Does the EU AI Act Apply to UK Businesses?

Article 2 gives the EU AI Act reach beyond the EU. It covers providers placing AI systems or general-purpose AI models on the EU market, wherever those providers are based. It also covers providers and deployers outside the EU where output from the AI system is used in the EU.

Having an EU customer is therefore an important warning sign, but the legal test still depends on the system, your role, and where its output is used.

• A software company supplying an AI product to EU users.
• A UK employer using AI output to screen candidates for an EU office.
• An online business whose chatbot interacts with people in the EU.
• A consultancy producing AI-assisted decisions or reports that are used by an EU client.

Most ordinary workplace use starts with Article 4 AI literacy. Staff need enough knowledge to use AI appropriately, taking account of the system and context.

Under Article 50, providers must ensure people are told when they interact directly with AI unless that is obvious. A deployer operating a third-party system should verify how the provider's notice is implemented. Hiring, credit, education, healthcare, or other high-impact uses may trigger more demanding high-risk rules.

List every AI system your organisation uses, record where its users and outputs are located, and identify whether you are a provider or deployer for each one. Then check the duties attached to each use case.