From 10 November 2026, specified provisions of the EU AI Act begin applying in Northern Ireland through the Windsor Framework. The change concerns AI systems that are closely integrated into physical products placed on the Northern Ireland market.

The UK Government describes this as a specific and limited application of the Act. It does not mean that the entire EU AI Act now applies to every AI developer, deployer or software service operating in Northern Ireland.

For in-scope products, however, the start date is legally significant. Relevant prohibitions, AI-literacy measures and the duty to disclose direct interaction with an AI system apply from today. Other duties, including marking certain AI-generated content and requirements for high-risk systems, follow on later dates.

Why the EU AI Act can apply in Northern Ireland

Under the Windsor Framework, EU rules listed in or connected with the applicable product-law instruments can continue to govern goods placed on the Northern Ireland market. The UK guidance explains that parts of the AI Act apply where they amend, replace or relate to EU product legislation that applies in Northern Ireland.

The practical test is therefore not simply whether a business is based in Northern Ireland or uses AI. The central questions are whether the activity concerns a physical product placed on the Northern Ireland market and whether the AI system is closely integrated with that product.

A standalone chatbot, cloud service or internal software tool is not brought within this Northern Ireland route merely because a Northern Ireland user can access it. Conversely, a manufacturer or other economic operator outside Northern Ireland may need to assess the rules if it places an in-scope AI-enabled physical product on that market.

Which duties start on 10 November 2026

The Government's timetable identifies three categories beginning today for relevant closely integrated products: Article 5 prohibited practices, Article 4 AI literacy and Article 50(1) disclosure when people interact directly with an AI system.

Article 4 requires providers and deployers to take measures supporting the AI literacy of staff and other people operating or using the system on their behalf. The amended provision is contextual and does not require a guaranteed individual level of competence, but a generic annual training slide is unlikely to evidence a risk-sensitive programme by itself.

Article 50(1) generally requires providers of AI systems intended to interact directly with natural persons to design them so people are informed that they are interacting with AI, unless this is obvious to a reasonably well-informed, observant and circumspect person in the circumstances. Specific law-enforcement exceptions remain subject to the Regulation's terms.

Article 5 contains prohibited practices. In Northern Ireland, the guidance links the relevant prohibition to an AI system closely integrated into a physical product placed on the market. Businesses should test the precise function and exemptions rather than treating an ordinary risk classification as sufficient.

The later dates matter

The remaining timetable is staggered. For relevant products already placed on the market before 2 August 2026, the Article 50(2) obligation to mark AI-generated content begins on 2 December 2026. The new prohibitions concerning systems that generate non-consensual intimate material or child sexual abuse material also apply from that date.

Rules for Annex III high-risk use cases are scheduled to apply in this Northern Ireland context from 2 December 2027. Rules for high-risk AI systems used as safety components of products covered by Annex I are scheduled for 2 August 2028.

These future dates are not a reason to postpone scoping. Product classification, supply-chain information, technical documentation and contract changes often require work well before a legal duty begins.

Roles across the product supply chain

The guidance is relevant to developers, deployers, manufacturers, authorised representatives, importers and distributors. Their duties are not identical. A business should identify its legal role for each product and route to market rather than relying on its commercial label.

A distributor may become a provider in circumstances specified by the Act, including certain rebranding or substantial modification scenarios. Contracts should therefore address product changes, AI-system updates, compliance information, incident escalation and cooperation with market-surveillance authorities.

The Northern Ireland route also creates a territorial scoping issue for Great Britain businesses. A company does not avoid the analysis merely because its headquarters, engineering team or warehouse is in England, Scotland or Wales if the relevant product is placed on the Northern Ireland market.

Practical actions for AI product businesses

  1. List every AI-enabled physical product supplied or intended for supply in Northern Ireland, including products sold through distributors and online channels.
  2. Record whether the AI system is closely integrated into the product and which applicable EU product-law instrument creates the Windsor Framework connection.
  3. Identify the provider, manufacturer, importer, distributor, authorised representative and deployer for each route to market.
  4. Screen functions against Article 5 and document why no prohibited practice is present or which narrowly defined exception is relied upon.
  5. Implement role-specific AI-literacy measures covering the system's purpose, limitations, foreseeable misuse, escalation and human oversight.
  6. Test the user journey for Article 50(1) disclosure, including onboarding, voice interaction, displays, packaging and accessibility.
  7. Add contractual duties for technical information, change notification, compliance evidence, incidents, corrective action and authority cooperation.
  8. Create separate release gates for Great Britain, Northern Ireland, the EU and other markets where the legal scope or start dates differ.
  9. Prepare now for the 2 December 2026 marking deadline where Article 50(2) may apply to relevant products.
  10. Keep a dated scoping record. A conclusion that the Northern Ireland route does not apply should be supported by the product, integration and market evidence on which it depends.

The compliance conclusion

Today's development is narrower than general application of the EU AI Act across Northern Ireland, but it is binding for products within its scope. The distinction between standalone software and AI closely integrated into a physical product is therefore commercially and legally important.

For founders and product teams, the immediate priority is a route-to-market map that connects each product, AI function, legal role and territory to the correct obligation and date. Broad statements that the AI Act either fully applies or does not apply in Northern Ireland are both liable to mislead.

Legal position and sources reviewed on 10 November 2026. This article provides general information only and does not constitute legal advice on any particular product, supply chain or market entry.

This article provides general information and does not constitute legal advice on a specific matter. Legal obligations depend on the facts and the applicable law.