Global AI Monitor
Preview

European Economic Area (EEA) · Module Detail

European Economic Area: Prohibited Practices

#

Artificial Intelligence Act (Valid from 2024-08-01): Horizontal EU regulation setting risk-based rules for AI systems and general-purpose AI models, applying in stages from 2 February 2025 to 2 August 2028 as amended by Regulation (EU) 2026/1744.

6 instruments · 5 obligations · 7 claims · Next: (Article 5(1)(ba), (bb), (1a), (1b) prohibitions begin to apply)

6 instruments (6 current) · 5 obligations · 7 claims · 14 milestones

Instruments

  • Artificial Intelligence Act Valid from 2024-08-01

    Horizontal EU regulation setting risk-based rules for AI systems and general-purpose AI models, applying in stages from 2 February 2025 to 2 August 2028 as amended by Regulation (EU) 2026/1744.

    Binding · Authority: European AI Office (European Commission), European Data Protection Supervisor · Verified · Official text
  • Commission Guidelines on prohibited AI practices Valid from 2025-02-04

    Commission guidance on AI practices deemed unacceptable under Article 5 of the AI Act.

    Non-binding · Verified · Official text
  • Commission report under Article 112(1) of the AI Act on reviewing prohibited practices and Annex III Valid from 2026-05-20

    Commission review of the prohibited-practices and Annex III lists; flags a potential gap for AI-generated CSAM and non-consensual intimate content.

    Non-binding · Verified · Official text
  • Danish Act supplementing the AI Regulation Valid from 2025-08-02

    Danish act designating national competent authorities, giving them information and inspection powers and setting fines for Article 5 breaches.

    Binding · Authority: Agency for Digital Government, Datatilsynet, Domstolsstyrelsen · Verified · Official text
  • Digital Omnibus on AI Valid from 2026-07-27

    Amends the AI Act timeline, adds Article 5 prohibitions on non-consensual intimate deepfakes and CSAM-type material, replaces Article 4 and adjusts sandbox and AI Office powers.

    Binding · Authority: European AI Office (European Commission) · Verified · Official text
  • Platform Work Directive Date not recorded

    Gives platform workers transparency about, and limits on, automated monitoring and decision-making systems.

    Legal force not established · Verified · Official text

Obligations

  • Article 5(1) (first subparagraph points (a)-(h))

    The placing on the market, putting into service or use of the listed AI practices is prohibited.

    prohibition · Applies to: other · Artificial Intelligence Act
  • Article 1(7), inserting Article 5(1)(ba) and (bb)

    The placing on the market, putting into service or use of AI systems that generate or manipulate realistic intimate or sexually explicit material of an identifiable person without consent (and the CSAM-type practice in point (bb)) is prohibited.

    prohibition · Applies to: other · Digital Omnibus on AI
  • Section 10(1)(1)

    Infringement of Article 5(1)(a)-(g) of the AI Regulation is punishable by a fine unless a higher penalty applies under other legislation.

    prohibition · Applies to: other · Danish Act supplementing the AI Regulation
  • Article 7(1)(a)

    Digital labour platforms may not use automated monitoring or decision-making systems to process personal data on the emotional or psychological state of a person performing platform work.

    prohibition · Applies to: other · Platform Work Directive
  • § 4

    The Data Protection Ombudsman supervises, as market surveillance authority, compliance with the prohibited AI practices in Article 5 of the AI Act.

    other · Applies to: other · Finland: Act 1377/2025 on the supervision of certain AI systems

Milestones

  • Entry into force of the AI Act Met
    Artificial Intelligence Act
  • Chapters I and II (definitions, prohibitions) apply Met
    Artificial Intelligence Act
  • Governance, GPAI obligations and penalties apply; Member States designate authorities Met
    Artificial Intelligence Act
  • Danish Act 467/2025 enters into force Met
    Danish Act supplementing the AI Regulation
  • Omnibus enters into force Met
    Digital Omnibus on AI
  • General application; Article 50 transparency rules and enforcement start Met
    Artificial Intelligence Act
  • Article 5(1)(ba), (bb), (1a), (1b) prohibitions begin to apply Upcoming
    Digital Omnibus on AI
  • Article 50(2) compliance deadline for generative AI systems placed on the market before 2 August 2026 Upcoming
    Digital Omnibus on AI
  • Platform Work Directive transposition deadline Upcoming
    Platform Work Directive
  • Providers of GPAI models placed on the market before 2 August 2025 must comply Upcoming
    Artificial Intelligence Act
  • National AI regulatory sandbox operational in each Member State Moved
    Digital Omnibus on AI
  • Chapter III Sections 1-3 apply to Annex III high-risk systems Moved
    Digital Omnibus on AI
  • Chapter III Sections 1-3 apply to Annex I (product-embedded) high-risk systems Moved
    Digital Omnibus on AI
  • Delegated acts adding AI health and safety requirements to the Machinery Regulation apply Upcoming
    Digital Omnibus on AI
Claims and evidence (7)
  • Derived: Probable Breach of the Article 5 prohibited-practices list is subject to fines of up to EUR 35 million or 7% of worldwide turnover, whichever is higher.

    Confidence: Confirmed · As of 2 Aug 2025 · evidenced
    Evidence and sources
  • Article 5(1)(ba) and (bb) and Article 5(1a) and (1b) of the AI Act apply from 2 December 2026, which the Commission describes as the ninth prohibition.

    Confidence: Confirmed · As of 2 Dec 2026 · evidenced
    Evidence and sources
    • Regulation (EU) 2026/1744 (Digital Omnibus on AI), Official Journal text T1 · retrieved · retrieved 8 Oct 2026 · Article 1(40)(a), amending Article 113(a) point (a) is replaced by the following: '(a) Chapters I and II shall apply from 2 February 2025, with the exception of Article 5(1), first subparagraph, points (ba) and (bb), and Article 5(1a) and (1b) which shall apply from 2 December 2026;';
    • Regulation (EU) 2026/1744 (Digital Omnibus on AI), Official Journal text T1 · retrieved · retrieved 8 Oct 2026 · Article 1(7), inserting Article 5(1)(ba)(ba) the placing on the market, the putting into service or the use of an AI system that generates or manipulates realistic images, videos, audio or similar material of an identifiable natural person's intimate parts, or of an identifiable natural person engaged in sexually explicit activities, without that person's freely-given, specific, informed, unambiguous and explicit consent for that generation or
    • AI Act - Shaping Europe's digital future T1 · retrieved · retrieved 8 Oct 2026 · Prohibited AI practicesProhibition 9 comes into effect in December 2026 and was introduced as a part of the AI Omnibus.
    • AI Act Service Desk - implementation timeline T1 · retrieved · retrieved 8 Oct 2026 · Timeline item 502 Dec 2026 New prohibitions + Article 50(2) transition apply ** - Prohibitions, for AI systems generating non-consensual sexual deepfakes and child sexual abuse material, start to apply.
  • The Commission published guidelines on prohibited AI practices on 4 February 2025.

    Confidence: Probable · As of 4 Feb 2025 · evidenced
    Evidence and sources
  • Derived: Probable Section 10 of the Danish Act makes infringement of Article 5(1)(a)-(g) of the AI Regulation punishable by a fine, unless a higher penalty applies under other legislation.

    Confidence: Probable · As of 2 Aug 2025 · evidenced
    Evidence and sources
  • Digital labour platforms may not use automated monitoring or decision-making systems to process personal data on a worker's emotional or psychological state.

    Confidence: Confirmed · evidenced
    Evidence and sources
  • The Commission is analysing a potential gap under which AI systems generating CSAM or non-consensual intimate content are not prohibited by Article 5 AI Act.

    Confidence: Confirmed · As of 22 May 2026 · evidenced
    Evidence and sources
    • Report on the review of prohibitions and high-risk AI T1 · retrieved · retrieved 8 Oct 2026 · Main outcomesThe Commission noted and is further analysing a potential regulatory gap regarding AI systems generating child sexual abuse material and non-consensual intimate content, which are currently not prohibited by Article 5 AI Act.
  • The Data Protection Ombudsman supervises Article 5 prohibited practices and Traficom supervises Article 50 transparency obligations in Finland.

    Confidence: Confirmed · As of 1 Jan 2026 · evidenced
    Evidence and sources