‘Death by Documentation’? How the EU AI Act Is Changing My Work—From Client Projects to the AI Classroom

Sunday Reflection — 2026-08-23

This week, three different clients called about AI plans—none wanted to talk LLMs or use cases. They wanted compliance templates. There’s a new fear running through German IT. The big question isn’t “What can we build?” but “How do we keep this legal?” The EU AI Act’s implementation isn’t coming—it’s here, and it’s already visible in every planning meeting, every project kickoff and, more than I ever expected, in the classroom.

I remember six years ago guiding a client through their first chatbot project. We focused on rough prototypes and user feedback. Nobody asked for a data protection impact assessment or model risk register. Last week’s workshop took twice as long—half the time dedicated to filling out what now feels like an endless pile of forms. The real friction isn’t AI itself; it’s the creeping documentation that comes bundled with the “risk management” banner. My students in Berlin now spend more time mapping hypothetical harms on spreadsheets than testing ideas. I can see the spark dim a bit when paperwork edges out experimentation.

mermaid flowchart LR A[AI Project Idea] --> B[Compliance Checklist] B --> C{High or Low Risk?} C -- High --> D[Full Documentation, Review, Delay] C -- Low --> E[Basic Records] D --> F[Possible Paralysis] E --> G[Proceed (Still Slower Than Before)]

There’s a German logic to this: get the paperwork sorted, keep the regulators at bay, avoid surprises. The British side of me sees the downside. Back in the UK, we’d have skipped half these steps, built something thin, and fixed it in testing. Here, risk gets squashed before it has the chance to become value. I watch students and team leads freeze up, unsure what’s allowed. Is this high-risk? What’s a “systematic monitoring of private spaces”? The law hardly clears it up.

The reality is, every stage drags a bit more. The Act hasn’t made work safer or smarter—just slower. If you’re trying to stay afloat, keep the focus narrow: document what’s clear, flag grey areas, but don’t grind projects to a halt. The best I can offer clients and students: treat compliance as scaffolding, not shackles. The balance is thin, and I’m not sure Brussels thought it through. The real test isn’t whether we collect the right forms—it’s whether anyone builds anything at all.