New compliance obligations take effect in August
US companies operating in the European Union face a rapidly closing compliance window as the EU AI Act's next phase of enforcement begins August 2, 2026. The legislation requires companies to inventory their AI systems, classify them by risk level, and implement data governance controls. Penalties for non-compliance can reach 7% of global annual revenue, creating pressure on corporate boards to act.
Colorado leads US state-level AI regulation
On June 30, Colorado's AI Act began enforcement, making it the first US state to implement comprehensive AI regulation. The law requires disclosure of training data sources, including whether datasets contain protected intellectual property or personal information. The "AI Sunshine Act," signed in August 2025, delayed the original February enforcement date to give companies additional preparation time.
AI literacy obligations already in effect
Many US companies have already missed the EU's AI literacy requirement, which mandates that organizations deploying AI systems ensure their staff understand the technology's capabilities and limitations. Legal experts warn that the combination of EU and state-level regulations creates a compliance maze that will require dedicated governance teams and significant investment in documentation systems.