AI Act: the 'Digital Omnibus' may defer high-risk obligations — what energy and O&G should do with it

The European Commission is preparing a digital simplification package, the 'Digital Omnibus', which could push back the heaviest AI Act obligations for systems classified as high-risk. The August 2026 deadline that many industrials were rushing to meet would become movable: the timeline would be renegotiated, potentially tied to the availability of the harmonized standards and guidance the sector has awaited for months.

For energy and O&G the stakes are direct. Many deployments — grid optimization, process control, predictive maintenance of critical assets, facility safety — fall into categories that may be deemed high-risk once they steer essential infrastructure. A deferral eases short-term compliance pressure, but it erases neither the documentation burden (risk management, data quality, logging, human oversight) nor the contractual exposure to customers and insurers, who will not wait for Brussels before demanding guarantees.

The strategic mistake would be to treat this reprieve as a reason to ease off. The best-positioned groups will use the window to do what takes time: map their AI systems by risk level, harden data and model traceability, and stand up governance able to absorb a still-shifting framework without re-engineering at every change. Compliance then becomes an asset — a commercial argument and a risk reduction — rather than an imposed constraint.

Cardan-AI analysis: the right stance is neither wait-and-see nor premature over-compliance, but a minimal, modular, documented governance base aligned with the highest-ROI use cases. That is precisely the support we offer industrial leadership teams: turning regulatory uncertainty into an execution advantage by framing today the deployments that will create value whatever timeline the EU ultimately sets.