Law explained

Does the AI Act apply to my small business? Honestly: partly.

The AI Act is written mostly for AI developers and high-risk users. A bakery with a chatbot is neither. Here’s the realistic picture for a small business in 2026.

You’re a “deployer”

If you use AI tools professionally (chatbot, image generator, writing assistant), the Act calls you a deployer. Deployer duties are light — unless you’re in high-risk territory (hiring decisions, credit scoring, biometric systems…), which most SMEs are not.

What actually applies to most SMEs: Article 50

• Chatbot? → disclosure notice (50(1)).
• AI images/video/audio published? → marking hygiene (50(2), via your tools) and visible labels when content depicts real people/places/events (50(4)).
• AI-written public-interest text? → label it or stand a human editor behind it (50(4)).
• Also worth knowing: Article 4 expects basic AI literacy in staff using AI — sensible training, not bureaucracy.

What doesn’t apply to most SMEs

The GPAI model rules (you’re not an AI lab), the high-risk conformity machinery (unless your use case is listed in Annex III — check with a lawyer if in doubt), and the prohibited-practices list (Art. 5 — but do read it once; emotion recognition at work, for example, is banned).

Fines exist but are proportionate

Art. 99 caps transparency-violation fines at €15M/3% — and explicitly instructs regulators to consider SME size and interests. Enforcement will chase egregious cases first, not your bakery. Still: the duties are cheap to meet, and meeting them with a record is cheaper than any argument.

Sources are cited in place; official text: Regulation (EU) 2024/1689. This guide is a technical explanation, not legal advice.