When the Digital Omnibus agreement landed in May, the headlines were reassuring: the AI Act’s high-risk obligations had been pushed back. Boards exhaled. Compliance programs were quietly stood down. The assumption – entirely understandable, and almost universally wrong – was that the whole regulation had been given more runway.
It hasn’t. Article 50 was not included in that postponement. It takes effect on 2 August 2026, exactly as written. And the fines that back it – up to €15 million or 3% of global annual turnover – land on the same date. For most enterprises, this is the deadline that slipped through the gap.
What Article 50 requires
Article 50 is a specific part of the EU AI Act, not a global law. However, it can apply to businesses outside the EU if they develop AI tools used by people in the EU or if their AI-generated content is directed at EU citizens.
Article 50 is not about high-risk AI. It is a horizontal transparency obligation that applies regardless of how your systems are classified. In plain terms, it covers four situations – The first of these is where most enterprise AI deployments sit. And it is where most enterprises are not yet ready:

The blind spot: your AI agents
Over the last two years, AI agents have proliferated across the enterprise faster than anyone has tracked them. Customer service bots, HR assistants, IT helpdesk agents, onboarding flows. Many interact directly with employees, customers or members of the public, which puts them squarely in scope of Article 50.
Here is the problem. Most organizations cannot answer the questions a regulator would ask:
If your answer to any of those is “we think so” or “we’d need to check,” that is not a compliance position. That is a liability.
The governance gap nobody planned for
Most compliance programs were built around the high-risk classification framework. When the Omnibus moved those deadlines, the program moved with them. But Article 50 was never part of that framework; it rode along on the same calendar date by coincidence. When the high-risk date shifted, Article 50 stayed exactly where it was.
The agents most likely to trigger Article 50 are also the ones least likely to have gone through a formal governance process. They were built by a team, spun up in a business unit, deployed through a platform that made it easy not to think too hard. You cannot evidence disclosure obligations for agents you do not know you have.
Get a single vendor-neutral AI agent inventory
VOSS AI Agent Management gives you a single, vendor-neutral inventory of every AI agent in your estate – catalogued automatically from telemetry, without manual registration. Per-agent activity visibility. An audit trail of every interaction. Governance controls enforced consistently across your entire agent population, regardless of platform. When a regulator asks what your agents are doing, you have an answer – not a best guess, but an evidenced, auditable one. With August 2nd approaching, that kind of visibility is worth having sooner rather than later, and it doesn’t require a full re-platform to get there.
Get in touch to find out more.
Keep up to date with our latest blogs and subscribe today



