The provisions that matter most to small teams are documentation ones: a summary of training data, and disclosure when users are interacting with an AI system.
Jurisdiction is the part that surprises people. The obligations follow the market, not the company. A US team with EU users is in scope.
This is a summary, not legal advice. If your product serves EU users, this is a question for a lawyer rather than a news brief.
