They Changed
the Rules While
You Were Creating.

You didn't sign up for compliance homework and neither did I,
but somewhere between shipping a client deck and prompting your fourth Midjourney variation, the EU quietly changed the legal ground under your feet.

The EU AI Act (Regulation 2024/1689) is the world's first comprehensive law governing artificial intelligence - and unlike most tech regulations, it doesn't just target the companies building AI. It reaches all the way down to anyone using AI tools professionally. That's me and you.

We're in March 2026 right now. Some of this law is already active. The rest lands in August. Here's where things stand:

So does this actually affect us?

My first reaction - it doesn't. This is for the big platforms, right? The OpenAIs and Adobes of the world?

Partly. But the Act draws a line between providers (companies that build AI systems) and deployers (anyone who uses them in a professional context). If you're a freelancer delivering AI-assisted work to clients, you're a deployer. That comes with real responsibilities, even at your scale.

The immediate obligations are actually pretty manageable: disclose when a deliverable includes AI-generated content, document that you understand the tools you're using, and handle client data responsibly. Nothing revolutionary - but if you're not doing it, you're now technically non-compliant.

Think of it like the shift when GDPR landed. At first it felt overwhelming. Then most people realised the practical steps were straightforward, especially at the freelancer and small studio level. This is the same energy, but a different vibe.

Here's what I keep thinking about.

Every time you open ChatGPT with a client brief, or drop confidential brand strategy into Midjourney, or ask Claude to rewrite copy for an NDA-covered campaign, that data leaves your machine. It travels to a server, usually in the US, where it may be stored, processed, and in some cases, used to train future models.

You didn't consciously sign up for that. Your clients definitely didn't. And under the EU AI Act and GDPR combined, this is becoming an active compliance risk, philosophical concerns aside.

I've been thinking a lot about running AI locally - on your own machine, with your data staying exactly where you put it. And I want to be honest rather than just enthusiastic about it, because the internet is full of people making it sound easy and accessible to everyone. It isn't always.

Running serious image generation locally does ask something of your hardware. A decent GPU helps a lot. Not everyone has that, and the machines that really fly with local AI are not cheap. I know that. You probably know that. So let's not pretend local AI is a magic solution that works the same way for everyone, because it doesn't.

But here's what I've actually found: smaller language models are genuinely impressive, and they run on surprisingly modest hardware. A mid-range laptop from the last three or four years can handle text tasks well. For a lot of what we do as creatives - drafting, summarising, brainstorming, rewriting - the gap between local and cloud has quietly closed. You don't need a workstation to get real value from this. You might be surprised by what the machine you already have can actually do.

Think of it like building your own Millennium Falcon rather than renting time on the Death Star. More setup, more control, and crucially - the Empire doesn't get access to your cargo. It might not look as polished as the cloud tools. It might take a weekend afternoon to figure out. But it's yours.

There's also a regulatory angle worth knowing: the AI Act gives significantly lighter obligations to open-source, locally deployed models. Less compliance overhead, more control over client data. That's a real practical reason to explore it - not just a technical hobby for people with expensive hardware.

Five things we have to do until the end of March

Change forces us to evolve. And sometimes that's a good thing: better habits, smarter tools and more honest practices. The creatives who get on top of this now are the ones who'll be advising their clients on it next year.

Personal perspective. Not legal advice. For compliance guidance specific to your situation, consult a qualified professional.

Borislav Sashov Ivanov is a creative designer based in Eschborn, Germany - working under the brand Sashov. This is the first post on sashov.tech, a new space for ideas, experiments, and honest takes on design and technology.