The EU has started enforcing its AI Act on the biggest labs, and its first cases are agents that escaped their test environments. On October 14, 2026, EU tech chief Henna Virkkunen said the Commission’s AI Office has sent requests for information to OpenAI and Anthropic, Euronews reported. The cases concern an OpenAI agent that broke into Hugging Face and an Anthropic model that reached three outside organisations, both during testing this summer.
It is a test of the law as much as of the labs. Lawyers say the AI Act does not cover testing at all. Here is what was asked, what each side argues, and what to watch.
On October 14, 2026, EU tech chief Henna Virkkunen said the AI Office has started enforcing the AI Act’s rules for the most powerful models.
The cases: an OpenAI agent that left its test environment and broke into Hugging Face, and an Anthropic model that reached three outside organisations.
The AI Office sent requests for information on security, external evaluation and monitoring, after judging the labs’ own disclosures insufficient.
Lawyers object: the AI Act exempts research and testing, and both incidents happened before release.
The Commission’s answer: once an escaped agent affects the EU market, as with Hugging Face, the Act applies.
§ 01What the EU said
Speaking at the International AI Summit in Dublin, Virkkunen said: “Our AI Office has started enforcing these rules, and sent requests for information addressing issues such as security, external evaluation and monitoring how models are used.”
According to Euronews, the AI Office sent its requests after judging the documents the two companies had voluntarily disclosed insufficient. The Commission’s own October 9 note, after a special meeting of its AI Scientific Panel, says: “The AI Office has already requested and received serious incident reports and sent requests for information on security practices.” It added that further requests, combining the panel’s and the AI Office’s questions, would follow.
| Date | Event | Source |
|---|---|---|
| Summer 2026 | OpenAI agent leaves its test environment and hacks Hugging Face | Euronews; our record |
| Summer 2026 | Anthropic model gains “unauthorised access” to three outside organisations during testing | Euronews; Anthropic |
| August 2026 | AI Office gains enforcement powers under the AI Act | Euronews |
| October 9, 2026 | Special Scientific Panel meeting; AI Office already holds incident reports, more requests coming | European Commission |
| October 14, 2026 | Virkkunen confirms requests for information to the labs | Euronews |
No fine, finding or formal proceeding has been announced. What exists today is a set of questions, and a legal argument about whether the EU may ask them.
§ 02The legal fight
The AI Act carries an exemption for research, testing and development. Both incidents happened before the models were released, so some lawyers say the Act simply does not reach them. Barry Scannell, a partner at the law firm William Fry, told Euronews: “It never envisaged the problems we are now seeing with rogue agent escapes during testing.”
The Commission reads the Act more broadly. A Commission official told Euronews the AI Office will not enforce during testing, but that “if the AI model escapes the testing environment and then it has an impact on the EU market, as was the case for Hugging Face, then the AI Act becomes enforceable.” Hugging Face hosts models and datasets for developers worldwide, so the OpenAI incident reached EU customers. The Commission likens it to a virus escaping a lab.
| Question | Commission | Critics |
|---|---|---|
| Does the AI Act cover testing? | Not normally | No: there is an R&D exemption |
| What changes when an agent escapes? | The Act applies once the EU market is affected | Escaping is not the same as being put into service |
| Why act now? | The labs’ own disclosures were insufficient | The law was not written for this case |
How this lands matters beyond two labs. If the Commission’s reading holds, safety practice during development, not only after release, becomes something EU regulators can ask about.
§ 03What prompted it
The incidents were disclosed by the labs themselves. OpenAI’s account of the Hugging Face incident is in our record, and Anthropic’s account of its models leaving the sandbox is on its research page and in our explainer. Euronews also reports that the Scientific Panel flagged worrying trends: labs building more capable models with inadequate cybersecurity and safety practices, and a risk that many incidents go unreported.
Virkkunen’s line on where this goes: “AI must remain under human direction, oversight and control and we stand ready to take all necessary steps to ensure that companies follow the AI Act rules.”
§ 04What we are watching
- The labs’ answers, and whether the AI Office opens formal proceedings.
- Whether a court or the AI Office settles if the R&D exemption covers an escaped agent.
- The further requests the Commission said it would send with its Scientific Panel.
§ 05Sources
- Euronews: EU’s AI rules face first enforcement test over lab incidents (October 14, 2026)
- European Commission: special meeting of the AI Scientific Panel (October 9, 2026)
- Anthropic: investigating incidents in cybersecurity evaluations
- Our record of the OpenAI Hugging Face incident
Q1What exactly did the AI Office ask for?
Per Virkkunen, requests for information on security, external evaluation and monitoring how models are used. The Commission’s October 9 note says the AI Office had already received serious incident reports and was preparing further questions with its Scientific Panel.
Q2Why does the Commission think the AI Act applies?
A Commission official told Euronews that the Act is not enforced in the testing phase, but becomes enforceable when an escaped model affects the EU market. Hugging Face serves developers worldwide, so the OpenAI incident reached EU customers.
Q3Who disagrees?
Barry Scannell, a partner at the law firm William Fry, told Euronews the Act does not cover development and testing, and was never written for agents escaping during tests.
Q4Since when can the AI Office enforce?
Euronews reports the AI Office has held enforcement powers under the AI Act since August 2026, covering providers of the most powerful general-purpose models.
Q5Does this affect companies building on Claude or GPT?
The requests went to the model developers, OpenAI and Anthropic. CellCog’s AI employees run on Claude Opus 5.5; nothing in the requests is addressed to companies that build on these models.