The EU AI Act for SMEs: a practical, no-panic guide

First, an honest disclaimer: this is an informative article, not legal advice. For decisions about your specific case, talk to a professional. With that said, the EU AI Act — the European regulation on artificial intelligence — is far less frightening than it's often made out to be, especially for an SME.

## The logic: four risk levels

The regulation doesn't govern "AI" as a whole; it classifies uses by risk.

- **Unacceptable risk:** banned practices, such as social scoring or systems that manipulate people. No normal business goes anywhere near these. - **High risk:** uses in sensitive areas — hiring and personnel decisions, access to credit, medical devices. Obligations here are serious: documentation, human oversight, risk management. - **Limited risk:** transparency duties. The classic example is the chatbot: people must be able to tell they're talking to a machine. - **Minimal risk:** everything else — the large majority of uses. No specific obligations.

## Where a typical SME lands

If you use AI to answer customers, summarise documents, draft content or search internal documentation, you're almost always in minimal or limited territory: the main duty is to say clearly when a customer is talking to a bot, and not to pass off machine output as human where it matters. The picture changes when AI makes decisions about people — screening CVs, scoring a customer's reliability. That's high-risk territory, and it needs real safeguards before you start.

## A practical to-do list

- Map where you already use AI, including inside everyday tools. - Classify each use with the four-level logic. - Make chatbots transparent, and label generated content where it matters. - Keep a named person accountable for decisions that affect people: AI proposes, someone answers for it. - Ask your vendors where they stand on the regulation and where your data ends up. - Train the team: the Act also expects basic AI literacy from the people who use these systems.

## Not a reason to postpone

The AI Act comes into application in stages, and for typical SME uses the obligations are manageable with a bit of order. Putting off AI "until the rules are clear" just means falling behind the companies that are getting organised in the meantime. Stay informed, don't freeze — and for specific doubts, once again: talk to a lawyer.