The EU AI Act is the world’s first comprehensive regulation on artificial intelligence. It entered into force on 1 August 2024 and applies to all organisations operating in EU member states — including Cyprus. This guide explains what the EU AI Act means for Cyprus businesses, what you need to do, and when.
What is the EU AI Act?
The EU AI Act (Regulation (EU) 2024/1689) is a risk-based regulatory framework that classifies AI systems into four categories: Unacceptable Risk (prohibited), High Risk, Limited Risk, and Minimal Risk. It imposes different obligations depending on which category an AI system falls into.
Key Deadlines for Cyprus Businesses
- February 2025 — Prohibited AI systems banned (e.g. social scoring, biometric categorisation)
- August 2025 — General Purpose AI (GPAI) model obligations apply
- August 2026 — High-risk AI system obligations fully apply
- August 2027 — Additional high-risk system requirements
Which Cyprus Businesses Are Affected?
Any Cyprus organisation that develops, deploys, or uses AI systems in their operations is subject to the EU AI Act. This includes businesses using AI for recruitment, credit scoring, customer service automation, medical diagnostics, and educational assessment. Even organisations that use off-the-shelf AI tools (ChatGPT, Copilot, Gemini) have obligations under the Act.
High-Risk AI Categories Relevant to Cyprus
- AI used in recruitment and HR decisions
- AI used in credit and financial assessments
- AI used in education and training
- AI used in healthcare diagnostics
- AI used in law enforcement and justice
- AI used in critical infrastructure
What Cyprus Businesses Need to Do Now
- Conduct an AI inventory — identify all AI systems used in your organisation
- Classify each system by risk level
- Develop an AI governance framework and internal AI policy
- Appoint an AI responsible person or engage an external CAIO Advisor
- Implement human oversight mechanisms for high-risk AI
- Ensure GDPR alignment with your AI use
EU AI Act Advisory in Cyprus
Dr. George Melillos provides EU AI Act compliance advisory for organisations in Cyprus. With a PhD, ISO 27001 Lead Implementer certification, and deep expertise in AI governance, he helps Cyprus businesses navigate the regulation confidently. Learn more about AI Governance Cyprus →