EU AI Act for Marketing Teams: What You Need to Know Now

The EU AI Act: The World's First AI Law Affects You Too

The EU AI Act entered into force on August 1, 2024 – the world's first comprehensive law regulating artificial intelligence. For marketing teams, this means: new obligations, new risks, but also new opportunities for responsible AI use.

Key facts:

Applies to all companies using or offering AI in the EU
Violations can be fined up to €35M or 7% of global annual revenue
Various provisions take effect in stages between 2025 and 2027
Marketing AI typically falls into "minimal" or "limited risk" categories

Timeline: When Does What Apply?

February 2025: Prohibited Practices

Certain AI practices are now banned:

Subliminal manipulation techniques
Exploitation of vulnerabilities (age, disability)
Social scoring by authorities
Emotion recognition in the workplace (with exceptions)

August 2025: GPAI Rules

Rules for General Purpose AI models take effect:

Documentation requirements for model providers
Transparency about training data
Copyright compliance

August 2026: High-Risk Systems

Full compliance requirements for high-risk AI:

Risk management system
Quality management
Technical documentation
Human oversight

Risk Classification: Where Does Marketing AI Stand?

🔴 Prohibited (Unacceptable Risk)

Subliminal manipulation for purchases
Dark patterns forcing purchase decisions
Targeting addiction-prone persons

🟠 High Risk

AI for personnel recruitment
AI for creditworthiness assessment

🟡 Limited Risk

Chatbots and virtual assistants → Transparency requirement
AI-generated content (deepfakes) → Labeling requirement
Emotion recognition systems → Consent requirement

🟢 Minimal Risk

Content generation (text, images)
Personalization
Recommendation systems
Analytics and reporting

Checklist 1: Check for Prohibited Practices

Check Point	Status
Do you use AI with subliminal manipulation?	☐ No
Do you deliberately target vulnerable groups?	☐ No
Do you use social scoring for customer classification?	☐ No
Do you use emotion recognition without consent?	☐ To check

Checklist 2: Transparency Requirements

For Chatbots

Requirement	Implemented?
Users are informed they're interacting with AI	☐
Information is provided BEFORE interaction	☐
Information is clear and understandable	☐

Example:

"I'm an AI assistant and happy to help you."

For AI-Generated Content

Requirement	Implemented?
Synthetic images are labeled	☐
Deepfake videos are marked as such	☐
AI texts are disclosed when needed	☐

Checklist 3: Create AI Inventory

Tool/System	Provider	Risk Class	Transparency Met?
ChatGPT	OpenAI	Minimal	☐
Midjourney	Midjourney	Limited	☐
Chatbot	Provider	Limited	☐

Checklist 4: Provider Compliance

Question for Provider	Answer
Is the system EU AI Act compliant?
Which risk class assigned?
What transparency measures?
Is there an EU representative?

Checklist 5: Governance Framework

Responsibilities

Role	Person
AI Compliance Officer
Legal/Privacy
Marketing Lead

Processes

Process	Status
New AI tools: Compliance check before introduction	☐
Regular review of existing tools	☐
Incident response for AI incidents	☐
Documentation requirements	☐

Checklist 6: Compliance Timeline

By August 2025

AI inventory fully created
Transparency requirements for chatbots implemented
GPAI provider compliance checked

By August 2026

All transparency requirements implemented
Regular audits implemented
Team fully trained

Penalties

Violation Type	Maximum Fine
Prohibited AI practices	€35M or 7% revenue
High-risk violations	€15M or 3% revenue
False information	€7.5M or 1.5% revenue

Conclusion

The EU AI Act isn't a burden – it's an opportunity for responsible AI use and competitive advantages through compliance.

Next step: Create your AI inventory as the foundation for all further compliance measures. Deepen your knowledge with our AI Governance Guide, the practical guide on AI Safety in Marketing, and the complete AI Compliance Guide for Marketing 2026.

EU AI Act Compliance Regulation AI Governance DSGVO Legal