The EU’s new AI Act is now in effect and will have a broader impact on Swedish companies than many realize. Far from all organizations understand the full scope of the law or the extent of its requirements. The consequence is growing concern among experts: Swedish businesses are generally unprepared, and the effects may be both legal and commercial.
A common misconception is that the AI Act primarily targets technology firms. In reality, any organization that uses AI in any capacity is covered, regardless of industry. This includes areas such as HR and recruitment, marketing, customer service, credit assessments, security systems, analytics tools and decision support. In short: if a company uses AI in any form, the law affects it.
Few companies have an overview of their AI use
One of the biggest challenges is that most companies do not know exactly where and how AI is used across their organization. AI is often embedded into systems and services without clear documentation. Many already rely on automated features within SaaS solutions without realizing they fall under the regulation.
This creates a critical risk. The AI Act requires companies to maintain:
• clear documentation of data and how models function
• quality-assured data and transparency about its use
• logs and the ability to trace decisions
• processes for model monitoring
• clear human oversight and defined accountability
Most companies lack these elements entirely.
The consequences? High fines, suspended systems, operational disruptions and substantial costs to retrofit technology. This is no longer only a legal compliance issue: weak AI governance quickly becomes a business problem.
Organizations that fall behind risk losing competitiveness as better-prepared players build robust processes, improved data governance and more reliable decision models.
Risks are both legal and commercial
The shortcomings are not limited to fines, although those can be substantial. The AI Act empowers authorities to impose significant sanctions depending on the type of violation and the assessed risk level.
Equally important are the business risks:
• Projects can be paused or halted
• External providers may need to be replaced
• Systems may become unusable if they fail to meet requirements
• Decisions may become unverifiable, undermining trust
• Customer relationships can suffer if automation lacks transparency
Companies that rushed to implement AI without foundational work are now at greatest risk. At the same time, the law creates competitive advantages for those who act promptly.
Opportunities for organizations that take AI governance seriously
Despite the challenges, there is a clear upside: companies that systematically invest in AI governance will be able to scale their AI use faster, more safely and more sustainably. By putting order into data, establishing controls, documentation and clear accountability, companies will also gain:
• stronger trust from customers, employees and investors
• a faster path to approved AI solutions
• improved quality of decision support
• reduced risk of incorrect or biased decisions
• the ability to adopt more advanced AI systems in the future
The AI Act does not halt progress. It only slows down companies that have not done their homework.
What companies need to do now
Here are four essential actions Swedish companies must prioritize immediately:
1. Map all AI across the organization
Inventory all systems, tools and automations that use AI. Most organizations lack visibility into which AI functions are used and by whom. Visibility is the first step.
2. Establish basic data governance
Classify data by sensitivity, quality, provenance and storage. Companies must be able to demonstrate how data is managed and documented, otherwise AI systems cannot be approved.
3. Implement processes for human oversight
AI must not be a black box. Decisions need to be explainable, and organizations must be able to intervene when models err. Human oversight is a legal requirement.
4. Audit suppliers and third-party systems
Many companies rely on off-the-shelf cloud AI solutions that may not meet the requirements. Businesses must ensure suppliers comply with regulations, because liability ultimately falls back on them.
Conclusion
The AI Act will not stop innovation. But it will stop companies that are not prepared. Those who act now will be stronger commercially and competitively. Those who wait risk legal setbacks, higher costs and a lost market position.
“Companies that take control of their AI use today will be tomorrow’s winners.”
Richard Ford, Chief Technology Officer, Integrity360