EU AI Act update, 9 May 2026: current law remains the baseline. The Digital Omnibus provisional agreement would move many high-risk AI obligations to 2 Dec 2027 and product-integrated high-risk AI rules to 2 Aug 2028 if formally adopted. Track status EU AI Act update: current law remains the baseline. Digital Omnibus dates apply only if formally adopted. Track status

Blog · March 2026 · 8 min read

IMPLEMENTATIONConfirmed deadline with uneven national readiness

AI Regulatory Sandboxes Under the EU AI Act: 2026 Baseline and Digital Omnibus Update

Sandbox timing watch

The current published EU AI Act timeline requires Member State AI regulatory sandboxes by 2 August 2026. The official 7 May 2026 Digital Omnibus provisional agreement would postpone the sandbox establishment date to 2 August 2027 if formally adopted and published. Treat both tracks separately when planning SME access, national authority monitoring, and evidence preparation.

Regulatory update

Current law remains the baseline. The Digital Omnibus provisional agreement is a provisional planning track.

The 7 May 2026 Digital Omnibus provisional agreement would postpone many Annex III high-risk AI obligations to 2 December 2027 and product-integrated high-risk AI rules to 2 August 2028 if formally adopted and published. Article 50 transparency, AI literacy, prohibited-practice, and other 2026 duties still require separate review. Continue inventory, role classification, vendor evidence, Article 50 trigger review, and evidence-file preparation until final legal text confirms the amended schedule.

Executive Summary

Current law still points to an AI regulatory sandbox establishment route under Regulation (EU) 2024/1689. The official 7 May 2026 Digital Omnibus provisional agreement would move the national sandbox establishment deadline to 2 August 2027 if formally adopted and published.

For SMEs, the practical question is now two-track: monitor 2026 sandbox readiness under current law, but plan for a possible 2027 operationalisation route while final adoption and publication remain pending.

European innovation lab with startup founders, regulator observers, and product engineers testing AI systems inside a controlled compliance sandbox
The sandbox question is moving from policy concept to implementation requirement.

What the law requires

Article 57 is still part of the current published AI Act baseline. The 7 May 2026 provisional agreement would postpone the deadline for national competent authorities to establish AI regulatory sandboxes until 2 August 2027. That later date should be treated as provisional-agreement planning content, not binding law, until formal adoption and publication are complete.

That gives Member States more implementation time if the agreement is adopted. It does not remove the need for SMEs to map candidate systems, evidence questions, testing safeguards, and regulator-facing documentation.

Why Article 58 matters for SMEs

Article 58 deals with the detailed arrangements. For SMEs, three points matter commercially:

Startup compliance team reviewing sandbox application workflow, testing protocol, and evidence outputs with regulators on screen
The best sandbox use case is not PR. It is faster learning, better evidence, and less conformity waste.

What is happening at EU level

The Commission has already run consultation on a draft implementing act that will set common rules for how sandboxes are established and operated. That is the governance layer you should monitor because it affects access conditions, process design, and how comparable sandboxes become across the Union.

The EDPS has also disclosed an AI Sandbox pilot for EU institutions. That does not solve Member State rollout, but it is a signal that supervisory bodies are already testing sandbox capacity and methods in practice.

What SMEs can actually do now

ActionWhy nowWhat to prepare
Map the system use caseSandboxes are for concrete systems, not abstract “AI strategy”.Purpose, users, data, risk tier, expected benefits.
Define the test questionRegulators need to see what compliance uncertainty the sandbox helps resolve.Specific regulatory unknowns, metrics, safeguards, and stop criteria.
Build an evidence packSandbox participation should generate reusable conformity and governance evidence.Technical docs, risk analysis, human oversight design, logging approach.

Founder recommendation

EU AI Compass should not position sandboxes as a mass-market shortcut. They are still implementation-stage instruments. But you should publish and productise sandbox readiness content now because SMEs will need a way to decide whether applying is worth the effort.

Use the Compliance Checker for risk triage and the Local FRIA Generator to start building the evidence base that a sandbox application is likely to need.

FAQ: AI regulatory sandboxes after the Digital Omnibus agreement

Did the sandbox deadline already move to 2 August 2027?

Not as final law yet. The current published EU AI Act remains the baseline, while the 7 May 2026 Digital Omnibus provisional agreement would move the sandbox establishment date to 2 August 2027 if formally adopted and published.

Should SMEs wait for the final sandbox date before preparing?

No. SMEs should still maintain a basic evidence file: AI system purpose, owner, vendor, data categories, risk assumptions, human oversight, testing notes, and the reason a sandbox route may be useful.

About the author: Abhishek G Sharma is the founder of Move78 International Limited.

Disclaimer: This page is educational and operational guidance only. It is not legal advice. Published: March 2026. Last reviewed: 9 May 2026.

Official sources checked

Need More Practical Guidance?

Explore the free EU AI Compass tools and guides to classify your use case, understand your obligations, and move to the next compliance step.

Source basis

Update context: Sandbox page updated in Wave 1 P0 to reflect the provisional 2 August 2027 sandbox planning date while preserving current-law distinction.

Source basis: Regulation (EU) 2024/1689, Article 57, Article 58, Article 113, European Commission press release IP/26/1024, and the Council 7 May 2026 provisional-agreement release.

Digital Omnibus status: Sandbox establishment date may move to 2 August 2027 if the provisional agreement is formally adopted and published.

Use limit: This page is for educational and operational planning only. It is not legal advice, a conformity assessment, certification, or a compliance guarantee.