--- source_url: "https://www.opsintel.io/?utm_source=openai" title: Ops Intel — AI Compliance · Worldwide mirrored_at: 2026-08-29T03:02:33.958Z host: www.opsintel.io cited_in_42a: true mirror_canonical: "https://index.42a.ai/www.opsintel.io/index__q__utm_source_openai" --- > **Original source:** https://www.opsintel.io/?utm_source=openai EU AI Act: GPAI obligations now in force  ·  Enforcement begins August 2026 ## Your AI is either an Asset or a Liability. _We make sure it isn't a Fine._ The EU AI Act is enforced from August 2026. UK GDPR is already active and the ICO is enforcing. We build your compliance framework in plain English, specific to how your business actually uses AI. **Fixed price. Plain English. No lock-in.** Live exposure check Your market Ready Tick what your business actually does. 0 regulations apply to you Nothing selected — tick one above and watch. [See the full result, with deadlines →](https://www.opsintel.io/ai-risk-checker/) The Mission ## Global. Straightforward. No nonsense. "I started Ops Intel because I watched too many good businesses use AI tools without any compliance framework — and assume that because nothing had gone wrong yet, nothing would." "The ICO doesn't need a new law. UK GDPR already covers AI. Most businesses are non-compliant and don't know it. That's the problem I built Ops Intel to fix." "We get you compliant first. Then visible. Then running your AI team. In that order — because that's the only order that makes sense." [Let's Have a Conversation →](https://cal.com/opsintel/30min) 01 **Compliance**UK GDPR, EU AI Act, US & Canada — built for how your business uses AI 02 **SEO**Found in Google and traditional search — the foundations still matter 03 **GEO**Recommended by ChatGPT, Perplexity & Google AI 04 **Your AI team**122+ AI team members handling the admin, built and managed for you ## Most businesses using AI are already non-compliant. _Here's what that costs._ The ICO doesn't need a new AI law. UK GDPR already applies to every AI system that processes personal data. If you have EU customers, the EU AI Act is live. If you use AI in US hiring decisions, state law already applies. Regulators issued their first AI-specific fines in Q1 2026 — and the amounts aren't trivial. 🇪🇺 EU — AI Act €35m Maximum fine for non-compliance with the EU AI Act for prohibited AI practices. GPAI (general-purpose AI) obligations are already in force. High-risk AI deadlines land December 2027. Your exposure todayHigh & rising EU AI Act 2024 · GDPR 🇬🇧 UK — ICO £17.5m Maximum fine under UK GDPR for organisations that fail to protect personal data — including data processed by AI tools. The ICO is actively investigating AI systems right now. UK GDPR · Data Protection Act 2018 🇺🇸 US — State Laws $10k+ Per violation under Texas and Illinois AI laws. US state AI legislation is accelerating — with consumer protection fines that compound per affected individual. Texas HB 149 · BIPA ⚠️ If you use ChatGPT with client data, you are **already non-compliant** under UK GDPR without a lawful basis and a Data Processing Agreement. ⚠️ If you have EU customers and use any AI tool, the EU AI Act **already applies to your business** — regardless of where you're based. ⚠️ Most compliance policies online are **generic templates** that won't protect you. A policy must be specific to how your business actually uses AI. ## This is the thing itself. Not a picture of one. A genuine UK + EU Combined Compliance Framework, produced by the same system that will produce yours, for a fictional firm of solicitors we invented to test it. Written around what that firm actually does with AI — which is why it is long, and why a template could never have been. [Read it page by page](https://www.opsintel.io/ai-compliance/#pack-sample) ### Europe - Aug 2025 in force Obligations for general-purpose AI models. - Aug 2026 in force Article 50 transparency duties, deployer obligations, and enforcement powers for national regulators. - Dec 2026 coming New prohibitions, and Article 50(2) marking of synthetic content. - Aug 2027 coming Every Member State must have an AI regulatory sandbox running. - Dec 2027 coming High-risk obligations for Annex III systems — including AI used in recruitment, credit scoring, education and essential services. - Aug 2028 coming High-risk obligations for Annex I systems — AI embedded in products already covered by EU product safety law. ### United Kingdom - Feb 2026 in force Most Part 5 data protection provisions of the Data (Use and Access) Act 2025, including the wider lawful bases for solely automated decisions and the safeguards that come with them. - Jun 2026 in force The duty on controllers to operate a complaints procedure and respond to data protection complaints within set time limits. ### United States - Jan 2026 in force Texas HB 149, the Responsible Artificial Intelligence Governance Act — prohibited uses, government AI disclosure, and Attorney General enforcement. - Aug 2026 in force California SB 942, the AI Transparency Act — free AI detection tool and latent provenance disclosure for large generative AI providers. Delayed from 1 January 2026 by AB 853. - Jan 2027 coming Colorado SB 26-189 — developer and deployer duties for automated decision-making technology used in consequential decisions. It repealed and reenacted SB 24-205, which never took effect. ### Canada - Jan 2026 in force Ontario ESA / O. Reg. 476/24 — a publicly advertised job posting must disclose the use of AI to screen, assess or select applicants. Employers of 25 or more, including where a third party screens on their behalf. ### Australia - Dec 2026 coming Privacy Act 1988 (Cth), APP 1.7 — a privacy policy must say what kinds of personal information a computer program uses to make decisions that could reasonably be expected to significantly affect a person, and what kinds of decisions those are. ### United Arab Emirates - Sep 2023 in force DIFC Data Protection Regulation 10 — a business deploying an autonomous or semi-autonomous system that processes personal data must tell users, on first use, what the system decides for itself, what it was built to do and what it does with the output. United Kingdom UK GDPR in force · DUAA from 5 Feb 2026 European Union AI Act · enforcement 2 Aug 2026 United States State by state · Texas from 1 Jan 2026 Canada PIPEDA · no federal AI statute UAE DIFC Reg 10 since 1 Sep 2023 Singapore Japan AI Act in force · no penalties Australia Automated decisions 10 Dec 2026 New Zealand Full coverage — frameworks written to this law Also served, on request - United Kingdom UK GDPR, in force now. The Data (Use and Access) Act added automated-decision duties from 5 February 2026. - European Union The EU AI Act. General-purpose AI obligations already apply; enforcement begins 2 August 2026. - United States State by state, not federal. Texas from 1 January 2026, California from 2 August 2026, Colorado from 1 January 2027. - Canada PIPEDA plus provincial law. Ontario's AI hiring disclosure rules applied from 1 January 2026. In a client's words ## What it's like to work with us. > Before Scott got involved, our website was embarrassing — it wasn't doing us any favours. He rebuilt it completely, built us a custom property valuation tool that we're now rolling out to clients, and sorted out our AI compliance so we're covered on the data side. He also set up automations that have taken a few of the repetitive jobs off our plate. > > What I found different about working with Scott is that he actually explains what he's doing and why it matters — he doesn't just disappear and come back with something. The valuation tool in particular is something clients have already noticed, and that's the kind of thing that helps us stand out in a competitive market. > > If you're an estate agent thinking about your digital setup or your AI compliance, I'd go to Scott first. Jonathan Stawart Founder, Our Agents · Northumberland - AI compliance framework - Website rebuild - Custom valuation tool - Workflow automation Frequently Asked Questions ## Everything you need to know. If your business uses any AI tools — ChatGPT, Copilot, automated emails, AI-powered customer service — then yes, you should have one. The EU AI Act introduces obligations that extend to UK businesses, and regulators are increasingly scrutinising how companies use AI with customer data. We produce a bespoke AI compliance policy written in plain English — specific to how your business actually uses AI, not a generic template — so you're protected before anyone comes asking. AI policy documents start at £197, fixed price; full compliance frameworks from £797 per year — covering you for 12 months with legal updates included, renewing yearly. Our AI team Starter plan is £197/month for up to 2 active AI team members, full setup, and ongoing monitoring; Growth is £497/month for up to 5 plus a custom AI assistant. AI team plans have a 3-month minimum then roll monthly with no lock-in. Compliance frameworks are delivered fast; AI team members are live within a week of your discovery call, thanks to our library of 122+ pre-built blueprints. And you need no technical knowledge at all — we build it, test it, and hand it over ready to run. No coding, no logins to learn. More questions? [Read our full FAQ →](https://www.opsintel.io/faq/) ## Nobody gets a warning first. _They get a complaint, and then an investigation._ The ICO is enforcing now. The EU AI Act deadlines are live. And most businesses using AI have nothing to hand over when someone asks — no policy, no record of which tools their staff are using, nobody named as responsible for any of it. You can spend the next year learning AI law yourself — or hand it to us for a fraction of the cost of a junior hire. In 30 minutes we'll show you exactly where you're exposed, where you're invisible to AI search, and what your AI team should take on first. No obligation. No hard sell. Just certainty. [Claim Your Free Audit →](https://cal.com/opsintel/30min) Free 30-min call Compliance review included No obligation UK, EU, US & Canada covered