- Contact The DPO Centre
- +44 (0)203 797 1289
- hello@dpocentre.com
ICO guidance clarifies how organisations can use Recognised Legitimate Interest
March 30, 2026
The DPO Centre secures shortlist for two categories at ICA Compliance Awards
April 8, 2026
On 26 March 2026, the European Parliament formally agreed their position on the proposed updates to the AI ActThe EU Artificial Intelligence Act was approved by the EU Council on 21 March 2024. A world-first comprehensive AI law, intended to harmonise rules for the development, deployment, and use of artificial intelligence systems across the EU. under the EU’s Digital Omnibus package. This follows the Council of the European Union setting out its position on 13 March 2026. Read about the Council’s decision here.
With both Parliament and Council positions now established, negotiations are in progress to agree the final legislative text.
Why the EU is fast-tracking AI Act changes ahead of August 2026 deadlines
The AI Act updates were originally part of a broader package covering several EU laws, including the GDPR and Data Act. However, they have been separated and prioritised due to time pressures.
Key AI Act obligations are due to apply from August 2026, and regulators recognised that many organisations would struggle to meet these deadlines without further clarification and additional time.
As a result, the EU has decided to fast-track targeted amendments to the AI Act, instead of waiting for the full package of reforms to be agreed.
What this means for your organisation
- The core rules of the AI Act remain unchanged
- Timelines are likely to be extended to make compliance more realistic
- Organisations are being given more time, not less responsibility
In practical terms, this creates a short window for organisations to strengthen their AI governanceThe framework of policies, processes, and roles that ensure Artificial Intelligence (AI) is developed and used responsibly, ethically, and in compliance with applicable laws, societal expectations, and corporate values. , ahead of final rules being agreed.
How to prepare for EU AI Act compliance
These are the priority actions organisations should take now to stay ahead:
- Assign clear ownership for AI governance
- Map AI systems across your organisation, including third-party tools
- Assess which AI systems fall into ‘high-risk’ categories
- Set internal policies on acceptable use
For a deeper understanding of AI governance aspects explore our guidance on AI Impact Assessments, Defining roles in AI governance and Updating Privacy notices for AI.
Expert view
Michael McCagh, DPO at The DPO Centre offers this advice for oganisations:
‘While there are still some uncertainties, we can be confident that we are not going to see a watered-down version of the AI Act. As always, getting proper AI governance and adherence to the key principles of the AI Act is key and doing it early in the AI development processA series of actions or steps taken in order to achieve a particular end. is easier, cheaper, and quicker. I would recommend getting on top of it now.’
Get the latest data protection and AI governance highlights in our fortnightly newsletter, The DPIA. Sign up here.