On 2 August 2026, the operator provisions of the European Union Artificial Intelligence Act enter into application. Any organisation deploying an AI agent within the single market will carry ongoing obligations for oversight, logging, and human intervention. Most will not be ready. This publication exists to make the text legible, the dates visible, and the liability structure citable.
The Act does not activate on a single day. It arrives in waves, and operator liability is the second wave. Miss any of these and the obligation accrues regardless of awareness.
The European supervisor outlines first positions on underwriting agentic AI exposure.
Article 26 begins to bind any person or entity deploying a high risk AI system in the Union.
Record keeping, human oversight, and incident reporting must be operational and auditable.
Long form pieces on Article 26, the Revised Product Liability Directive, and the documentation operators need to hold on file when the provisions enter application.
101 days remain before the 2 August 2026 deadline. This is the operational deliverable: a week-by-week checklist from today to 22 July, a neutral template structure mapped to Art. 27(1)(a)-(g), a DPIA alignment table, and a plain account of the supervisor notification duty that determines whether deployment on 2 August is lawful.
Article 27 requires public bodies, providers of public services, and deployers of creditworthiness or insurance risk systems to complete a seven-element FRIA before first deployment. This guide sets out who must comply, what the document must contain, and how it relates to the GDPR DPIA obligation.
Which authority will conduct deployer enforcement inquiries, how the penalty tiers under Article 99 are calculated, and what triggers a supervisory investigation from August 2026.
What Article 14 requires providers to build and deployers to staff. The five functional capabilities, the competence and authority requirements of Article 26(2), and the minimum documentation set.
A reading of EIOPA's AI governance opinion and how its supervisory expectations map onto the operator obligations in the EU AI Act, with implications for insurers and deployers.
A close reading of Article 13 and the transparency obligations it places on providers of high-risk AI systems, with a guide to the information operators must pass through the deployment chain.
Directive 2024/2853 makes AI software a product subject to strict liability. A guide to the rebuttable presumptions, the expanded damage types, and what operators must do before December 2026.
When an AI agent causes harm, at least three parties may have contributed. A structured reading of how the EU AI Act and Product Liability Directive allocate responsibility across the chain.
A practical breakdown of the Chapter III duties, the human oversight standard, and the documentation an operator must hold on file when the provisions enter application on 2 August.
The deployer of a high risk AI system shall take appropriate technical and organisational measures to ensure that they use such systems in accordance with the instructions for use.Article 26(1), Regulation (EU) 2024/1689 · The AI Act
The AI Act is often discussed in the language of prohibition and risk classification. Operator liability sits in a quieter register. It is procedural, continuous, and cumulative. It applies from the moment a system is put into service inside the Union, and it does not distinguish between in house deployments and third party agents operating under contract.
Three interpretations have hardened over the past six months. First, the deployer's duty to monitor outputs cannot be delegated to the provider through a terms of service. Second, human oversight under Article 14 is a design requirement, not a run time option. Third, fundamental rights impact assessments under Article 27 are expected for any public body and for any private deployer operating in the sectors listed in Annex III.
This publication tracks those interpretations as they cross from academic commentary into supervisory practice. Each piece is dated, footnoted to the text, and maintained as the Commission and national authorities issue guidance.
When an AI agent causes harm, three parties carry different standards of obligation. The Act binds the deployer to procedural duties; the revised Product Liability Directive binds the provider of a defective product; the affected party receives a rebuttable presumption in their favour.
Designs the AI system and places it on the Union market.
Puts the system into service in the course of a professional activity.
Natural or legal person who experiences harm traceable to the system.
Agent Liability EU sits inside a network of five sister publications covering the regulatory, certification, and insurance dimensions of autonomous AI agent deployment.
A published framework from Future Proof Intelligence for assessing autonomous AI agent deployments. Seven dimensions. Independent. Continuously maintained.
Read the framework