6 min read
Weeks before the biggest compliance deadline in the AI world was due to land, Brussels blinked. The European Union has agreed to overhaul parts of its landmark AI Act, pushing enforcement of the high risk rules that were scheduled for August 2, 2026 out to December 2, 2027, and widening the compliance relief available to smaller businesses along the way. If you run a one person business far from Europe, it is tempting to file this under “someone else’s problem.” That would be a mistake. The AI Act is quietly shaping the tools you already use, the vendors you buy from, and the disclosures your customers will start expecting everywhere. The delay also hands small operators something rare: time to get ahead of a regulation instead of scrambling behind it. Here is what actually changed, what still applies right now, and a one hour routine that keeps your solo business comfortably on the right side of where the rules are heading.
What Actually Changed in Brussels
The high risk deadline moved sixteen months
The AI Act sorts AI systems into risk tiers, and its strictest requirements target high risk uses: things like biometrics, critical infrastructure, education, and employment decisions. Those obligations were due to bite on August 2, 2026. Under the newly agreed revisions, reported by Travers Smith and analyzed by Fisher Phillips, enforcement for these high risk categories shifts to December 2, 2027. The most watched example is hiring: if a business uses AI to screen, rank, or match job candidates, those tools sit squarely in the high risk category, and the compliance clock for them just gained sixteen months.
Small business relief got wider
The Act always promised lighter treatment for small and medium sized enterprises, including simplified technical documentation and penalties proportionate to company size. The revisions extend several of those accommodations to a broader group of companies, including what the EU calls small mid caps. For truly tiny businesses the direction of travel is friendly:
- Simplified documentation pathways instead of enterprise grade paperwork
- Proportionate penalties that scale with company size
- Less prescriptive quality management requirements for smaller providers
What is already in force stays in force
The delay applies to the high risk timetable, not to the whole law. The Act’s bans on unacceptable practices, its AI literacy expectations for organizations using AI, and the transparency rules that have been phasing in since 2025 remain in effect, as tracked by the EU AI Act resource hub and the European Commission’s own AI Act overview. The practical core for small operators has not moved: know what your AI tools do, be honest with people when they are interacting with AI, and keep a human accountable for decisions that affect people.
What This Means for a Business of One
Almost every solo business is a deployer of AI rather than a builder of it, and the Act weighs deployers far more lightly than providers. Your exposure depends on which of three buckets you fall into.
If you simply use general purpose tools like ChatGPT, Claude, Canva, or an AI email assistant, your obligations are the lightest: use the tools competently, do not present AI output as something it is not, and make sure customers know when they are talking to a bot rather than to you.
If you use AI to evaluate people, the stakes rise. Screening freelancer applications with an AI ranker, filtering tenants, or grading students all brush against the high risk category. The deadline moved, but the expectations are published and vendors are already building toward them.
If you sell AI features, even as a solo SaaS founder, watch the provider obligations and lean on the simplified SME pathways. Building your documentation habits now, while they are cheap, beats retrofitting them under deadline pressure later.
Here is a one hour compliance check that covers the sensible ground:
- Inventory your AI. List every AI tool in your business in one document, with what data each one touches. Fifteen minutes.
- Flag people decisions. Mark anything that screens, scores, or monitors humans. This is your only genuinely regulated zone. Five minutes.
- Check your vendors. Visit the trust or compliance page of each flagged vendor and note what they say about the EU AI Act. Twenty minutes.
- Disclose your bots. Add a plain sentence wherever customers chat with AI, something like “You are chatting with our AI assistant.” Ten minutes.
- Diary it. Set a quarterly reminder to refresh the list. Five minutes now, future you says thanks.
Why a Delay Is Not a Free Pass
Compliance analysts are giving businesses blunt advice about this reprieve: do not assume the extra time makes the work optional, and treat prudent preparation as if the earlier deadline still mattered. There are three practical reasons for a solo owner to care.
First, your vendors will comply early. Major AI products are built for the strictest market they serve, and the EU is usually it. Features, defaults, and documentation will shift ahead of the deadline, so the rules will reach you through your tools regardless of where you live.
Second, trust is becoming a marketing asset. Surveys keep finding customers wary of businesses that use AI carelessly. A short, honest AI policy on your site, one paragraph about what you use and how you supervise it, costs nothing and quietly differentiates you from competitors who hide the ball.
Third, habits are cheaper than projects. The one hour routine above is trivial today because you have a handful of tools. Do it annually from now on and you will never face a compliance “project” at all, while larger competitors burn consultant hours reconstructing what they bought and why.
One caveat belongs in plain sight: this article is general information for busy owners, not legal advice. If your business touches hiring tools, biometric data, or EU customers at meaningful scale, an hour with a lawyer who knows the Act is money well spent.
Four Calendar Entries That Cover You
- This week: run the one hour compliance check above and save the inventory somewhere you will find it again.
- This month: add the AI disclosure line to any chatbot or automated email your customers touch, and draft the one paragraph AI policy for your site.
- This quarter: if you use any tool that screens or scores people, email the vendor and ask for their AI Act readiness statement in writing.
- Every January: refresh your AI inventory and skim one reputable AI Act tracker for what changed. Fifteen minutes a year is enough at solo scale.
The Rare Gift of Extra Time
Regulators just handed every small business sixteen extra months on the toughest parts of the world’s most influential AI law, and expanded the small business accommodations on top. Most owners will spend that gift ignoring the topic entirely. The smarter play takes one hour this week and fifteen minutes a quarter after that, and it turns a looming obligation into a trust signal your competitors do not have. Where does your business sit in the three buckets above? Figure that out this week, and for plain English coverage of how AI rules and tools keep evolving for one person businesses, keep SoloAITool on your reading list.
