The European Parliament (EP) and the Council reached on 8 December a political deal on the final version of the Artificial Intelligence Act (AIA).
The future AI rulebook will keep the risk-based approach proposed by the European Commission, while introducing significant changes to the list of banned AI practices, the regulation of foundation models, the envisaged EU governance structure, as well as the measures in support of innovation (such as sandboxes).
Now the EU co-legislators will need to approve the final text (subject to additional work at technical level) before its formal adoption.
This Cullen International Cheat Sheet provides a summary of the highlights in the provisional agreement as described in the press releases published by the EP and the Council. The summary reflects the changes compared to the initial Commission proposal.
(Free access for all)
Clients of our European Digital Economy service can access it directly here.
Related Infographics:
April/May 2025:
- This timeline outlines the milestones in the implementation of the Artificial Intelligence Act (AI Act) until August 2027:
Download our EU AI Act Timeline
- This cheat sheet provides a summary of the core provisions on General-purpose AI (GPAI) models under the AI Act
Download our AI Act Cheat Sheet on GPAI Models
more news
25 February 26
Protection of minors: overview of national initiatives on banning access to social media
Our latest benchmark shows that an increasing number of European countries are discussing a potential social media ban on children.
23 February 26
The DNA explained: universal service to serve the same goals under a revised approach
Cullen International is issuing a series of analyses on different aspects of the Digital Networks Act (DNA) proposal. This report covers universal service.
20 February 26
Revised Cybersecurity Act (CSA2) - Changes to the EU cybersecurity certification framework
Cullen International published an analysis of the proposed changes to the EU cybersecurity certification framework under the draft Cybersecurity Act 2 (CSA2) delivered by the European Commission on 20 January 2026.