The Enforcement Cliff
Three weeks into a live regime, the organisations doing well are the ones that started with an inventory — not the ones that bought a compliance product.
20 August 2026 — Three weeks of enforcement has produced the first useful observation about how the Act actually lands: it does not arrive as one event. It arrives as a series of questions, in order, and the first one is always the same.
What AI do you use?
Businesses that can answer that question in detail are moving through the process comfortably. Businesses that cannot are, in practice, starting from zero three weeks after the deadline — and finding that every subsequent obligation depends on the answer. Classification requires the inventory. Vendor conformity requires the inventory. Monitoring requires the inventory.
That is not a design flaw in the Act. It is the Act reflecting something true: you cannot govern what you have not enumerated.
The other theme this week was case studies, and they clustered in an unglamorous place. B2B process automation — order intake, supplier correspondence, claims triage — produced the most reliable measured returns. Consumer-facing experiments produced better stories and worse numbers. The difference is baseline: B2B processes usually have a cost-per-transaction already being tracked, so improvement is provable. Consumer engagement is harder to attribute.
What this means if you run an SME. If you are behind, do not buy a compliance product. Spend a day with a spreadsheet and list every AI tool, every agent, every automation, every API integration that touches your business. That spreadsheet is the deliverable. Everything else — the policies, the audits, the vendor reviews — is downstream of it, and no consultant can do it for you as fast as you can do it yourself.
Mid-week review, in parallel with the Monday series.