Summary

• The UK and EU intend to apply the AI Act in Northern Ireland only to the placing on the market of physical products with closely integrated AI systems.
• Standalone software, web applications, and general-purpose models will generally fall outside the Northern Ireland-specific arrangements.
• The Windsor Framework decision is planned for 10 November 2026, while individual AI Act obligations retain their applicable implementation dates.

Northern Ireland will face a limited application of the European Union’s Artificial Intelligence Act under a planned Windsor Framework agreement, with obligations targeted at physical products incorporating closely integrated AI systems rather than the broader range of software covered by the legislation across the EU.

The Department for Business, Innovation, Science and Trade published guidance on 4 November explaining which businesses and products could fall within the arrangement. The UK and EU intend to adopt the relevant decision at a Withdrawal Agreement Joint Committee meeting on 10 November.

The proposed approach is designed to preserve Northern Ireland’s access to the EU market for relevant physical goods without extending the complete AI Act to ordinary software development and use within the region. Most standalone AI software, online applications, and general-purpose models will remain outside the legislation as applied through the Windsor Framework.

The distinction is narrower than the EU’s wider regulatory framework, which applies requirements according to the type of AI system, its intended use, and the risks involved. Businesses operating in Northern Ireland will need to determine whether particular products fall within the targeted arrangements rather than assuming that every application incorporating AI faces the same obligations.

Physical products determine the local scope

The EU AI Act establishes requirements for systems whose use could create unacceptable or significant risks, alongside more limited transparency duties for selected other applications.

Across EU member states, those rules can apply to software supplied independently of physical equipment. The Northern Ireland arrangement instead concentrates on AI systems closely integrated into physical products covered by the relevant Windsor Framework provisions.

That could affect manufacturers supplying equipment where AI performs functions directly connected to the product’s operation or safety. Whether an individual system falls within scope will depend on the applicable definitions and the regulatory framework governing the product.

An organisation developing a general-purpose chatbot, for example, would not normally become subject to these specific Northern Ireland arrangements simply because the software was developed or used in the region.

The position can differ where the same organisation supplies products or services into EU markets. The EU AI Act may apply through the rules governing those markets, independently of the narrower Northern Ireland-specific arrangement.

Geography is therefore not the only consideration. Developers and manufacturers need to examine where a product is placed on the market, what functions its AI performs, and how closely the system is integrated with regulated equipment.

The government’s guidance addresses the responsibilities of developers, deployers, manufacturers, importers, and distributors. Each may have different obligations depending on its role in the supply chain and the classification of the relevant product.

Risk classification remains important

The EU AI Act distinguishes between prohibited practices, high-risk systems, and certain systems carrying transparency obligations. The requirements imposed on an affected product will depend on the category into which the relevant AI falls.

High-risk requirements can include risk management processes, technical documentation, data governance, human oversight, and measures addressing accuracy, robustness, and cybersecurity.

These controls are intended to address systems where AI behaviour could affect safety or other protected interests. For physical products, manufacturers may need to consider the AI component alongside the wider product’s existing safety and conformity requirements.

However, the use of AI does not automatically make a product high risk. Classification depends on the specific legal criteria and the function performed by the system, while the relevant obligations may also be subject to transitional provisions.

The government expects relatively few products currently supplied in the affected sectors to fall into the prohibited or high-risk categories. It also considers many suppliers already active in EU-facing markets likely to have compliance arrangements relevant to the new requirements.

Those assessments provide context for the government’s expectation of limited additional burdens, but they do not establish that every affected business will incur negligible costs. Individual suppliers may still need to review documentation, responsibilities, and the compatibility of their existing procedures with the applicable provisions.

Windsor Framework arrangements shape the decision

Northern Ireland occupies a distinctive position under the Windsor Framework because specified EU rules continue to apply to goods while the region remains part of the UK’s internal market.

On 4 November, Minister of State Hamish Falconer told Parliament that the government had negotiated a restricted application of the AI Act rather than accepting the full regulatory framework.

The government argues that applying the complete legislation would have gone beyond what was required to maintain an open border on the island of Ireland, particularly because standalone software businesses are not subject to the same product-related arrangements.

The proposed decision therefore limits the Northern Ireland application to placing physical products with closely integrated AI on the market. Its purpose is to retain consistency for affected goods while avoiding a wider set of obligations for locally developed AI applications.

Ministers have stated that the arrangement will not create a new regulatory border between Great Britain and Northern Ireland. That is the government’s assessment of the negotiated scope, rather than confirmation that every manufacturer can continue operating without reviewing its compliance responsibilities.

The parliamentary statement also provides for explanatory material setting out the government’s assessment of the decision’s effects on the UK internal market.

Businesses supplying goods across several markets may already need to manage differences between UK and EU product requirements. The new guidance provides another basis for identifying when AI-related rules affect those products and how obligations should be allocated within their supply chains.

Software developers retain separate responsibilities

The limited Windsor Framework arrangement does not exempt Northern Ireland businesses from other laws governing technology, information, and product safety.

Data protection, consumer protection, sector-specific requirements, and existing product regulations continue to apply where relevant, regardless of whether an AI application falls within the Northern Ireland-specific provisions of the EU Act.

Nor does the arrangement remove the obligations of businesses supplying AI systems directly into the EU. A software company based in Belfast may need to consider the EU AI Act when offering a regulated system to customers in member states, even where the same software is outside the local Windsor Framework scope.

Commercial arrangements can therefore require different assessments for different destinations. Manufacturers, software developers, and distributors serving both the UK and EU markets will need to distinguish the requirements applying to each product and transaction.

This creates a practical need for accurate product classification and documentation. Suppliers should be able to identify the AI component, its intended purpose, the role it performs within a product, and the regulatory rules governing the relevant market.

Where several businesses contribute to the same product, responsibility may also depend on who develops the AI, who integrates it into the finished equipment, and who places that equipment on the market.

Implementation depends on the forthcoming decision

The next formal step is the planned Joint Committee meeting on 10 November, at which the UK and EU intend to agree the targeted application of the legislation.

The government’s guidance describes the arrangements as applying from that date, but the specific obligations attached to different categories of AI systems remain governed by their applicable implementation schedules.

Consequently, 10 November should not be treated as a universal deadline requiring every affected manufacturer to complete compliance with every provision of the EU AI Act.

The agreed scope will provide a starting point for businesses assessing whether their products are covered, with further work needed to identify individual obligations and the dates on which they apply.

The approach preserves a limited connection between Northern Ireland’s product market and the EU’s AI regulatory framework without extending its complete software regime to the region. Its commercial effects will become clearer as suppliers classify their products, review their responsibilities, and prepare for the relevant requirements.