On February 2, 2025, the first obligations of the EU AI Act came into force — the prohibition of certain AI practices. On August 2, 2025, the second wave arrived: rules for general-purpose AI models and mandatory AI literacy. AndAugust 2, 2026— that is, in less than four months — the third, toughest wave will arrive: full regulation of high-risk AI systems (EU AI Act). Fine? Up toEUR 35 millionor7% of global turnover— whichever is higher (DLA Piper).
Key findings
- Eu ai actchanges the rules of the game — companies must act now
- Data from McKinsey and Gartner confirm: early adopters grow 2-3x faster
- The key is to start with a pilot, not a big transformation
- Slovak companies lag behind by 2-3 years — the window of opportunity is closing
- Investment in AI returns within 18 months with proper deployment
Most Slovak companies are currently ordering their first legal analysis.
Elite companies already have AI governance ready — and are turning compliance intobusiness advantage.
This is not an article about regulation. This is an article abouthow to make money while others are not keeping up.
Chapter 1: What the EU AI Act is — and why every CEO (not just lawyers) should care
The EU AI Act is not “another GDPR.” It is bigger, harder and has a wider reach.
GDPR regulated what you do withdata. The EU AI Act regulates what you do withrozhodnutiami. Any system that automates or influences decisions about people — hiring, credit scoring, security monitoring, health diagnostics — falls under strict rules.
Regulation structure:
| Kategória | Príklady | Pravidlá |
|---|---|---|
| Zakázané AI | Sociálne skórovanie, manipulatívne AI, biometrické sledovanie v reálnom čase | Úplný zákaz od 2. 2. 2025 |
| Vysokorizikové AI | HR screening, kreditné hodnotenie, kritická infraštruktúra | Plná regulácia od 2. 8. 2026 |
| General-purpose AI | Veľké jazykové modely (GPT, Claude, Gemini) | Transparencia od 2. 8. 2025 |
| Minimálne riziko | Chatboty, spam filtre, odporúčacie systémy | Minimálne požiadavky |
Why is this important for CEOs, not just lawyers?
Because it changesthe rules of the gamefor your entire business. If your business uses AI for recruiting (and most are starting to), you fall under high-risk rules. If your company supplies products to clients in the EU who use AI to make decisions — you must demonstrate compliance of the entire supply chain.
Fakt:Fines are not theoretical. Member States had the obligation until August 2025 to establish supervisory authorities with the power to grant administrative sanctions (DataGuard). The first checks are already underway.
Chapter 2: The Three Waves of Duty—Where You Are and Where Your Competition Is
Pozrime sa na timeline realisticky:
Wave 1 (February 2, 2025) — Bans ✅
Effective. Prohibited: AI social scoring systems, subliminal manipulation and certain forms of biometric tracking. Most companies don’t do this — that’s why they feel safe.
Problem:A false sense of security. “None of our business” is the most dangerous phrase in the regulatory environment.
Vlna 2 (2. august 2025) — Governance ✅
Effective. Responsibilities include:
- AI literacyfor all who deploy AI systems
- Rules for providers of general-purpose AI models
- Establishment of national supervisory authorities
- Code of Conduct for GPAI Models
Realita:How many of your managers have completed AI literacy training? If the answer is “none” — you have a compliance gap.
Wave 3 (August 2, 2026) — High Risk Systems ⏳
Za 4 mesiace. Toto je a big blow:
- Mandatory risk assessment
- Quality management system
- Technical documentation
- Post-market monitoring
- Registration in the EU database
- . How many Slovak companies are ready for this?
. That’s an opportunity. How leaders turn regulation into an advantageopportunity.
Chapter 3: “Compliance Arbitrage” — How Leaders Turn Regulation into Advantage
Here comes a counterintuitive truth that most businesses don’t understand:regulation is not evenly distributed load. It is the filter that separates the prepared from the unprepared.
How does it work in practice?
Scenario 1: B2B salesYour company offers a SaaS product with an AI component to a German client. The German client will ask you forAI compliance documentation. If you have it — you sign the contract. If not — you will lose the deal to the company that has it.
Scenario 2: Tender in the public sectorEU public procurement is starting to require AI compliance certification. Companies with ready-made AI governance win tenders automatically — not because of a better product, but because of a lower regulatory risk for the procurer.
Scenario 3: Investor due diligenceVC and PE funds include AI governance in the due diligence checklist. A firm without AI risk management receives lower valuations — or none at all.
Gartner confirms: organizations that implement AI governance achieve40% higher business value from AI (Gartner). Not despite regulation —thanks to her. Because governance enforces discipline: you know what your AI is doing, why it’s doing it, and where it’s failing.
This is compliance arbitration:While your competition is spending time and money putting out regulatory fires, you are already earning the trust that governance brings.
Chapter 4: ISO/IEC 42001 — the new language of trust between businesses
In 2023, the first international standard for AI management systems was published:ISO/IEC 42001. It’s the equivalent of ISO 27001 (information security) — but for artificial intelligence.
What ISO 42001 requires:
- AI policy— a strategic document defining how the company approaches AI
- Risk assessment— systematic identification and assessment of AI risks
- AI life cycle— from development to deployment to retirement
- Human oversight— mechanisms of human supervision over AI decisions
- Transparency— documentation of what AI does and why
- Continuous monitoring— constant monitoring of performance and security
Why is this a huge opportunity for Slovak companies?
Because ISO 42001 certification becomesby business argument. In a B2B environment where business-to-business trust is a currency, the certification says, „You know exactly what our AI is doing. We’re in control. You can trust us.“
In the FCH philosophy, we call it„Trust First“— and in the context of AI governance, this is literally true. A company that transparently shows how its AI works will win the contract over a company that says „we trust us, it works.“
According to available data, there are currently less than 20 companies in Slovakia with any form of formalized AI governance. There are over 100 of them in Estonia. Over 500 in the Netherlands.This is a gap that you can fill — and turn into a competitive advantage throughout the CEE region.
Chapter 5: Slovakia in AI regulation — between Poland and Estonia
Where does Slovakia stand in the implementation of the EU AI Act?
What we have:
- National AI strategy (MIRRI SR) — exists, but implementation lags behind
- Supervisory body: MIRRI SR designated as coordinator, but capacities are limited
- AI literacy: most companies have no formal program
What we don’t have:
- Support system for companies in AI compliance (Estonia has an AI sandbox, the Netherlands has public consultations)
- Sufficient number of AI auditors and compliance specialists
- A culture of proactive regulatory preparation (most companies react reactively)
Comparison with regionL
| Country | AI governance index | Sandbox program | Companies with ISO 42001 |
|---|---|---|---|
| Estonia | High | Yes (from 2024) | 100+ |
| Poland | Medium | In preparation | ~50 |
| Czechia | Medium | No | ~30 |
| Slovakia | Low | No | <20 |
| Hungary | Low | No | ~15 |
Strategic implication:Slovakia can either lag behind (default scenario) or use its small size as an advantage — smaller companies can adapt faster. A company with 100 employees implements AI governance in 90 days. A corporation with 10,000 people in 18 months.
Speed is your advantage.But only if you start now.
Chapter 6: The Practical Playbook — The 90-Day AI Governance Plan
If you want to be among the first in Slovakia with functional AI governance, here is a concrete plan:
Days 1–30: AUDIT
Week 1–2: AI Inventory
- MapeachAI tool in business (yes, even ChatGPT used by marketing)
- For each tool: what it does, what data it processes, who uses it, what decisions it affects
- Output:AI Register(mandatory under the EU AI Act for high-risk systems)
Week 3–4: Classification of risks
- For each AI system, determine the risk category (prohibited / high risk / limited risk / minimal risk)
- Identify gaps: where do you lack documentation? Where is human oversight lacking?
- Output:Risk Assessment Report
Days 31–60: FRAMEWORK
Week 5–6: AI Policy
- Develop an AI Policy — a strategic document (5-10 pages) defining:
- How a company approaches AI
- Ethical principles
- Governance structure (who is responsible for what)
- Process for deploying new AI systems
Week 7–8: Processes and Documentation
- Technical documentation for high-risk systems
- Human oversight mechanisms
- Incident response plan (what if the AI makes a mistake)
- Output:AI Management System(basis for ISO 42001)
Days 61–90: IMPLEMENTATION
Week 9–10: AI literacy program
- Board/management training: what is the EU AI Act, what does it mean for us
- Training for end-users: responsible use of AI tools
- Training for IT/tech: technical compliance requirements
Week 11–12: Monitoring and auditing
- Set KPIs for AI systems (accuracy, fairness, transparency)
- First internal audit
- Action plan for identified gaps
- Output:Compliance Readiness Report
Total cost:For a company with 100–300 employees, we estimate EUR 15,000–40,000 (internal capacities + external consultant). Compare that to a potential fine of €35 million.
Chapter 7: A leader who sees regulation not as a brake but as a bridge
The best leaders in business history had one thing in common:they knew how to turn a limitation into an advantage.
When the airline industry received strict safety regulations, the result was not less flying. The result was the highest consumer confidence in any form of transport. Regulation built trust. Trust built the market.
The EU AI Act is the safety regulation for AI.Her goal is not to stop AI. Its goal is to build trust — between companies, between companies and customers, between technology and society.
A leader who understands this gets something that no money can buy:the position of a trusted partner in an era where trust is the most precious currency.
In the April 2026 Harvard Business Review, Herminia Ibarra and Michael Jacobides identify five critical competencies for leaders in the AI era. One of them is„redesigning organizational structures to unlock AI’s value“— and governance is exactly that redesign (HBR).
In Slovakia today, there is a chance to be among the first. In a year, compliance will be mandatory. But the advantage isnow— while others are still discovering what the EU AI Act is.
Imagine two companies in 2027. Both use AI. One has an auditable system, certification, transparent processes and customer trust. The other has chaotically deployed tools, no documentation and has just received the first regulatory questionnaire from a client from Germany.
The first company has just signed the contract that the second one applied for.
Regulation does not protect anyone from AI.Regulation protects the responsible from the irresponsible.
And those in charge make money.
Frequently asked questions
What does the EU AI Act mean for Slovak companies?
Eu ai act is a key topic for Slovak companies in 2026. The article analyzes specific data, trends and recommendations based on research by McKinsey, BCG and Leaders must act now to maintain a competitive edge
How to implement the EU AI Act in practice?
Implementation of the EU AI Act requires a strategic approach — first an audit of the current state, then a pilot project and gradual scaling. The key is to involve the company’s management and build internal expertise.
What is the outlook for the EU AI Act until 2027?
Trends show that the EU AI Act will be an increasingly important topic. According to WEF and Gartner, the adoption of AI is expected to accelerate, regulations will tighten and the pressure for data-driven decision-making will increase. Companies that start acting now will get a 2-3 year head start.
