Earlier this month, the Future of Life Institute launched an $8 million campaign called Protect What’s Human, aimed at rallying public support for AI regulation across the United States. But while America debates whether to regulate AI, Europe has already acted. The EU AI Act came into force this year, and it directly affects every Irish business that uses or deploys artificial intelligence tools.
Whether you run a small accounting practice using AI to draft client letters, a construction company testing AI-powered site cameras, or a rental agency using automated screening tools — the rules apply to you. Ignorance is not a defence, and the penalties can be steep.
What the EU AI Act Actually Says
The EU AI Act takes a risk-based approach. It classifies AI systems into four categories: minimal risk, limited risk, high risk, and unacceptable risk. Most everyday AI tools — chatbots, email assistants, scheduling apps — fall into minimal or limited risk, which means lighter obligations like transparency notices.
But here is where it gets serious for small businesses. If you use AI for employee recruitment, credit scoring, access to public services, or biometric identification, your system is classified as high risk. That means you need a risk assessment, technical documentation, human oversight processes, and traceability of decisions. Non-compliance can result in fines of up to €35 million or 7% of worldwide annual turnover.
What This Means for Irish Businesses Right Now
Most Irish small and medium businesses are not deliberately breaking the rules. The problem is that many do not realise the rules exist. You might have started using an AI tool because it saved time — without realising it was processing personal data in ways that trigger the AI Act or GDPR.
Take a common example: a landlord using AI software to screen tenant applications. If that tool assesses creditworthiness or flags applicants based on behavioural patterns, it is a high-risk AI system under the Act. The landlord needs to document how the system works, ensure human oversight, and explain decisions to rejected applicants. Many Irish rental agencies using off-the-shelf screening tools may not have done any of this.
Practical Steps You Can Take This Week
The good news is that compliance does not need to be complicated or expensive. Start with an AI audit: write down every AI tool your business uses — and yes, that includes the free versions. For each one, ask: does it make automated decisions about people? Does it process personal data? Does it profile or categorise individuals?
If the answer to any of these is yes, read the provider’s terms of service and data processing agreement. Many popular AI tools are not designed for European compliance. If your provider cannot confirm GDPR and AI Act compliance, you may need to switch.
Next, create a simple AI usage policy for your business. Document what each tool does, why you use it, and what data it processes. Train your staff on basic AI awareness — especially those who handle customer data. The Data Protection Commission has published guidance that is accessible and practical for small businesses.
The Opportunity in Compliance
Here is the angle most articles miss: being ahead on AI regulation is a competitive advantage. When new rules arrive, the businesses that scramble to catch up spend time and money on emergency fixes. The businesses that already have their house in order can market themselves as trusted and compliant.
More than that, the EU AI Act creates a level playing field. When everyone has to follow the same rules, the advantage shifts from whoever cut the most corners to whoever delivers the best service. For Irish small businesses that pride themselves on quality and trust — and that describes most of them — that is a winning position.
The Bottom Line
AI regulation is not something to fear. It is something to prepare for. The FLI campaign in America shows that the debate over AI rules is only getting louder. In Europe, the rules are already written. Irish businesses that take AI compliance seriously now will save themselves headaches, fines, and reputational damage later. A few hours of work today could save thousands of euro tomorrow.