The rules in order
Since August 2026 the AI Act asks three things of virtually every business that uses AI: an overview of which tools are running, a policy on who may do what, and staff who demonstrably know the risks. That sounds heavier than it is. A register, a policy document and an hour-and-a-half session cover it for most businesses.