Skip to content
Why Group
All posts
Governance & ethics2 min read

AI governance is a leadership decision, not a compliance checkbox

The EU AI Act’s first obligations already apply, and the high-risk rules have been pushed back to 2027–2028. Waiting for the deadline is the wrong strategy: how a company governs AI is a question of values.

Vivara® Team
AI governance is a leadership decision, not a compliance checkbox

The EU Artificial Intelligence Act is the world’s first comprehensive AI law, and its obligations are arriving in stages:

  • Since 2 February 2025, prohibited AI practices are banned and organisations must ensure AI literacy among staff who use AI.
  • Since 2 August 2025, obligations for general-purpose AI models apply.
  • In November 2025 the Commission proposed a “Digital Omnibus” that moves high-risk obligations from August 2026 to December 2027 for standalone systems and August 2028 for AI embedded in regulated products; reports in mid-2026 indicate the deferral has been approved.

Why the delay shouldn’t change your plans

A later deadline gives more time to prepare — not a reason to wait. Customers, employees and regulators outside Europe are already asking the same questions: Where is AI used in decisions about people? Who is accountable when it is wrong? Can you explain the result?

Meanwhile, McKinsey’s 2025 survey found that only about 6% of organisations are AI “high performers”. Those organisations are more likely to have clear governance — defined owners, human oversight and processes for scaling what works.

Governance as values in practice

At Why® Group, we test AI decisions the same way we test every major decision, through Vivara®:

  • Vision: does this use of AI serve a clear purpose, or are we automating because we can?
  • Value: can we measure the benefit — for customers, employees and the business?
  • Wisdom: is it fair, explainable and respectful of the people it affects? Who reviews it?

A starting checklist

  1. Inventory where AI is used, including inside purchased software.
  2. Assign an accountable owner for each use case.
  3. Train staff — AI literacy is already a legal duty in the EU.
  4. Keep a human in the loop for decisions about people.
  5. Review and record decisions, so you can explain them later.

Explore the Vivara® decision framework.

Sources

Topics#AI governance#EU AI Act#ethics#leadership#risk

Written by

Vivara® Team

Related articles