The EU AI Act, Explained
The EU AI Act is the world’s first comprehensive law for artificial intelligence, and it reaches far beyond Europe. If your software touches an EU user, you are likely in scope. This course translates the legal text into plain English: what is banned, what counts as high-risk, what general-purpose AI providers must do, and exactly what to put in place before each deadline arrives.
Course Lessons
From "what is this law and does it apply to me?" to a step-by-step compliance playbook - follow in order, or jump to the obligation that affects you.
1. What the EU AI Act Is
The first comprehensive AI law: what it covers, who it applies to, why it reaches outside the EU, and the roles (provider, deployer, importer) that decide your obligations.
2. The Risk-Based Framework
The Act sorts every AI system into one of four tiers - unacceptable, high, limited, and minimal risk. How the tiers work and how to find yours.
3. Prohibited AI Practices
The eight uses the Act bans outright - social scoring, manipulative systems, untargeted scraping for facial recognition, and more - in force since February 2025.
4. High-Risk AI Systems
The heart of the Act: which systems are high-risk (Annex III), and the full obligation stack - risk management, data governance, documentation, human oversight, conformity assessment.
5. General-Purpose AI & Foundation Models
The rules for GPAI models like the ones behind modern chatbots: transparency, copyright, technical documentation, and the extra duties for models with systemic risk.
6. Transparency Obligations
The limited-risk tier: telling people they’re talking to AI, labelling deepfakes and AI-generated content, and the rules for emotion-recognition and biometric categorisation.
7. Compliance in Practice
The staged timeline, the documentation you must produce, the risk-management and quality-management systems, registration, post-market monitoring, and governance bodies.
8. The Compliance Playbook
A practical checklist: classify your systems, assign roles, the penalties for getting it wrong, and the ten things to do now - whether you build, deploy, or resell AI.
What You Will Learn
By the end of this course, you will be able to:
Classify Any AI System
Place a system in the correct risk tier and identify whether you are a provider or a deployer - the two questions that determine everything else.
Map Your Obligations
Translate "high-risk" or "GPAI" into a concrete list of duties: documentation, human oversight, conformity assessment, and transparency.
Hit the Deadlines
Know which obligations are already in force and which land in 2026 and 2027, so you sequence compliance work in the right order.
Avoid the Penalties
Understand the fine tiers (up to €35M or 7% of global turnover) and build the documentation that demonstrates good-faith compliance.
Go Deeper: Companion Courses
Regulation is one layer of responsible AI. These courses cover the technical and governance practices that compliance builds on.
AI Governance
Frameworks like the NIST AI RMF and ISO 42001, risk assessment, and how to operationalise governance across an organisation.
AI Bias & Fairness
The data-governance and non-discrimination requirements behind the Act’s high-risk rules, explained in technical detail.
LLM Security
The robustness, accuracy, and cybersecurity expectations the Act places on high-risk systems - from the engineering side.
Go Deeper With Expert Courses
Recommended learning resources from our partners. Affiliate disclosure.
DataCamp - AI & Data Science
Hands-on Python, machine learning, and AI courses with interactive exercises and real projects. Track-based learning for practitioners.
DataCampedX - Top AI Courses
Courses and MicroMasters from MIT, Harvard, Stanford, and other top universities. Earn certificates that employers recognize.
edX