EU AI Act Checklist for Austrian Companies

Does the EU AI Act apply to my Austrian company?

Yes — the EU AI Act applies to all companies that offer or use AI systems in the EU, regardless of company size. Even if you only use tools like ChatGPT, Microsoft Copilot, or Google Gemini, you are classified as a "user" of an AI system under the law and have transparency and documentation obligations.

Which deadlines should SMEs know?

The key deadlines: February 2025 — prohibited AI practices are banned (social scoring, manipulation, mass biometric surveillance). August 2026 — high-risk AI systems (Annex III) must meet all requirements. 2027 — remaining requirements for embedded systems. Transparency obligations (AI labelling, chatbot notices) already apply now.

What are the penalties for non-compliance?

The EU AI Act provides for fines of up to €35 million or 7% of global annual turnover (depending on the violation). There are proportionate rules for SMEs — but the basic requirements (transparency obligations, prohibition of banned practices) apply without exception. Early compliance protects against reputational damage.

Does our CRM / ERP with AI features fall under the AI Act?

It depends on the function. Standard software with rudimentary AI recommendations (sorting, filtering) usually falls under "minimal risk" with hardly any obligations. AI functions that make automated decisions about people (e.g. credit checks, personnel selection) can be classified as high-risk. We are happy to help with the classification.

How does the EU AI Act differ from GDPR?

GDPR regulates the handling of personal data. The EU AI Act regulates AI systems by risk — even when no personal data is processed. Both frameworks overlap: AI systems that process personal data must meet both requirements. The AI Act additionally adds transparency obligations, technical documentation, and conformity assessments.