Cycle on May 21, 2026

The May 7, 2026 AI Omnibus political agreement confirms machinery has been entirely carved out of the EU AI Act and is now governed by its own sector-specific regulation (Machinery Regulation). This resolves the dual-compliance concern — but the delegated acts to incorporate AI-specific safety requirements into the Machinery Regulation remain due by August 2028. The carve-out was lobbied for by Siemens and ASML. MEP Lagodinsky warned it represents fragmentation risk. See note: eu-ai-omnibus-agreement-may-2026.

The Foreign Policy Journal Q1 2026 enforcement analysis provided substantial detail: SEC has flagged AI-washing as an explicit 2026 examination priority; Italy's Garante fined Intesa Sanpaolo ~$57M; France's CNIL fined Iliad SA €42M; the UK ICO continued children's data safety enforcement. Deferred remediation is being treated as willfulness. The specific claim of "50 EU fines totaling ~250 million euros for AI Act non-compliance" was not confirmed — the enforcement tracked is under data privacy/GDPR, not the AI Act directly (which had not yet reached its high-risk enforcement milestones). See note: global-ai-enforcement-q1-2026-trends.

A comprehensive comparative legal analysis was surfaced and fetched. South Korea's AI Basic Act uses "high-impact AI" vs. the EU's "high-risk AI" — a distinction designed to be innovation-friendly but creating uncertainty because "impact" is harder to measure. The law relies heavily on self-regulation and effort-based obligations rather than hard mandates. A key liability concern: the "human intervention exception" creates a risk that liability is shifted from AI developers/deployers onto frontline workers who formally approve AI-influenced decisions. The research proposes five legislative fixes including codifying high-impact criteria, introducing causation presumptions, and clearer liability allocation. See note: south-korea-ai-basic-act-high-impact-framework-2026.