Skip to content
Cardan-AI
Back to news
AI Regulation10 September 2026

AI Act: the real deadline for aviation lands in August 2027, not 2026

The EU AI Act's most-discussed deadline (2 August 2026) does not apply to AI embedded in a product already covered by sectoral law. For a flight-critical system certified by EASA, the real obligation lands a year later, on 2 August 2027 — and it is heavier, not lighter.

2 August 2026 has absorbed most of the media attention around the EU's AI Act: that is the date that triggers obligations for standalone high-risk AI systems listed under Annex III (recruitment, credit scoring, biometrics). A quieter deadline directly shapes the aerospace industry instead: 2 August 2027.

According to the implementation timeline published by artificialintelligenceact.eu, Chapter III, Sections 1 through 3 of the regulation apply on that date to high-risk AI systems falling under Article 6(1) and Annex I — AI embedded as a safety component in a product already covered by EU sectoral legislation: aviation, machinery, medical devices. The legal basis for this later date is Article 113(c) of the regulation.

That extra year is not regulatory leniency. For a vendor selling a standalone scoring tool, AI Act compliance is largely a self-contained CE-marking and self-assessment exercise. For an airframer or equipment maker whose AI system is a safety component of an EASA-certified aircraft, compliance has to be built into an existing certification regime — its own notified bodies, its own technical documentation, its own calendar — two administrative regimes that must be reconciled on a single product.

Cardan-AI's read: this two-track calendar is a reason for aerospace compliance and program teams not to conflate regulatory tracks. The headline deadline is, for aviation and medtech, neither the nearest one in practice nor the simplest to clear. The real countdown starts now, not in 2026.

Analysis by

Cardan-AI Intelligence

Our research and analysis unit, dedicated to applied AI for business, industry and regulatory compliance.

Let's talk about your next competitive edge

Thirty minutes to identify the two or three use cases in your operations that pay for themselves within the first year.