[{"data":1,"prerenderedAt":587},["ShallowReactive",2],{"post-\u002Fhow-much-does-the-eu-ai-act-affect-companies-outside-the-eu":3},{"page":4,"translations":440,"nav":448,"related":574,"random":581},{"id":5,"title":6,"body":7,"categories":409,"category":412,"changeHistory":412,"date":413,"description":414,"disclosures":415,"draft":418,"extension":419,"firstLiveAt":412,"image":420,"imageAlt":421,"kind":422,"lang":423,"meta":424,"navigation":425,"omitGermanLocalizationDisclosure":418,"path":426,"publishedAt":412,"readingTime":427,"rights":412,"seo":428,"seoTitle":429,"slug":430,"sources":412,"stem":430,"tags":431,"translationKey":437,"type":438,"updated":412,"__hash__":439},"posts\u002Fhow-much-does-the-eu-ai-act-affect-companies-outside-the-eu.md","How Much Does the EU AI Act Affect Companies Outside the EU?",{"type":8,"value":9,"toc":398},"minimark",[10,48,51,54,57,60,63,87,90,95,109,112,115,118,121,124,127,130,133,137,140,207,210,213,217,220,223,226,229,232,235,238,242,252,255,265,268,272,275,278,281,285,288,291,294,364,367,371,374,377,380,383,386,389,392],[11,12,13,20],"blockquote",{},[14,15,16],"p",{},[17,18,19],"strong",{},"Summary",[21,22,23,30,36,42],"ul",{},[24,25,26,29],"li",{},[17,27,28],{},"The EU AI Act explicitly covers some companies outside the EU."," Placing a system on the EU market, deploying it in the EU, or producing output intended to be used there can all matter.",[24,31,32,35],{},[17,33,34],{},"Legal scope and practical enforcement are different questions."," An authority’s ability to collect a fine directly is one question; leverage through EU customers, distributors, platforms, or market access is another.",[24,37,38,41],{},[17,39,40],{},"The company structure must be clear before the answer can be clear."," An AI provider selling into the EU, a business operating there, a non-EU company serving EU customers, and a business with no EU connection do not occupy the same position.",[24,43,44,47],{},[17,45,46],{},"The EU AI Act is not the only rule that can matter."," A company also needs to assess the domestic, data-protection, consumer, and sector rules that apply to its own activity.",[14,49,50],{},"Consider a company established outside the EU. It sells an AI hiring system to employers in the Union, while its own offices and servers remain elsewhere. The system recommends which candidates should move to interview.",[14,52,53],{},"Does being outside the EU put the company beyond the EU AI Act?",[14,55,56],{},"The question is useful because discussion of the Act often blends two separate issues: who can fall within its scope, and how requirements can be enforced in practice against a company outside the EU.",[14,58,59],{},"The Act explicitly covers some companies outside the EU. Ignoring that would be a mistake.",[14,61,62],{},"But being within scope does not mean that every company outside the EU will suddenly face direct collection of an EU fine. Practical enforcement is a separate and often more difficult question, particularly when a company has no EU presence, representative, distributor, customer, or AI product placed on the EU market.",[14,64,65,66,71,72,76,77,81,82,86],{},"This is the final article in the series. I first examined ",[67,68,70],"a",{"href":69},".\u002Fwhat-does-the-eu-ai-act-actually-regulate","what the EU AI Act actually regulates",", then ",[67,73,75],{"href":74},".\u002Feu-ai-act-after-risk-classification","what a company should do after determining the risk level",", ",[67,78,80],{"href":79},".\u002Fchatbot-data-third-party-ai-provider","what happens when chatbot data is sent to a third-party model",", and ",[67,83,85],{"href":84},".\u002Fhealthcare-ai-chatbot-triage-medical-device","where the boundaries sit for AI in healthcare",".",[14,88,89],{},"This article separates two questions: when the EU AI Act can affect a company established outside the EU, and which domestic rules matter when the EU connection is weak or absent.",[91,92,94],"h2",{"id":93},"scope-does-not-end-at-the-companys-address","Scope does not end at the company's address",[14,96,97,98,108],{},"Under ",[67,99,107],{"href":100,"className":101,"rel":103,"target":106},"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2024\u002F1689\u002F2026-07-27\u002Feng",[102],"dofollow",[104,105],"nofollow","noopener","_blank","the current consolidated text",", the EU AI Act does not apply only to providers established in the EU. It can also cover providers placing an AI system or general-purpose AI model on the EU market, deployers located in the EU, importers, distributors, and in some circumstances providers or deployers established outside the EU. Whether the system's output is intended to be used in the EU can also matter.",[14,110,111],{},"For a company established outside the EU, “we are not incorporated in the EU” does not end the assessment.",[14,113,114],{},"A software company established outside the EU may, for example, sell an AI system to German employers that analyses CVs and determines which candidates should be invited to interview. That company may be placing a system on the EU market. If the company provides a system whose outputs are intended to be used by an EU customer in credit, insurance, employment, or healthcare decisions, the output-in-the-EU provision may become relevant. An EU distributor or representative adds supply-chain responsibilities to the picture.",[14,116,117],{},"Not every website visit creates the same result.",[14,119,120],{},"The fact that someone in France can access a hotel website operated from outside the EU may not, by itself, show that the hotel is placing an AI system on the EU market. The hotel’s primary offer is accommodation, and the chatbot may only be a communication channel for the service delivered where the hotel operates.",[14,122,123],{},"If the chatbot gives a person in the EU a personalised answer intended to influence a booking decision, it may deserve a separate assessment, especially under data-protection and consumer-law rules. Its relevance under the EU AI Act depends on the system’s role, intended use, and EU connection. The relevant question is not merely whether the person happens to be in the EU.",[14,125,126],{},"There is not yet a settled body of practice showing exactly where this line sits for hotel chatbots.",[14,128,129],{},"Advertising, language, currency, the booking flow, and explicit targeting of people in the EU may also matter under the GDPR and consumer law. Technical access to a website and directing a service at people in the EU are not the same thing.",[14,131,132],{},"A one-sentence answer is therefore unsafe. The company's actual activity, the user's location, and where the output is used all need to be considered.",[91,134,136],{"id":135},"four-company-structures-four-different-assessments","Four company structures, four different assessments",[14,138,139],{},"The discussion becomes confused when all companies outside the EU are placed in the same category. At least four structures need to be distinguished.",[141,142,143,159],"table",{},[144,145,146],"thead",{},[147,148,149,153,156],"tr",{},[150,151,152],"th",{},"Company structure",[150,154,155],{},"Core question under the EU AI Act",[150,157,158],{},"Likely practical enforcement channel",[160,161,162,174,185,196],"tbody",{},[147,163,164,168,171],{},[165,166,167],"td",{},"Provider selling an AI product from outside the EU into the EU",[165,169,170],{},"Is the system being placed on the EU market, and is it subject to high-risk or transparency duties?",[165,172,173],{},"More concrete through the EU customer, distributor, importer, representative, contract, or market access.",[147,175,176,179,182],{},[165,177,178],{},"Group with a company, branch, or operation in the EU",[165,180,181],{},"Is the EU entity using the system or placing it on the market?",[165,183,184],{},"More direct because national authorities can reach the entity or assets within the EU.",[147,186,187,190,193],{},[165,188,189],{},"Non-EU business serving an EU customer",[165,191,192],{},"Is the AI output used in the EU, or is the service directed at the EU market?",[165,194,195],{},"Depends on the connection; customer contracts and data-protection channels may have an earlier effect.",[147,197,198,201,204],{},[165,199,200],{},"Non-EU business with no material EU connection",[165,202,203],{},"Is there a genuine EU connection through the system, market, or output?",[165,205,206],{},"Usually weak under the EU AI Act; domestic and sector rules may be more immediate.",[14,208,209],{},"This table is not a substitute for legal advice. It does provide a better starting point for decision-makers.",[14,211,212],{},"The effect of the EU AI Act is better understood by asking “which company, in which activity, through which connection?” rather than simply “does it cover companies outside the EU?”",[91,214,216],{"id":215},"what-can-be-done-to-a-company-with-no-eu-presence","What can be done to a company with no EU presence?",[14,218,219],{},"This is where the debate gets practical.",[14,221,222],{},"Enforcing or collecting a fine is not straightforward when a company is established outside the EU, has no physical presence in the Union, does not sell an AI product into the EU, and uses a chatbot only in its local operation. The territorial scope of the EU AI Act does not, by itself, create an enforcement mechanism in every non-EU jurisdiction.",[14,224,225],{},"But saying “nothing can be done” is too broad. Enforcement does not consist only of collecting money from the company's bank account.",[14,227,228],{},"If there is an EU customer, distributor, importer, or authorised representative, those parties may stop using or distributing the system because of their own obligations. When a product is placed on the EU market, market surveillance, withdrawal, restrictions on availability, and customer contracts create more concrete channels.",[14,230,231],{},"That looks more limited in the hotel-chatbot example. It is not realistic to describe the EU AI Act as allows an EU authority to shut down a hotel outside the EU because of an information chatbot on its website.",[14,233,234],{},"If the same hotel clearly directs services at people in the EU, processes their data, uses misleading commercial practices, or collects health data, the question no longer belongs to the EU AI Act alone. The GDPR, consumer law, and platform rules can operate through their own scope and enforcement mechanisms.",[14,236,237],{},"Each route has a different legal basis, target, and limit. It would be misleading to borrow an enforcement tool from one law and present it as an automatic consequence of another.",[91,239,241],{"id":240},"can-a-landing-page-be-blocked-or-advertising-stopped","Can a landing page be blocked or advertising stopped?",[14,243,244,245,251],{},"The EU AI Act does not provide for an entire non-EU company's website to be blocked automatically whenever an infringement is identified. If there is no other effective way to eliminate a serious risk, however, the market-surveillance framework under ",[67,246,250],{"href":247,"className":248,"rel":249,"target":106},"https:\u002F\u002Feur-lex.europa.eu\u002Flegal-content\u002FEN\u002FALL\u002F?uri=celex%3A32019R1020",[102],[104,105],"EU Regulation 2019\u002F1020"," can support an order to remove the relevant content, display a warning, or restrict access.",[14,253,254],{},"That power is narrow and conditional. If a landing page serves only as the route into a non-compliant system, a specific page or URL may be targeted. It does not follow that the physical business outside the EU or its entire domain will be closed automatically.",[14,256,257,258,264],{},"There is no blanket advertising ban either. Google may act under its own policies or be required to comply with a legally valid and specific order. ",[67,259,263],{"href":260,"className":261,"rel":262,"target":106},"https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Freg\u002F2022\u002F2065\u002Foj\u002Feng",[102],[104,105],"Article 9 of the Digital Services Act"," requires such orders to identify matters including their legal basis, reasoning, the exact location of the content, and their territorial scope. The allegation that “this chatbot may breach the EU AI Act” is not enough on its own.",[14,266,267],{},"For a company outside the EU, the practical question is: Which EU-connected content, sales channel, or business relationship could actually be interrupted by an authority's decision or a platform policy?",[91,269,271],{"id":270},"domestic-law-does-not-disappear","Domestic law does not disappear",[14,273,274],{},"The EU AI Act is not a catch-all rule for every company outside the EU. Its scope depends on the company's activity and connection to the Union.",[14,276,277],{},"There is no single answer to what applies when that connection is weak or absent. Some jurisdictions have AI-specific rules. Others apply data-protection, consumer, product-safety, employment, healthcare, financial-services, or sector regulation to the same system. The applicable law depends on the country, the data, the market, and the work the system performs.",[14,279,280],{},"A company outside the EU should not treat an EU AI Act assessment as a substitute for checking its own domestic obligations. Equally, a local-law assessment does not make the EU AI Act irrelevant when the company sells into the EU, works with EU customers, influences decisions affecting people there, or enters enterprise procurement. In those cases, the Act can become a market-access and trust criterion in practice.",[91,282,284],{"id":283},"what-should-a-company-outside-the-eu-do-now","What should a company outside the EU do now?",[14,286,287],{},"I do not think every company outside the EU should launch an EU AI Act compliance programme tomorrow. That would create unnecessary cost.",[14,289,290],{},"But every company using AI in relation to customers, employees, patients, candidates, or citizens needs a basic inventory.",[14,292,293],{},"That inventory should contain more than the name of the tool. It should answer these questions:",[141,295,296,306],{},[144,297,298],{},[147,299,300,303],{},[150,301,302],{},"Question",[150,304,305],{},"Why it matters",[160,307,308,316,324,332,340,348,356],{},[147,309,310,313],{},[165,311,312],{},"What job does the system perform?",[165,314,315],{},"Risk arises from function, not the name of the sector.",[147,317,318,321],{},[165,319,320],{},"Whose decision does the output affect?",[165,322,323],{},"Healthcare, employment, credit, insurance, and essential services change the threshold.",[147,325,326,329],{},[165,327,328],{},"What role does the company hold?",[165,330,331],{},"Being a provider, deployer, distributor, or customer changes responsibility.",[147,333,334,337],{},[165,335,336],{},"What is the EU connection?",[165,338,339],{},"Market, user, output, customer, representative, distributor, and data flow need separate consideration.",[147,341,342,345],{},[165,343,344],{},"Which data goes where?",[165,346,347],{},"This is where the GDPR, domestic data-protection law, and international-transfer questions begin.",[147,349,350,353],{},[165,351,352],{},"Does human oversight work in practice?",[165,354,355],{},"An approval button is not the same thing as responsibility by design.",[147,357,358,361],{},[165,359,360],{},"Which system should be narrowed or not built at all?",[165,362,363],{},"The cost of compliance may exceed the business value.",[14,365,366],{},"Legal cannot assess this alone. The risk depends on how product, sales, data, security, operations, and supplier management actually use the system.",[91,368,370],{"id":369},"the-final-distinction","The final distinction",[14,372,373],{},"The EU AI Act can affect companies outside the EU in two different ways.",[14,375,376],{},"The first is direct legal scope. The Act enters the picture when a system is placed on the EU market, used in the EU, or produces output intended to be used there. High-risk uses, transparency duties, general-purpose models, and supply-chain roles can create serious consequences.",[14,378,379],{},"The second is practical business effect. Whether or not an EU authority can collect a fine directly, an EU customer, distributor, platform, advertising channel, investor, insurer, or enterprise-procurement team may demand evidence of compliance.",[14,381,382],{},"A hotel chatbot used by a company established and operating only outside the EU cannot be assessed in the same sentence as a non-EU provider selling recruitment AI to German companies.",[14,384,385],{},"The EU AI Act should neither be attached to every company outside the EU in a panic nor dismissed with “the EU cannot bind us.”",[14,387,388],{},"First map the system's job, the company's role, the path of the data, and the EU connection. Then determine which law actually applies and which business relationship it can affect in practice.",[14,390,391],{},"The useful question is where, for whom, and to influence which decision the AI system is being used, and whether the company can show that this use complies with the rules that apply.",[14,393,394],{},[395,396,397],"em",{},"This article is for general information and does not constitute legal advice for a specific system or company.",{"title":399,"searchDepth":400,"depth":400,"links":401},"",2,[402,403,404,405,406,407,408],{"id":93,"depth":400,"text":94},{"id":135,"depth":400,"text":136},{"id":215,"depth":400,"text":216},{"id":240,"depth":400,"text":241},{"id":270,"depth":400,"text":271},{"id":283,"depth":400,"text":284},{"id":369,"depth":400,"text":370},[410,411],"ai","business",null,"2026-09-07","When the EU AI Act can cover companies outside the EU, how legal scope differs from practical enforcement, and why the EU connection matters.",{"aiUse":416,"aiNote":417},"ai-assisted","The subject, approach, and interpretations in this article were determined by Evren Bal. AI-assisted tools were used for primary-source research and editorial development.",false,"md","\u002Fimages\u002Fhero\u002Feu-ai-act-turkey-business-reach.avif","A blue business link crosses the boundary beyond a measuring arm to reach a distant company","Analysis","en",{},true,"\u002Fhow-much-does-the-eu-ai-act-affect-companies-outside-the-eu",11,{"title":6,"description":414},"When the EU AI Act Affects Companies Outside the EU","how-much-does-the-eu-ai-act-affect-companies-outside-the-eu",[432,433,434,435,436],"eu-ai-act","ai-regulation","cross-border-compliance","compliance","data-protection","eu-ai-act-impact-on-turkish-companies","post","jw5YmcwzsWfv11DzcxXYuAt3VS8Tjath-ec1D9q8YeI",{"en":441,"tr":442,"de":445},{"path":426,"title":6},{"path":443,"title":444},"\u002Ftr\u002Fab-yapay-zeka-yasasi-turkiyedeki-sirketleri-ne-kadar-etkiler","AB Yapay Zekâ Yasası Türkiye'deki Şirketleri Ne Kadar Etkiliyor?",{"path":446,"title":447},"\u002Fde\u002Fwie-stark-betrifft-der-eu-ai-act-unternehmen-ausserhalb-der-eu","Wie stark betrifft der EU AI Act Unternehmen außerhalb der EU?",{"prev":449,"next":412,"others":452,"lucky":573,"readingTime":427},{"path":450,"title":451},"\u002Fis-buying-backlinks-worth-it","Would We Still Buy This Backlink If It Sent No Ranking Signal?",[453,456,459,462,465,468,471,474,477,480,483,486,489,492,495,498,501,504,507,510,513,516,519,522,525,528,531,534,537,540,543,546,549,552,555,558,561,564,567,570],{"path":454,"title":455},"\u002Ffrom-rules-to-decisions-the-real-time-sales-intelligence-platform-we-built-at-vanity","Medical Tourism Lead Management: How We Moved from Manual Routing to a Real-Time Sales System",{"path":457,"title":458},"\u002Fwhen-does-enterprise-ai-need-rag","When Does Enterprise AI Actually Need RAG?",{"path":460,"title":461},"\u002Fai-turned-a-refactor-i-wouldnt-do-into-a-one-hour-job","With AI, a Refactor I Wouldn't Bother With Took One Hour",{"path":463,"title":464},"\u002Fwriting-with-ai-means-thinking-with-your-archive","Writing with AI Means Thinking About Your Archive, Too",{"path":466,"title":467},"\u002Fthe-era-of-the-previous-vibe-coder-begins","The Era of the \"Previous Vibe Coder\" Begins: The Invisibility of Clean Code and the Technical Debt Bill of AI",{"path":469,"title":470},"\u002Ffrom-asking-questions-to-delegating-work","From Asking Questions to Delegating Work: What the Codex Study Shows",{"path":472,"title":473},"\u002Fai-visibility-illusion-bing-citation-share","The AI Visibility Illusion: What Bing's Citation Share Data Actually Reveals",{"path":475,"title":476},"\u002Fwordpress-to-nuxt-ai-powered-content-pipeline","From WordPress to Nuxt: Building an AI-Powered Content Pipeline",{"path":478,"title":479},"\u002Fai-value-is-not-always-more-work","AI's Value Is Not Always More Work",{"path":481,"title":482},"\u002Fwhat-makes-an-ai-system-specific-to-your-business","What Makes an AI System Specific to Your Business?",{"path":484,"title":485},"\u002Fis-your-ai-system-delivering-business-results","Is Your AI System Actually Delivering Business Results?",{"path":487,"title":488},"\u002Fthe-threshold-collapsed-to-zero","The Threshold Collapsed: What ProductLog Taught Me About Building in Public",{"path":490,"title":491},"\u002Fmanaging-technology-and-transforming-the-business-are-not-the-same","Managing Technology and Transforming the Business Are Not the Same Thing",{"path":493,"title":494},"\u002Fwhen-do-you-actually-need-an-ai-agent","When Do You Actually Need an AI Agent?",{"path":496,"title":497},"\u002Fgoogle-generative-ai-data-ai-citation-timing","AI Visibility Dropped Before Search: The Google Data That Changed My Theory",{"path":499,"title":500},"\u002Fdo-ai-visibility-tools-really-work","Do AI Visibility Tools Really Work? What They Actually Measure",{"path":502,"title":503},"\u002Fwhat-does-the-eu-ai-act-actually-regulate","What Is the EU AI Act, and What Does It Regulate?",{"path":505,"title":506},"\u002Fhow-to-do-content-pruning-a-real-world-case-study","How to Do Content Pruning: A Real-World Case Study",{"path":508,"title":509},"\u002Fan-seo-experiment-in-a-low-competition-serp-with-google-maps-and-openai","Building camiler.org: A Programmatic SEO Experiment with Google Maps and OpenAI",{"path":511,"title":512},"\u002Fcomprehension-debt-the-bill-comes-due-alone","Comprehension Debt: The Bill Comes Due Alone",{"path":514,"title":515},"\u002Fwhy-im-building-rankextension-making-google-search-console-actually-make-sense","What Happened to RankExtension?",{"path":517,"title":518},"\u002Fhow-llms-identify-experts","What Makes an LLM Recommend Someone as an Expert?",{"path":520,"title":521},"\u002Feu-ai-act-after-risk-classification","EU AI Act: What Should You Do Once You Know the Risk Level?",{"path":523,"title":524},"\u002Fopen-publishing-ai-monthly-seo-reporting-experiment","Open Publishing and an AI-Assisted Monthly SEO Reporting Experiment",{"path":526,"title":527},"\u002Ftesting-a-button-treating-an-entire-website-redesign-as-a-sure-thing","Testing a Button, Treating an Entire Website Redesign as a Sure Thing",{"path":529,"title":530},"\u002Fraising-children-in-the-age-of-artificial-intelligence","Raising Children in the Age of Artificial Intelligence",{"path":532,"title":533},"\u002Fwhen-process-automation-actually-needs-ai","When Does Process Automation Actually Need AI?",{"path":535,"title":536},"\u002Fthe-job-ai-wont-take-and-the-five-it-prevents","AI Is Reducing Hiring Without Layoffs",{"path":538,"title":539},"\u002Fbank-account-api-integration","Integrating One Bank Is Easy. Keeping Forty Running Is Not.",{"path":541,"title":542},"\u002Fwho-captures-ai-productivity-gains","Who Captures the Productivity Gains from AI?",{"path":544,"title":545},"\u002Fwhen-is-one-ai-model-enough","When Is One AI Model Enough?",{"path":547,"title":548},"\u002Fkeeping-customers-happy-isnt-enough","Keeping Customers Happy Isn’t Enough. You Have to Follow Up.",{"path":550,"title":551},"\u002Fhealthcare-ai-chatbot-triage-medical-device","AI in Healthcare: The Difference Between Chatbots, Triage, and Medical Devices",{"path":553,"title":554},"\u002Fdoes-enterprise-ai-really-need-fine-tuning","Does Enterprise AI Really Need Fine-Tuning?",{"path":556,"title":557},"\u002Fchatbot-data-third-party-ai-provider","What Happens When Chatbot Data Is Sent to a Third-Party AI Provider?",{"path":559,"title":560},"\u002Fllms-txt-was-never-the-point","llms.txt Was Never the Point",{"path":562,"title":563},"\u002Fstart-with-the-business-problem-not-the-ai-model","Start With the Business Problem, Not the AI Model",{"path":565,"title":566},"\u002Fthe-ai-productivity-baseline-is-moving-faster-than-we-remember","AI Wasn’t Always This Good. We Just Got Used to It.",{"path":568,"title":569},"\u002Fhow-can-companies-create-value-from-ai","How Can Companies Create Value From AI?",{"path":571,"title":572},"\u002Fbeyond-the-bot-lessons-from-building-a-chat-system-for-global-patients","What We Learned Building a Healthcare Chatbot for International Patients",{"path":523,"title":524},[575,577,579,580],{"path":520,"title":521,"date":576},"2026-09-05",{"path":502,"title":503,"date":578},"2026-09-03",{"path":550,"title":551,"date":576},{"path":556,"title":557,"date":576},[582,584,585],{"path":532,"title":533,"date":583},"2026-08-28",{"path":481,"title":482,"date":578},{"path":514,"title":515,"date":586},"2025-06-05",1788736134873]