TheEU AI Actapplies extraterritorially, meaning it affects entitiesoutside the EUwhen their AI systemsimpact individuals within the EU. However, it doesnotapply to systems that are developed, sold, or usedentirely outside of the EU—such as in theUK, unless they affect the EU market or individuals.
From theAI Governance in Practice Report 2025:
“The act imposes regulatory obligations… depending on their capabilities, reach and computing power, certain GPAI systems are considered to present systemic risk and attract broadly similar obligations to those applicable to high-risk AI systems.” (p. 7)
“The EU AI Act is the world’s first comprehensive AI regulation… requirements apply to providers, deployers, importers, and distributors of AI systems when such systems are placed on the EU market.” (p. 7–8)
Thus:
A. Open source releasedoes not exclude applicability if deployed in the EU.
B. Deployment at an EU borderclearly invokes jurisdiction.
D. Training by an EU companycreates jurisdictional links.
C. Deployment only at UK checkpoints, withno EU use or impact, isoutside scope.
