EU AI Continent Action Plan delivers; Digital Omnibus still in trilogue

The Commission press release hit my inbox just after eleven on Thursday, Brussels time, and the framing was exactly the kind of victory-lap language I have been waiting for since February: the AI Continent Action Plan, Brussels’ answer to the question of whether Europe can ship enforcement and competitiveness in the same year, was being marked as on-track against its milestones. I read it twice. Then I pulled up the trilogue tracker, because the second half of the EU AI story this week is not on the Commission’s website — it is in a negotiating room two buildings over.

The contrarian read I want to put down before the trade press files this as a clean win: the Continent Action Plan delivering on schedule and the high-risk AI Act timeline being actively renegotiated are two halves of the same story, and for EU restaurant operators they collide in August. Literacy obligations have been in force since February 2, 2025. High-risk obligations — the ones that actually touch emotion-recognition kiosks and biometric drive-thru — are currently scheduled for August 2, 2026. That second date is the one Council and Parliament are sitting in trilogue right now arguing about.

What the press release actually says, and what it does not

The April 9 framing is competence-forward: investment, compute, sandbox capacity, the regulatory infrastructure side of the AI Act being marked as built. What the release does not do — and this is the part I want operators to read carefully — is touch the implementation timeline for high-risk system obligations. That is the deliberate choice. The Commission is shipping the Plan side of the ledger; the Omnibus side is somebody else’s lane this month.

The Digital Omnibus proposal, which dropped November 19, 2025 and which I walked through in detail in March, is the vehicle that would push the high-risk deadline. The Council position recap from March 16 laid out the member-state appetite for delay, and it was substantial. The provisional trilogue agreement that the Council readout is expected to land in early May is the moment the calendar either moves or holds. As of this Thursday, it has not moved.

What this means on the floor of a restaurant

For an EU operator running a kiosk that infers customer mood from a camera feed, or a drive-thru system that scores voice for upsell propensity, the practical answer on April 9 is unchanged: literacy obligations are live, and the high-risk classification still applies on August 2 unless trilogue says otherwise. The EU AI Act applied to restaurants explainer I have queued for May will be the deeper read, but the operating posture I would recommend right now is to plan against the August date and treat any delay as a windfall.

The fine exposure is the part that focuses minds. Maximum penalties under the Act remain €35 million or 7% of global turnover, whichever is higher. That is not a number a regional QSR group can absorb gracefully. The EU AI Code of Practice from March 4 gave the general-purpose model lane its compliance scaffolding; the high-risk lane — which is where the restaurant emotion-and-biometric stack lives — does not have an equivalent code yet, and Mark this as the gap operators have been asking me about for a quarter.

The trilogue is the story I am watching

What I will be reading the May 7 readout for, when it lands, is whether the delay covers all high-risk systems or carves out specific categories. The Omnibus original text contemplated a clean push; the Parliament side has been signaling it wants conditions. A conditioned delay is a different operating reality than an unconditioned one — it means compliance work continues against an August target for some categories and a later target for others, and operators with mixed deployments will need two calendars.

The cross-Atlantic cross-link operators should keep tabbed is the Starbucks BIPA settlement from Monday, because the U.S. biometric-privacy story and the EU high-risk classification are now running on parallel tracks, with parallel exposure, and the playbook for one is increasingly informing the playbook for the other. Mark that as the trend underneath the trend.

Brussels delivered the Plan on time. The Act timeline is the part still being written. Both things can be true on the same Thursday, and for any restaurant group operating in the EU, both things will land in the same procurement cycle.

— Hana edits the newsroom for TableTransfers. Tips: [email protected].