The European Commission’s AI Act page lays out a staged rollout: prohibitions and AI-literacy duties started Feb 2025, GPAI (foundation model) duties Aug 2025, broad applicability Aug 2026, and some high-risk product rules to Aug 2027. Translation: take inventory now, classify risk, add evaluations and human oversight, and prep transparency for GPAI providers. Tip: build a vendor questionnaire on data provenance, evals, and post-deployment monitoring. For a visual cheat-sheet, see a community timeline that tracks key dates and tasks.