Under the EU's AI rules, providers must assess and mitigate the risks stemming from their systems, and since August, regulators have the power to impose fines for breaches