AI transparency on August 2, 2026: the obligation SMBs think was delayed already applies

On August 2, 2026, in just a few days, the AI Act transparency obligations enter into application. Many SMB leaders believe everything was pushed to 2027. It was not, and that confusion will cost those who let it settle in.

The Digital Omnibus, voted on June 16, 2026 and still pending Council adoption, delayed the heaviest obligations, those for high-risk systems, to December 2, 2027. That delay created a stubborn misunderstanding. In my conversations with leaders, many concluded the AI Act no longer concerned them for another two years. Yet the transparency obligations were not delayed.

Concretely, from August 2, 2026, three rules apply. A customer-facing chatbot or conversational agent must clearly disclose that it is a machine. AI-generated content, images, text, audio, deepfakes, must be identifiable as such. Emotion recognition or biometric categorization systems must be flagged to the people concerned. These obligations touch uses already common in SMBs, the website chatbot, generated marketing visuals, automated replies. The European AI Office, operational on August 1, 2026, oversees enforcement. The Digital Omnibus also extended certain facilities, sandboxes and lighter documentation, to companies under 750 employees, but a documentation facility never exempts anyone from the transparency obligation itself.

The real obstacle is not legal, it is organizational. Between 40 and 60% of real AI usage in SMBs escapes the IT department (shadow AI, field observation), and 80% of SMBs have no documented AI governance (nachnouchi.com). In other words, most leaders do not know where AI generates customer content inside their own company. You cannot label what you have not mapped, nor disclose a chatbot whose existence no one has formalized.

This is exactly what the Inventory step of the IMPACT method addresses, in week 1, listing every AI use, declared and invisible, before any compliance work. It feeds the security and sovereignty pillar of my engagements, where compliance is not a legal document produced after the fact but the direct consequence of an honest map of real usage.

Delaying high-risk systems to 2027 does not touch transparency. SMBs that wait until 2027 to act misread the calendar by two years, and will restart in 2027 with a lag rather than a lead. A TransformAudit diagnostic maps your AI uses and your compliance gaps in five business days.