Does the EU AI Act apply to my Northern Ireland business? What the new UK guidance says

The UK government published guidance on 4 November 2026 explaining how the EU AI Act applies in Northern Ireland "in a specific and limited way under the Windsor Framework from 10 November 2026". The 32-page document, from the Department for Business, Innovation, Science and Trade, gives its headline answer early: "standalone software, online AI tools and apps are generally out of scope of these requirements. The EU AI Act rules will only apply where AI systems are closely integrated with a physical product."

Why the Act reaches Northern Ireland at all

The guidance explains that "Northern Ireland continues to follow EU rules in certain areas so that goods can move with dual market access to both the EU single market and the UK internal market." It says the arrangements follow an exchange of views the UK Government requested on 29 April 2025 in the UK-EU Withdrawal Agreement Joint Committee, and that "The EU AI Act is added to the Windsor Framework from 10 November 2026, with important exemptions on its scope which makes its application more limited in Northern Ireland than in the EU."

It is explicit that this is partial: "The EU AI Act does not apply to NI in full."

The test: is the AI "closely integrated"?

The guidance says an AI system "will normally be considered closely integrated" where either condition is met by the manufacturer:

• Condition A: "The AI system is embedded or pre-installed in the physical product when it is placed on the market"
• Condition B: "The AI system is downloaded separately, and the product is specifically designed to be used by that system only to carry out the product’s intended functionality."

It adds that an AI system being supplied by the same manufacturer, or working only with that product, "does not by itself mean that the AI system is closely integrated with that product."

The guidance's own examples

In scope (closely integrated):

• A smart speaker sold with a built-in AI voice assistant (Condition A).
• A smartwatch that needs the manufacturer's AI health-monitoring app, downloaded during setup, for its advertised health features (Condition B).
• A laptop on which the manufacturer installs a generative AI chatbot before sale. The guidance says the chatbot is then "a limited-risk AI system which must meet some transparency requirements".
• Also: a gas boiler with embedded AI to prevent carbon monoxide leakage, and an AI medical imaging device.

The guidance cautions that its in-scope table "includes examples that may not be high-risk or even be subject to any AI Act requirements, depending on the detail".

Out of scope:

• A chatbot a user downloads onto a laptop after purchase.
• An optional AI recipe app from a smart speaker's own maker, and an optional third-party fitness app on a smartwatch.
• A standalone AI recruitment tool used by an employer.

What does not apply

The guidance lists three exclusions: standalone or downloadable AI software, "including AI accessed via a web browser, app, or API", unless closely integrated with a physical product; use or deployment of AI, apart from duties on deployers of in-scope high-risk systems to monitor them and report risks or incidents to the provider; and "Direct regulatory obligations or voluntary codes of conduct for GPAI model providers". Its plainest line for most firms: "the EU AI Act would not affect an NI business simply because it uses online or downloadable AI tools to manage work, analyse data, or carry out business functions."

What starts when

From the guidance's timeline:

• 10 November 2026: Article 5 prohibited practices (for providers who closely integrate a prohibited AI system in a physical product placed on the NI market), Article 4 AI literacy, and Article 50(1) disclosure that users are interacting with AI (both for providers who place a closely integrated physical product on the NI market).
• 2 December 2026: the prohibitions on generating non-consensual intimate imagery and child sexual abuse material, and Article 50(2) marking of AI-generated content.
• 2 December 2027: Annex III high-risk use cases, where closely integrated with a physical product.
• 2 August 2028: Annex I high-risk products, such as toys, lifts and medical devices, where AI is a safety component and third-party conformity assessment is required.

The guidance notes that "Prohibitions on the use of AI do not apply in NI". It also says a European Commission proposal, if adopted, "would mean the AI Act’s high-risk obligations do not apply directly to medical devices."

Who it affects

The guidance says it is "primarily for" manufacturers of physical products with AI placed on the NI market, importers, distributors, and "Providers and deployers in some instances". It says the obligations "fall mostly to providers, product manufacturers, authorised representatives, importers or distributors of physical products". Most deployer requirements are out of scope; the guidance says the exception is that deployers of high-risk systems must monitor them and inform providers of serious incidents, malfunctions or risks.

On our reading, because the duties attach to placing a product on the NI market, a business based in Great Britain that sells in-scope products into Northern Ireland should check the guidance too; the guidance itself does not address GB sellers separately.

What the guidance tells businesses to do

• If your product is in scope, work out whether you are a manufacturer (or "provider"), distributor or importer, then categorise the AI system by the Act's risk categories.
• "Businesses should keep records of major updates and how those updates affect the product’s intended use and AI functionality."
• If a closely integrated product is prohibited and already on the NI market, "you should expect to withdraw that product from the market immediately", recall it from users and, if possible, disable the prohibited feature; the guidance says you will also need to inform your supply chain and report to the relevant market surveillance authority.
• Annex I manufacturers should check whether the AI performs a safety function and whether the product needs third-party conformity assessment; if both, "you should begin preparing for obligations related to high-risk AI systems."
• On Annex III: "If you are uncertain, seek professional advice and monitor EU guidance as it develops."

Where to get help

The guidance says "European Commission guidance remains the main technical and legal reference" and points to the Commission's EU AI Act Service Desk and Compliance Checker, and GOV.UK guidance on placing CE-marked products on the NI market. It does not name a UK helpline. Our own note: the guidance does not replace legal advice.

Why it matters

On our reading, the guidance means simply using online or downloadable AI tools does not bring a Northern Ireland business into scope; the obligations fall mostly on those who make, import or distribute AI-enabled physical products, starting on 10 November 2026.