Slotozilla
How a Wave of European AI Regulation in 2026 Is Changing Marketing for Small Businesses
Title: How the EU AI Act Is Changing Marketing for Small Businesses in 2026
Description: The EU AI Act introduces new rules for AI use in marketing. It targets small businesses and includes provisions for transparency, compliance, and risk management. Understand its impact.
How a Wave of European AI Regulation in 2026 Is Changing Marketing for Small Businesses
The EU AI Act 2026 is considered the world's first comprehensive regulatory framework covering the use of artificial intelligence. Under this Act, certain AI uses are outright banned, while others are subject to strict governance, and, in some cases, additional transparency and risk management requirements are imposed. Let’s take a look at what the EU AI Act entails.
Applying to Multiple Operators in the AI Value Chain
Providers, employers, importers, distributors, and product manufacturers are among the operators in the EU that will need to comply with the new rules under the latest EU AI regulation. Here are a few definitions of the most notable types of operators:
Providers: Can be people or organisations that develop, or have it developed on their behalf, AI or general-purpose AI models. An AI system is a system that processes inputs and generates outputs (predictions, recommendations, decisions, etc.) that can influence both digital and physical environments.
Employers: People or organisations that use those AI systems. For example, it is not uncommon for brands to use third-party AI chatbots to handle customer service inquiries.
Importers: People or organisations within the EU that bring AI systems from companies outside the EU.
The Impact of the EU AI Act on UK Businesses
As briefly noted above, the new AI regulation applies to organisations outside the EU. This occurs when their AI or its outputs are used in the European Union.
For example, this regulation applies when an EU company sends data to a UK-based AI provider, which then uses AI to process it and return the output to the EU for widespread use. Because the AI system's output is used within the European Union's borders, the UK-based provider remains subject to the EU AI Act.
Note that providers in the UK, or any other country outside the EU, must designate authorised representatives in the European Union, who will coordinate compliance matters and efforts.
Prohibited AI Practices
Under the new EU AI Act, certain artificial intelligence practices are prohibited due to an unacceptable level of risk. For example, AI systems cannot be used to manipulate people into making harmful choices they wouldn’t make without its help. Here, the EU Commission has the right to amend the prohibited practices, but for now, here are the ones that stand:
Social scoring systems: A system that evaluates people based on their social behaviour, and which can lead to unfavourable social treatment. These provisions also apply to automated marketing.
Emotion recognition systems: Unless they are used for medical or safety purposes.
Exploiting vulnerability: AI systems that leverage characteristics such as age or disability are prohibited.
Unlawful facial recognition: Scraping facial images on the internet or CCTV.
img
A Particular Focus on Small Businesses – Provisions Tailored to SMEs
Similar to the GDPR, the new Act can spur the development of AI governance and ethics standards across small and medium-sized enterprises. This new Act has a particular focus on SMEs, as there is a range of measures that are specifically designed to support SMEs’ compliance with the new standards:
Regulatory sandboxes: SMEs will have priority and free access to sandboxes, with all procedures being clear and simple. These are frameworks for testing AI products and services outside standard regulatory structures.
Reducing compliance fees: Assessment fees are designed to be proportional to enterprise size. The Commission assesses compliance costs.
Standard setting: To make sure that the perspectives and objectives of SMEs are weighed in the standard-setting process. Both the EU Commission and the EU states must include SMEs in the development process.
Documentation and training: The EU Commission will have simplified documentation forms for SMEs. It will also provide training facilities to support compliance with AI tools.
Communication: Dedicated channels of support will exist, through which SMEs will have an easier time complying with the new Act.
Proportionality: Obligations must be proportionate to the model provider's type. As an example, there will be Key Performance Indicators for SMEs under the Code of Practice.
Transparency at the Core for SMEs
In addition to the prohibited AI practices mentioned above, the new EU AI Act will affect how businesses conduct their digital marketing and SME strategy. A great focus is put on transparency here:
Chatbots regulation: Companies must clearly state when a customer interacts with an AI-powered system.
Human oversight: Every customer must have the chance to opt out of AI support or content and receive human-led assistance.
AI content: Companies must be transparent about using AI for content creation.
This emphasis on openness and clarity in digital services is evident in practice. For example, online platforms such as Slotozilla provide accessible, clear information and comparisons for users, illustrating how transparency helps build trust and supports informed decision-making. Such approaches align closely with the EU AI Act’s goal of ensuring accountability in AI-driven interactions.
High Risk AI – A Big Hurdle for Small Businesses
The AI Act classifies high-risk systems as those used in critical infrastructure, employment, essential services, and law enforcement. This can include AI systems that evaluate creditworthiness, job applications, or assist in judicial decisions.
These systems are subject to the most robust and stringent requirements under the new Act, as they require extensive technical documentation and robust risk management systems.
Not all apply to SMEs, but those that do can harm them. For example, if a medium-sized company starts a new hiring process and receives hundreds of resumes, its HR team may struggle to review them thoroughly.
The company may decide to implement an in-house AI screening system that is publicly available and trained on the resumes of past successful hires. This decision may seem innocuous, but it will place the company into a regulatory conundrum. A CV screener is considered a high-risk application of an AI, and as such, it must comply with specific requirements:
Implement a risk management system to monitor the AI tool.
Adopt data governance practices to ensure that testing data meets specific criteria.
Maintain comprehensive technical documentation about the system limitations, capabilities, and specifications.
The challenges facing SMEs are clearly acute. They are less likely than large companies to have access to the resources needed to adapt to new requirements and comply. These rules could see SMEs outsource AI compliance and even innovation to intermediaries. Another side effect is that SMEs may delay implementing valuable AI tools, potentially resulting in missed productivity gains.
Uncertainty in the UK – Forecasts for the EU AI Act
Whether it is small-business marketing or advanced AI tools, UK companies operating in the EU will need to comply with the new act. This may lead companies to face dual compliance by following both UK guidelines (which still allow regulators to oversee AI within their sectors, rather than creating a horizontal law) and the EU Act.
The lack of a detailed UK AI framework has raised some concerns recently, but some companies still see opportunities and are ready to reap the benefits, as they perceive the sector as more flexible.
Slotozilla Offices
Hybrid Workspace
Employees engage in a combination of remote and on-site work.
Typical time on-site:
United Kingdom