# The EU AI Act & ISO 42001

> The EU's AI Act is the world's first comprehensive AI law. Four risk tiers, fines up to 7% of global turnover, and a rolling set of deadlines through 2028. ISO/IEC 42001 is the international standard for actually managing AI responsibly, and increasingly the fastest way to demonstrate compliance with that law. This experience covers both: a plain-language version of what the law actually requires, and a course-structured path through the standard.

- **Canonical URL:** https://skemr.com/experience/eu-ai-act
- **Category:** Education & Learning
- **Curated by:** SKEMR AI
- **Contents:** 3 journeys, 8 chapters, 24 sources
- **Last updated:** 2026-08-18

## What this is

A curated transmedia experience: existing web sources selected and ordered by an editor. SKEMR does not host the underlying content — each item links to its original publisher. Journeys are alternative routes through the same material.

## Journeys

### The Plain-English Version
Accessible, non-technical: what the EU AI Act and ISO 42001 actually are and why they matter, no legal or audit background assumed.

- Steps: 9
- Machine-readable: https://skemr.com/api/ai-context/eu-ai-act/journeys/j1
- Briefing for a chat: https://skemr.com/api/ai-context/eu-ai-act/journeys/j1/briefing.md

### ISO 42001 Certification Readiness
Genuinely course-structured, six numbered lessons: each one presumes the last, running from "what is the standard" through to a real organisation that actually got certified. Side stops (a companion brochure, a launch-event recording, a different-angle accreditation-body piece) and self-contained videos, a webinar, and a podcast for anyone who wants a different medium.

- Steps: 17
- Machine-readable: https://skemr.com/api/ai-context/eu-ai-act/journeys/j2
- Briefing for a chat: https://skemr.com/api/ai-context/eu-ai-act/journeys/j2/briefing.md

### The Full Picture
All 24 instances, start to finish — the law, the standard, and where they meet.

- Steps: 24
- Machine-readable: https://skemr.com/api/ai-context/eu-ai-act/journeys/j4
- Briefing for a chat: https://skemr.com/api/ai-context/eu-ai-act/journeys/j4/briefing.md

## Chapters

- **What Is the EU AI Act?** — The world's first comprehensive AI law, in force since August 2024 — what it actually is, in the EU's own words and a plain-English explainer.
- **The Four Risk Tiers** — Unacceptable, high, limited, and minimal risk — the classification that decides how strict the rules are for any given AI system.
- **Prohibited Practices, Penalties & Key Dates** — Eight banned practices already enforceable since February 2025, fines up to €35m or 7% of global turnover, and a compliance calendar running out to 2028.
- **The EU AI Office & Getting Ready** — Who actually enforces this, and a strategic roadmap for businesses working out where to start.
- **What Is ISO/IEC 42001?** — The world's first AI management system standard, published December 2023 — what an AIMS is, and why it's becoming the standard answer to 'how do you prove you're managing AI responsibly?'
- **The AIMS Clauses: Building the Management System** — Clauses 4 through 10 — context, leadership, planning, support, operation, performance evaluation, and improvement — the mandatory structure every certified AIMS has to have.
- **Getting Certified: Stage 1, Stage 2, and Beyond** — How the actual audit works — a documentation review, then an operational effectiveness audit, then three years of surveillance audits to keep the certificate.
- **Where the Law and the Standard Meet** — ISO/IEC 42001 isn't required by the EU AI Act — but a certified AIMS is fast becoming the practical way organisations demonstrate the risk management and governance the law actually demands.

## Sources

- [Regulation (EU) 2024/1689 — the AI Act (full text)](https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng): The official legal text of the AI Act, laying down harmonised rules on artificial intelligence across the EU, in force since 1 August 2024.
- [Rules for trustworthy artificial intelligence in the EU](https://eur-lex.europa.eu/EN/legal-content/summary/rules-for-trustworthy-artificial-intelligence-in-the-eu.html): EUR-Lex's own official reader-friendly summary of the Act — the accessible companion to the full legal text.
- [AI Act enters into force](https://commission.europa.eu/news-and-media/news/ai-act-enters-force-2024-08-01_en): The European Commission's own announcement of the Act taking effect on 1 August 2024, and what that actually starts.
- [AI Act \| Shaping Europe's digital future](https://digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai): The Commission's own policy page, laying out the risk-based approach and what it means in practice.
- [The AI Office](https://digital-strategy.ec.europa.eu/en/policies/ai-office): The Commission body that monitors, supervises and enforces the Act's obligations on general-purpose AI models across the EU.
- [ISO/IEC 42001:2023 — AI management systems](https://www.iso.org/standard/42001): Lesson 1 of the certification-readiness path: the standard's own page — scope, structure, and what it's for. Start here.
- [ISO 42001 explained](https://www.iso.org/home/insights-news/resources/iso-42001-explained-what-it-is.html): ISO's own plain-language explainer: what an AI management system is, and why organisations are adopting one.
- [ISO 42001 — AI Management System](https://www.bsigroup.com/en-US/products-and-services/standards/iso-42001-ai-management-system/): Lesson 4: who actually certifies you and what they check — BSI's own certification service page, the first certification body accredited by UKAS to certify ISO/IEC 42001, alongside RvA and ANAB accreditation. Presumes you already know the specific requirements from Lesson 3.
- [AI management system certification ISO/IEC 42001 (brochure)](https://www.bsigroup.com/siteassets/pdf/en/products-and-services/iso_42001_brochure_2024_final.pdf): BSI's official downloadable brochure on what certification involves — a companion PDF to their main service page, not a standalone standards document.
- [ISO/IEC 42001:2023 — A new standard for AI governance](https://kpmg.com/ch/en/insights/artificial-intelligence/iso-iec-42001.html): Lesson 2: why organisations are actually adopting the standard — KPMG Switzerland's professional-services take. Presumes you already know what the standard is from Lesson 1.
- [KPMG receives ISO AI certification](https://kpmg.com/us/en/media/news/kpmg-receives-iso-ai-certification.html): Lesson 6: what this actually looks like for a real organisation — KPMG US became one of the first Big Four firms to achieve ISO/IEC 42001 certification itself, November 2025. Presumes you understand the audit process from Lesson 5.
- [ISO 42001 Standard for AI Governance and Risk Management](https://www.deloitte.com/us/en/services/consulting/articles/iso-42001-standard-ai-governance-risk-management.html): Lesson 3: what the standard specifically requires — Deloitte's breakdown of risk management, AI system impact assessment, lifecycle management and supplier oversight. Presumes the adoption case from Lesson 2.
- [EU Regulation on AI](https://www.bakermckenzie.com/en/insight/publications/resources/product-risk-radar-articles/eu-regulation-on-ai): A global law firm's briefing on the regulation's risk-tiered structure and what it means for businesses operating in the EU.
- [EU AI Act Compliance: A Strategic Roadmap for Businesses](https://www.pwc.de/en/risk-regulatory/responsible-ai/navigating-the-path-to-eu-ai-act-compliance.html): PwC's practical roadmap for where an organisation should actually start with compliance.
- [European Commission Publishes Guidance on Prohibited AI Practices](https://www.paulweiss.com/insights/client-memos/european-commission-publishes-guidance-on-prohibited-ai-practices-under-the-eu-ai-act): A law firm client memo on the Commission's own guidelines (published February 2025, over 100 pages) explaining each of the eight banned practices under Article 5.
- [What to Expect in the ISO 42001 Certification Process](https://cloudsecurityalliance.org/blog/2025/07/23/what-to-expect-in-the-iso-42001-certification-process): Lesson 5: what the actual audit process looks like — a non-profit standards organisation's walkthrough of Stage 1 and Stage 2. Presumes you already know who certifies you and what they check, from Lesson 4.
- [ISO/IEC 42001: Artificial Intelligence Management Systems (AIMS)](https://blog.ansi.org/anab/iso-iec-42001-ai-management-systems/): A companion angle on the same "who oversees certification" ground BSI's own page covers — the accreditation body's perspective, one level up from the certification bodies themselves.
- [The EU's AI Act, Explained \| WSJ Tech News Briefing](https://www.youtube.com/watch?v=i5iZNH2lCGU): The Wall Street Journal's tech briefing on what the Act actually does and why it matters globally.
- [The EU's AI Act Explained](https://www.youtube.com/watch?v=s_rxOnCt3HQ): A plain-language video walkthrough of the Act's structure, timeline and penalties.
- [NQA Webinar: Understanding ISO 42001 Certification — What It Means And How To Get Started](https://www.youtube.com/watch?v=mOPoZP2fthw): A UKAS-accredited certification body's own webinar on getting started — a self-contained video overview, a different entry point into the same certification topic rather than another link in the reading chain.
- [BSI AI Regulatory Services \| ISO/IEC 42001 Overview](https://www.youtube.com/watch?v=k0pTJy5jWTQ): BSI's own short video explainer on the standard's key elements — a video companion to the text overviews from ISO, KPMG, Deloitte and EY in this scene.
- [BS ISO/IEC 42001 Launch Event](https://www.youtube.com/watch?v=s0cv316Tl5A): BSI's own recording of the 16 January 2024 webinar launching the standard — genuine historical context for how certification against it actually began.
- [AI Unscripted, Ep. 9: Trust in AI — Insights on the EU AI Act](https://www.pwc.be/en/news-publications/podcasts/ai-unscripted/ep-9-trust-in-ai-eu-ai-act.html): PwC's podcast on the practical, real-world side of compliance — risk classification, proportionality, and where transparency requirements get genuinely hard to apply.
- [ISO 42001 paving the way for ethical AI](https://www.ey.com/en_us/insights/ai/iso-42001-paving-the-way-for-ethical-ai): A third Big Four perspective, alongside KPMG and Deloitte: EY's case for treating the standard as a strategic tool, not just a compliance checkbox.

## Attribution

Curated by SKEMR. The underlying content belongs to the linked publishers. Please cite the source URLs rather than SKEMR for factual claims.