Blog
EN ES

EU AI Act for Real Estate: Your 90-Day Compliance Checklist

On 2 August 2026, the EU AI Act's transparency obligations for real estate chatbots become enforceable. Here's the 8-step checklist, the AI disclosure template, and the real penalties.

EU AI Act for Real Estate: Your 90-Day Compliance Checklist

The countdown has started

On 2 August 2026, the transparency obligations of the EU AI Act for limited-risk AI systems become enforceable. That’s the date any real estate brokerage operating in or serving the European Union with a chatbot, virtual assistant, or AI agent becomes auditable.

Fewer than 100 days remain.

This isn’t a draft. It isn’t a proposal. It’s a regulation with concrete penalties and active national authorities — including AESIA in Spain, operational since June 2024 with more than a dozen published compliance guides. Full sanctioning powers depend on each Member State’s national AI law, but pressure from user complaints and GDPR overlap is already real.

If you’ve deployed a chatbot to handle property inquiries from EU buyers, this article is the exact task list to close before 2 August.

If you want the full background on what the EU AI Act is and how it classifies AI systems, start with our introductory article on the EU AI Act for real estate. This post focuses on what to do.

Why this matters even outside the EU

The EU AI Act has extraterritorial reach. The rule isn’t “where is the company headquartered” — it’s “where is the system being used.”

If a Dubai brokerage runs a chatbot that responds to inquiries from buyers in Madrid, Munich, or Milan, that brokerage falls under the Act for those interactions. The same applies to off-plan developers marketing internationally and to property managers serving EU residents who own in the UAE.

For UAE-based agencies with European clientele — which describes most of the off-plan and luxury market — this is not optional.

What exactly changes on 2 August

The European regulation (Regulation EU 2024/1689) entered into force in August 2024 and applies in phases. The dates that matter for real estate:

DateWhat becomes enforceable
February 2025Prohibitions (unacceptable-risk systems)
August 2025Obligations for general-purpose AI (GPAI) models
2 August 2026Transparency for limited-risk systems
August 2027Full requirements for high-risk systems

Mark 2 August 2026 in red. That’s when Article 50 of the Regulation becomes fully enforceable — and Article 50 is precisely what regulates real estate chatbots and AI agents.

What Article 50 actually requires (the two hard obligations)

1. The lead must know they’re talking to an AI

This is the most visible obligation and the easiest to audit. Article 50.1 of the Regulation is clear: when a person interacts with an AI system, they must be informed of it “unless this is obvious from the context.”

In practice:

2. AI-generated content must be marked as such

Article 50.2-50.4 requires labeling any synthetic content delivered to a person as AI-generated: brochures, property descriptions, follow-up emails, translated content, personalized documents. The label can be a textual disclaimer, embedded metadata, or both. The European Commission published a first draft of the Code of Practice on marking and labeling AI-generated content in December 2025; the final version is expected in June 2026, and signatories will be granted a presumption of compliance with Article 50.

Best practices regulators and your DPO will expect (even if Article 50 doesn’t strictly require them)

There are two more things regulators, your DPO, and your own clients will expect — not because Article 50 demands them for limited-risk systems, but because they overlap with GDPR and with the human-oversight standard set by Article 14 (which technically applies to high-risk systems but defines the reference bar).

Effective human handoff and oversight

A disclaimer alone isn’t enough. There must be a real mechanism for a human to review, intervene, or take over when needed:

This sits more on the GDPR side (automated decision-making, right to human intervention) than strictly on Article 50, but you want it solved to avoid complaints.

Logging and traceability

Article 50 does not impose formal documentation obligations on deployers of limited-risk systems (Article 11 does, but only for high-risk). Even so, you should keep:

This covers both GDPR and the contractual obligations you have toward your AI provider — who has stronger documentation duties under the Act and from whom you should request a conformity sheet.

The penalties are real

The EU AI Act’s enforcement regime is one of the most severe in European regulation, comparable to GDPR:

Type of violationMaximum penalty
Prohibited practices (Art. 5)Up to €35M or 7% global turnover
Non-compliance with obligations (incl. transparency)Up to €15M or 3% global turnover
Incorrect information to authoritiesUp to €7.5M or 1% global turnover

SMEs and startups have a proportional regime — the lower of the two amounts applies — but a 3% fine on a €5M-turnover agency is still €150,000. And that’s before you count the reputational damage of appearing on a public register of sanctioned entities.

For larger brokerages and developers serving EU buyers, the math is harsher.

Practical 90-day checklist

Week 1: Inventory and diagnosis

Weeks 2-4: Visible transparency

Month 2: Internal documentation

Month 3: Training and final review

AI disclosure templates

Use these as-is or adapt to your brand voice — but keep the substance.

For the web chatbot

“Hi, I’m [Agency]‘s virtual assistant. I’m powered by AI and can help you with property questions, search, and viewing scheduling. If at any point you’d prefer to speak with a human agent, type ‘speak to a person’ and I’ll connect you with our team.”

For the WhatsApp first-message

“Hi! I’m [Agency]‘s automated assistant, available 24/7. If you’d like to speak with a human agent, reply ‘human’ and I’ll connect you in business hours (Mon-Fri, 9am-6pm).”

“This message was drafted with AI assistance and reviewed by [Agency]‘s team.”

For an AI-generated brochure or document

A visible line at the document footer:

“Document generated with AI technology. Data verified by [Agency] on [date].”

How PropPilot covers this by default

If you use PropPilot, the three most operational items on the checklist are handled out of the box:

This doesn’t remove your responsibility as deployer. What stays on your side: team training, your own internal compliance documentation for the DPO, an updated privacy policy, and periodic compliance review (recommended every 6 months, not strictly required).

Want the full checklist as a downloadable PDF and the detailed implementation guide? Get the free EU AI Act Compliance Guide for Real Estate.

The hidden opportunity

Compliance usually reads as a cost. But brokerages that worked through GDPR already know the pattern: the first wave of compliance is painful, the second is competitive advantage.

Three effects we’re already seeing in clients who moved early:

Brokerages that arrive at 2 August without having touched the topic will hear about compliance from a regulator’s notice or a bad public review. Those who arrive prepared will have a quiet, durable advantage.

Frequently asked questions

Does this apply if I’m a solo agent or two-person agency?

Yes. The EU AI Act applies to any natural or legal person deploying an AI system in the EU, regardless of size. There are modulations for SMEs and microenterprises in documentation and penalty regimes, but no general exemptions.

What if I use ChatGPT or Claude directly without a dedicated chatbot?

If your team uses general-purpose models for internal tasks (drafting, translation, summarization), the obligations fall mainly on the model provider (OpenAI, Anthropic). But if you paste model output into a lead’s email without modification, you should mark it as AI-assisted content.

What if the chatbot is provided by a third party like PropPilot or another SaaS?

You’re still the deployer and retain your own obligations: transparency to the lead, human oversight, privacy policy. The provider has complementary obligations and must give you conformity documentation. Make sure to require it in the contract.

What happens if I’m not compliant on 2 August?

The relevant national authority (AESIA in Spain, similar bodies in other Member States) can open an inspection and a sanction file, though full sanctioning powers also depend on each country’s national AI law — several of which were still being finalized as of early 2026, and no Member State had issued formal EU AI Act fines by March 2026. The pragmatic reality of the first months: most pressure will come from dissatisfied lead complaints rather than spontaneous inspections. The cost of compliance is low. The cost of non-compliance is asymmetric.

Conclusion

2 August 2026 isn’t a distant date. It’s 90 days, and most of the work concentrates in the first 4 weeks: inventory, visible AI disclosure, and human handoff configuration.

The EU AI Act doesn’t ban AI in real estate. It sets the rules for using it well — with transparency and traceability. Brokerages that move first will build more trust, close more deals with qualified buyers, and differentiate from those still operating in the grey zone.

Want to validate your current compliance? Request a free EU AI Act compliance review and get a report with the checklist applied to your specific agency.

Want to see PropPilot in action?

Respond to every lead in 3 seconds, 24/7. Book a personalized demo.

Request demo