In 2018, working with a cybersecurity firm during GDPR enforcement, I watched organizations discover their compliance filings didn't reflect the organizational reality underneath them. The EU AI Act will produce the same split. High-risk obligations are now deferred to December 2, 2027 — and that runway is only useful if the work starts now.

Read More