digital rules under pressure from industry and member states.

Key Changes

Delayed High-Risk AI Compliance

The deal postpones compliance deadlines for high-risk AI systems originally set to take effect August 2, 2026:

• Standalone high-risk AI systems (biometrics, critical infrastructure, education, employment, law enforcement, border management): compliance deadline moved to December 2, 2027
• AI systems embedded as safety components in products: compliance deadline moved to August 2, 2028

Negotiations lasted approximately nine hours, starting the evening of May 7 and concluding around 4:30 a.m.

Industrial AI Exemption

Following intensive lobbying from Germany and companies including Siemens and ASML, the deal largely exempts AI in machinery products from dual regulation under both the AI Act and the Machinery Regulation. Chancellor Friedrich Merz personally pushed for the exemption, arguing that overlapping requirements would make European manufacturers uncompetitive. Medical devices were not exempted and remain subject to both regulatory frameworks.

Ban on "Nudifier" Apps and AI-Generated CSAM

The deal introduces an explicit prohibition on AI systems that:

• Generate child sexual abuse material (CSAM)
• Create non-consensual sexually explicit images of identifiable persons (so-called "nudifier" apps)

The prohibition responds to global outrage over AI-generated deepfakes, including content from Elon Musk's xAI chatbot Grok. Companies have until December 2, 2026 to comply.

Watermarking and Transparency

The deal modifies AI-generated content watermarking obligations:

• Watermarking deadline set for December 2, 2026 (previously February 2, 2027 under the Commission proposal)
• Grace period reduced from six months to three months
• Mandatory registration of high-risk AI systems in the EU database is restored

SME and Mid-Cap Exemptions

Regulatory exemptions previously available only to small enterprises are extended to small mid-cap companies (SMCs), intended to support European AI startup growth.

Bias Detection and Personal Data Processing

The deal allows organizations to process personal data where strictly necessary to detect and correct biases in both high-risk and non-high-risk AI systems, with appropriate safeguards — a significant change from the original Act's stricter data minimization approach.

Context and Significance

The EU AI Act entered into force in August 2024 after years of negotiations, with a phased rollout that was originally set to impose high-risk compliance requirements on August 2, 2026. Only a handful of countries worldwide followed the EU's lead on comprehensive AI regulation, leading to criticism that Europe was cracking down too early and failing to become a global standard-setter.

This deal represents the first significant rollback of EU digital regulation, driven by:

• US pressure on tech regulation under the Trump administration
• Industry complaints about overlapping regulations and red tape hampering competitiveness
• German Chancellor Friedrich Merz's personal intervention to exempt industrial AI
• Looming August 2026 compliance deadline that concentrated minds on all sides

Reactions

Stakeholder	Position
European Commission President Ursula von der Leyen	Welcomed the deal, saying it "provides a simple, innovation-friendly environment" while "strengthening protections for our citizens"
BEUC (European Consumer Organisation)	Lamented the weaker AI Act, warning it "rolls back key consumer protections which had barely been adopted a year ago"
CCIA (Computer & Communications Industry Association)	Called it a "missed opportunity" lacking "genuine simplification in key areas"
DIGITALEUROPE	Applauded the machinery exemption but called it a "missed opportunity" for medtech, noting 95% of Europe's medtech companies are SMEs/startups still facing overlapping obligations
Arba Kokalari (EPP, co-rapporteur)	Said the deal shows "politics can move just as quickly as technology" and makes "AI rules more workable in practice"
Kim van Sparrentak (Dutch MEP)	Praised the nudifier app ban: "By the end of this year [...] women and girls will be safe from horrific nudifier apps"

Next Steps

The provisional agreement requires formal adoption by both the European Parliament and EU member states. Co-legislators intend to adopt it before August 2, 2026, the date high-risk obligations were originally scheduled to begin.