AustriaUnclear.
An AI Service Desk has been established under the Austrian Regulatory Authority for Broadcasting and Telecommunications to support the implementation of the AI Act.
Market surveillance and notifying authorities have not yet been appointed. The 2023 AI measures package (KI-Maßnahmenpaket) indicated that the Service Desk would eventually become a market surveillance authority.19 authorities appear in the Commission’s consolidated list.Austria has established three forums to support its AI policy: a national AI Advisory Board (KI Beirat) composed of experts from research and business; the AI Policy Forum consisting of members from different ministries; and the AI Stakeholders Forum where various stakeholders give input.BelgiumUnclear.
Market surveillance and notifying authorities have not yet been appointed.
The Belgian Institute for Postal Services and Telecommunications is expected to be the main market surveillance authority pursuant to the Federal Coalition Agreement 2025-2029.20 authorities appear in the Commission’s consolidated list.Belgium has an Ethics Advisory Council on Data and AI appointed by the Minister of Civil Service and the State Secretary for Digitalisation.BulgariaUnclear.
In the AI Board meeting on 10 September 2024, the Ministry of Electronic Governance represented Bulgaria. It coordinates national implementation.
Market surveillance and notifying authorities have not yet been appointed. 9 authorities appear in the Commission’s consolidated list.CroatiaUnclear.
In the AI Board meeting on 10 September 2024, the Central State Office for the Development of Digital Society represented Croatia.
Market surveillance and notifying authorities have not yet been appointed. 7 authorities appear in the Commission’s consolidated list.CyprusClear.
The Commissioner of Communications was designated as the notifying authority, market surveillance authority and single point of contact.7 authorities appear in the Commission’s consolidated list.Czech RepublicPartial clarity.
A legislative proposal designates the Telecommunication Office (Český telekomunikační úřad) as the main market surveillance authority, with the Office for Standards, Metrology and Testing (Úřad pro technickou normalizaci, metrologii a státní zkušebnictví) as the notifying authority.2 authorities appear in the Commission’s consolidated list.The Ministry of Industry and Trade was also in charge of adopting a revised national AI strategy in July 2024. DenmarkClear.
Law No. 467, the Act on Supplementary Provisions to the AI Regulation (Lov om supplerende bestemmelser til forordningen om kunstig intelligens), designated the Danish Agency for Digital Government as the notifying authority, the coordinating market surveillance authority and the single point of contact.
The Data Protection Authority and the Court Administration are also designated as market surveillance authorities. The law entered into force on 2 August 2025.7 authorities appear in the Commission’s consolidated list.A working group representing a range of actors (civil society, industry, public institutions, academia, etc) was established in September 2024. It will convene 3-4 times per year.EstoniaUnclear.
In the AI Board meeting on 10 September 2024, the Ministry of Economic Affairs and Communications represented Estonia.
Market surveillance and notifying authorities have not yet been appointed. 3 authorities appear in the Commission’s consolidated list.FinlandClear.
Law 1377/2025, Act on the supervision of certain artificial intelligence systems, appointed a number of existing market surveillance authorities under a decentralised model, with the Finnish Transport and Communications Agency (Traficom) acting as the single point of contact.
It also designates four notifying authorities: the Ministry of Economic Affairs and Employment, Traficom, the Finnish Medicines Agency and the Ministry of Social Affairs and Health.
The law entered into force on 1 January 2026.
A list of 8 authorities has been published by the Ministry of Economic Affairs and Employment of Finland. 2 additional authorities appear in the Commission’s consolidated list.FrancePartial clarity.
According to the legislative proposal, the proposed model is decentralised, broadening the scope of existing market surveillance and notifying authorities to cover AI.
The Directorate-General for Competition, Consumer Affairs and Fraud Control will act as the coordinating market surveillance authority and single point of contact.3 authorities appear in the Commission’s consolidated list.GermanyPartial clarity.
On 10 February 2026, the Federal Cabinet adopted the draft AI Market Surveillance and Innovation Promotion Act (Regierungsentwurf für das KI-Marktüberwachungs- und Innovationsförderungsgesetz).
The Federal Network Agency (Bundesnetzagentur) will be designated as market surveillance authority and notifying authority. The Act must still pass the Bundestag and the Bundesrat before entry into force.20 authorities appear in the Commission’s consolidated list.GreeceUnclear.
In the AI Board meeting on 10 September 2024, the Ministry of Digital Governance represented Greece.
Market surveillance and notifying authorities have not yet been appointed. 4 authorities appear in the Commission’s consolidated list.Draft legislation is expected in June 2026.HungaryClear.
Government Decree 344/2025 appointed the Minister for Enterprise Development as the market surveillance authority and single point of contact.
It designated the pre-existing National Accreditation Authority as the notifying authority. 1 authority, the National Authority for Data Protection and Freedom of Information, appears in the Commission’s consolidated list. The Hungarian AI Council will act as an advisory authority.Iceland (EEA)Unclear (AI Act not applicable to EEA yet).
In the AI Board meeting on 10 September 2024, the Mission of Iceland to the EU represented Iceland.Unclear (AI Act not applicable to EEA yet).IrelandClear.
Statutory Instrument No 366 of 2025 implemented a decentralised model, with 15 existing bodies designated as market surveillance authorities. The Minister for Enterprise, Tourism and Employment is the single point of contact. A National AI Office is expected to be established by 2 August 2026 as the central coordinating authority and will become the new single point of contact.
The notifying authorities are the Minister for Enterprise, Tourism and Employment, the Minister for Transport, the Health Products Regulatory Authority and the Commission for Communications Regulation.9 authorities appear in the Commission’s consolidated list.ItalyClear.
Law No. 132/2025, Provisions and delegations to the Government on artificial intelligence (Disposizioni e deleghe al Governo in materia di intelligenza artificiale) entered into force on 10 October 2025. The law designates the National Cybersecurity Agency (Agenzia per la Cybersicurezza Nazionale, ACN) as market surveillance authority and the single point of contact.
It also designates the Agency for Digital Italy (Agenzia per l’Italia Digitale, AgID) as notifying authority.5 authorities appear in the Commission’s consolidated list.Italy was the first state in the Union to pass a national law implementing the AI Act.LatviaPartial clarity.
The Ministry of Smart Administration and Regional Development is responsible for the implementation of the AI Act and has published a report on the implementation of the AI Act.
The report suggests that market surveillance be carried out by 12-14 authorities, with the Consumer Rights Protection Centre as the single point of contact.
The report recommends that the Ministry of Economic Affairs be designated as the notifying authority.
In the AI Board meeting on 10 September 2024, the Office for Financial Market Innovation and Digitalisation represented Liechtenstein.Unclear (AI Act not applicable to EEA yet).LithuaniaClear.
The Communications Regulatory Authority was designated the market surveillance authority and single point of contact.
The Innovation Agency is the notifying authority. 4 authorities appear in the Commission’s consolidated list.Lithuania has launched AI sandbox pilots.LuxembourgPartial clarity.
A draft law implementing the AI Act was introduced in December 2024 proposing the National Commission for Data Protection as the main market surveillance authority and a single point of contact.
The draft also outlines three notifying authorities: the Luxembourg Accreditation and Surveillance Office; the Luxembourg Agency for Medicines and Health Products; and the Government Commissioner for Data Protection to the State.3 authorities appear in the Commission’s consolidated list.Luxembourg published its national AI strategy on 19 May 2025.MaltaClear.
The Malta Digital Innovation Authority (MDIA) is designated as the lead market surveillance authority and the single point of contact as well as a notifying authority. The Information and Data Protection Commissioner will also serve as a market surveillance authority.10 authorities appear in the Commission’s consolidated list.The NetherlandsPartial clarity.
Draft legislation published in April 2026 proposes a decentralised model with ten sectoral authorities acting as both market surveillance and notifying authorities (including the Data Protection Authority, the State Inspectorate for Digital Infrastructure, the Financial Markets Authority and De Nederlandsche Bank). The Data Protection Authority and the State Inspectorate for Digital Infrastructure (RDI) have the coordinating role, with the RDI acting as the single point of contact.6 authorities appear in the Commission’s consolidated list.The Dutch Data Protection Authority and the Dutch Authority for Digital Infrastructure have published recommendations on an integrated approach to supervision under the AI Act in the Netherlands.Norway (EEA)Partial clarity (AI Act not applicable to EEA yet).
The Norwegian Communications Authority (Nkom) has been designated as the national coordinating supervisory authority (implying it will be a market surveillance authority) and the single point of contact.
The notifying authority has not been designated yet, but Norway’s national accreditation body, Norsk akkreditering, will be responsible for technical accreditation.
A Norwegian law implementing the AI Act is expected to come into force in the summer of 2026.
AI Norway has been established within the Norwegian Digitalisation Agency (Digdir) with the aim of providing advisory service and connecting key AI players in the public sector, trade, industry, research sector, and academia.
A legislative proposal designates a new body, the Commission on Development and Safety of AI, as the market surveillance authority and the single point of contact.
The act designates the Minister of Digitalisation as a notifying authority.4 authorities appear in the Commission’s consolidated list.The legislation implementing the AI Act, the Act on Artificial Intelligence Systems (Ustawa o systemach sztucznej inteligencji), was adopted by the lower house of Parliament on 11 June 2026. It is now awaiting approval by the upper house.PortugalPartial clarity.
In September 2025 the Secretary of State for Digitalisation announced that the National Communications Authority will act as the market surveillance authority and the single point of contact.
The notifying authority has not been identified.14 authorities appear in the Commission’s consolidated list.RomaniaPartial clarity.
The government adopted a memorandum in March 2026 proposing to designate the National Authority for Administration and Regulation in Communication as the market surveillance authority and single point of contact.
The Authority for the Digitalisation of Romania is proposed to be the notifying authority.9 authorities appear in the Commission’s consolidated list.SlovakiaPartial clarity.
According to draft legislation, the Office for Digital Integrity will be the single point of contact and the market surveillance authority. Sectoral market surveillance is assigned to the Office for Personal Data Protection and the Ministry of Justice.
The Office for Standardisation, Metrology and Testing is proposed to be the notifying authority. 2 authorities appear in the Commission’s consolidated list.A Standing Commission on Ethics and Regulation of AI (CERAI) was established in 2020.
AISlovakia is a neutral, independent non-profit platform facilitating cooperation on AI between academia, employers, government representatives, and representatives of international institutions.SloveniaClear.
National legislation entered into force in November 2025.
The Agency for Communication Networks and Services was appointed as the single point of contact and a market surveillance authority, with other authorities also participating in market surveillance.
The law appoints five notifying authorities depending on the type of AI system, including the Ministry of the Economy, the Ministry for the Information Society and the Ministry of Infrastructure.10 authorities appear in the Commission’s consolidated list.SpainPartial clarity.
The Spanish Artificial Intelligence Supervisory Agency was established in 2023 as an autonomous agency of the Spanish Department of Digital Transformation and designated as the single point of contact and a market surveillance authority, with other sectoral authorities also participating in supervision.
Under the draft law, the Directorate-General for Artificial Intelligence is proposed as the notifying authority.20 authorities appear in the Commission’s consolidated list.SwedenPartial clarity.
The Swedish government proposed that the Post and Telecom Authority be the coordinating market surveillance authority and the single point of contact. Other authorities would have sector-specific market surveillance responsibilities (for example the Medical Products Agency).
The Swedish Board for Accreditation and Conformity Assessment and the Medical Products Agency are proposed to be the notifying authorities.4 authorities appear in the Commission’s consolidated list.Sweden has established an AI Council with the aim of strengthening Swedish AI competitiveness.
An AI Service Desk has been established under the Austrian Regulatory Authority for Broadcasting and Telecommunications to support the implementation of the AI Act.
Market surveillance and notifying authorities have not yet been appointed. The 2023 AI measures package (KI-Maßnahmenpaket) indicated that the Service Desk would eventually become a market surveillance authority.19 authorities appear in the Commission’s consolidated list.Austria has established three forums to support its AI policy: a national AI Advisory Board (KI Beirat) composed of experts from research and business; the AI Policy Forum consisting of members from different ministries; and the AI Stakeholders Forum where various stakeholders give input.BelgiumUnclear.
Market surveillance and notifying authorities have not yet been appointed.
The Belgian Institute for Postal Services and Telecommunications is expected to be the main market surveillance authority pursuant to the Federal Coalition Agreement 2025-2029.20 authorities appear in the Commission’s consolidated list.Belgium has an Ethics Advisory Council on Data and AI appointed by the Minister of Civil Service and the State Secretary for Digitalisation.BulgariaUnclear.
In the AI Board meeting on 10 September 2024, the Ministry of Electronic Governance represented Bulgaria. It coordinates national implementation.
Market surveillance and notifying authorities have not yet been appointed. 9 authorities appear in the Commission’s consolidated list.CroatiaUnclear.
In the AI Board meeting on 10 September 2024, the Central State Office for the Development of Digital Society represented Croatia.
Market surveillance and notifying authorities have not yet been appointed. 7 authorities appear in the Commission’s consolidated list.CyprusClear.
The Commissioner of Communications was designated as the notifying authority, market surveillance authority and single point of contact.7 authorities appear in the Commission’s consolidated list.Czech RepublicPartial clarity.
A legislative proposal designates the Telecommunication Office (Český telekomunikační úřad) as the main market surveillance authority, with the Office for Standards, Metrology and Testing (Úřad pro technickou normalizaci, metrologii a státní zkušebnictví) as the notifying authority.2 authorities appear in the Commission’s consolidated list.The Ministry of Industry and Trade was also in charge of adopting a revised national AI strategy in July 2024. DenmarkClear.
Law No. 467, the Act on Supplementary Provisions to the AI Regulation (Lov om supplerende bestemmelser til forordningen om kunstig intelligens), designated the Danish Agency for Digital Government as the notifying authority, the coordinating market surveillance authority and the single point of contact.
The Data Protection Authority and the Court Administration are also designated as market surveillance authorities. The law entered into force on 2 August 2025.7 authorities appear in the Commission’s consolidated list.A working group representing a range of actors (civil society, industry, public institutions, academia, etc) was established in September 2024. It will convene 3-4 times per year.EstoniaUnclear.
In the AI Board meeting on 10 September 2024, the Ministry of Economic Affairs and Communications represented Estonia.
Market surveillance and notifying authorities have not yet been appointed. 3 authorities appear in the Commission’s consolidated list.FinlandClear.
Law 1377/2025, Act on the supervision of certain artificial intelligence systems, appointed a number of existing market surveillance authorities under a decentralised model, with the Finnish Transport and Communications Agency (Traficom) acting as the single point of contact.
It also designates four notifying authorities: the Ministry of Economic Affairs and Employment, Traficom, the Finnish Medicines Agency and the Ministry of Social Affairs and Health.
The law entered into force on 1 January 2026.
A list of 8 authorities has been published by the Ministry of Economic Affairs and Employment of Finland. 2 additional authorities appear in the Commission’s consolidated list.FrancePartial clarity.
According to the legislative proposal, the proposed model is decentralised, broadening the scope of existing market surveillance and notifying authorities to cover AI.
The Directorate-General for Competition, Consumer Affairs and Fraud Control will act as the coordinating market surveillance authority and single point of contact.3 authorities appear in the Commission’s consolidated list.GermanyPartial clarity.
On 10 February 2026, the Federal Cabinet adopted the draft AI Market Surveillance and Innovation Promotion Act (Regierungsentwurf für das KI-Marktüberwachungs- und Innovationsförderungsgesetz).
The Federal Network Agency (Bundesnetzagentur) will be designated as market surveillance authority and notifying authority. The Act must still pass the Bundestag and the Bundesrat before entry into force.20 authorities appear in the Commission’s consolidated list.GreeceUnclear.
In the AI Board meeting on 10 September 2024, the Ministry of Digital Governance represented Greece.
Market surveillance and notifying authorities have not yet been appointed. 4 authorities appear in the Commission’s consolidated list.Draft legislation is expected in June 2026.HungaryClear.
Government Decree 344/2025 appointed the Minister for Enterprise Development as the market surveillance authority and single point of contact.
It designated the pre-existing National Accreditation Authority as the notifying authority. 1 authority, the National Authority for Data Protection and Freedom of Information, appears in the Commission’s consolidated list. The Hungarian AI Council will act as an advisory authority.Iceland (EEA)Unclear (AI Act not applicable to EEA yet).
In the AI Board meeting on 10 September 2024, the Mission of Iceland to the EU represented Iceland.Unclear (AI Act not applicable to EEA yet).IrelandClear.
Statutory Instrument No 366 of 2025 implemented a decentralised model, with 15 existing bodies designated as market surveillance authorities. The Minister for Enterprise, Tourism and Employment is the single point of contact. A National AI Office is expected to be established by 2 August 2026 as the central coordinating authority and will become the new single point of contact.
The notifying authorities are the Minister for Enterprise, Tourism and Employment, the Minister for Transport, the Health Products Regulatory Authority and the Commission for Communications Regulation.9 authorities appear in the Commission’s consolidated list.ItalyClear.
Law No. 132/2025, Provisions and delegations to the Government on artificial intelligence (Disposizioni e deleghe al Governo in materia di intelligenza artificiale) entered into force on 10 October 2025. The law designates the National Cybersecurity Agency (Agenzia per la Cybersicurezza Nazionale, ACN) as market surveillance authority and the single point of contact.
It also designates the Agency for Digital Italy (Agenzia per l’Italia Digitale, AgID) as notifying authority.5 authorities appear in the Commission’s consolidated list.Italy was the first state in the Union to pass a national law implementing the AI Act.LatviaPartial clarity.
The Ministry of Smart Administration and Regional Development is responsible for the implementation of the AI Act and has published a report on the implementation of the AI Act.
The report suggests that market surveillance be carried out by 12-14 authorities, with the Consumer Rights Protection Centre as the single point of contact.
The report recommends that the Ministry of Economic Affairs be designated as the notifying authority.
1 authority, the Ombudsman, appears in the Commission’s consolidated list.Liechtenstein (EEA)Unclear (AI Act not applicable to EEA yet).
In the AI Board meeting on 10 September 2024, the Office for Financial Market Innovation and Digitalisation represented Liechtenstein.Unclear (AI Act not applicable to EEA yet).LithuaniaClear.
The Communications Regulatory Authority was designated the market surveillance authority and single point of contact.
The Innovation Agency is the notifying authority. 4 authorities appear in the Commission’s consolidated list.Lithuania has launched AI sandbox pilots.LuxembourgPartial clarity.
A draft law implementing the AI Act was introduced in December 2024 proposing the National Commission for Data Protection as the main market surveillance authority and a single point of contact.
The draft also outlines three notifying authorities: the Luxembourg Accreditation and Surveillance Office; the Luxembourg Agency for Medicines and Health Products; and the Government Commissioner for Data Protection to the State.3 authorities appear in the Commission’s consolidated list.Luxembourg published its national AI strategy on 19 May 2025.MaltaClear.
The Malta Digital Innovation Authority (MDIA) is designated as the lead market surveillance authority and the single point of contact as well as a notifying authority. The Information and Data Protection Commissioner will also serve as a market surveillance authority.10 authorities appear in the Commission’s consolidated list.The NetherlandsPartial clarity.
Draft legislation published in April 2026 proposes a decentralised model with ten sectoral authorities acting as both market surveillance and notifying authorities (including the Data Protection Authority, the State Inspectorate for Digital Infrastructure, the Financial Markets Authority and De Nederlandsche Bank). The Data Protection Authority and the State Inspectorate for Digital Infrastructure (RDI) have the coordinating role, with the RDI acting as the single point of contact.6 authorities appear in the Commission’s consolidated list.The Dutch Data Protection Authority and the Dutch Authority for Digital Infrastructure have published recommendations on an integrated approach to supervision under the AI Act in the Netherlands.Norway (EEA)Partial clarity (AI Act not applicable to EEA yet).
The Norwegian Communications Authority (Nkom) has been designated as the national coordinating supervisory authority (implying it will be a market surveillance authority) and the single point of contact.
The notifying authority has not been designated yet, but Norway’s national accreditation body, Norsk akkreditering, will be responsible for technical accreditation.
Unclear (AI Act not applicable to EEA yet).The Norwegian Agency for Public and Financial Management has published an extensive report examining different potential governance structures under the AI Act in June 2024.
A Norwegian law implementing the AI Act is expected to come into force in the summer of 2026.
AI Norway has been established within the Norwegian Digitalisation Agency (Digdir) with the aim of providing advisory service and connecting key AI players in the public sector, trade, industry, research sector, and academia.
PolandPartial clarity.
A legislative proposal designates a new body, the Commission on Development and Safety of AI, as the market surveillance authority and the single point of contact.
The act designates the Minister of Digitalisation as a notifying authority.4 authorities appear in the Commission’s consolidated list.The legislation implementing the AI Act, the Act on Artificial Intelligence Systems (Ustawa o systemach sztucznej inteligencji), was adopted by the lower house of Parliament on 11 June 2026. It is now awaiting approval by the upper house.PortugalPartial clarity.
In September 2025 the Secretary of State for Digitalisation announced that the National Communications Authority will act as the market surveillance authority and the single point of contact.
The notifying authority has not been identified.14 authorities appear in the Commission’s consolidated list.RomaniaPartial clarity.
The government adopted a memorandum in March 2026 proposing to designate the National Authority for Administration and Regulation in Communication as the market surveillance authority and single point of contact.
The Authority for the Digitalisation of Romania is proposed to be the notifying authority.9 authorities appear in the Commission’s consolidated list.SlovakiaPartial clarity.
According to draft legislation, the Office for Digital Integrity will be the single point of contact and the market surveillance authority. Sectoral market surveillance is assigned to the Office for Personal Data Protection and the Ministry of Justice.
The Office for Standardisation, Metrology and Testing is proposed to be the notifying authority. 2 authorities appear in the Commission’s consolidated list.A Standing Commission on Ethics and Regulation of AI (CERAI) was established in 2020.
AISlovakia is a neutral, independent non-profit platform facilitating cooperation on AI between academia, employers, government representatives, and representatives of international institutions.SloveniaClear.
National legislation entered into force in November 2025.
The Agency for Communication Networks and Services was appointed as the single point of contact and a market surveillance authority, with other authorities also participating in market surveillance.
The law appoints five notifying authorities depending on the type of AI system, including the Ministry of the Economy, the Ministry for the Information Society and the Ministry of Infrastructure.10 authorities appear in the Commission’s consolidated list.SpainPartial clarity.
The Spanish Artificial Intelligence Supervisory Agency was established in 2023 as an autonomous agency of the Spanish Department of Digital Transformation and designated as the single point of contact and a market surveillance authority, with other sectoral authorities also participating in supervision.
Under the draft law, the Directorate-General for Artificial Intelligence is proposed as the notifying authority.20 authorities appear in the Commission’s consolidated list.SwedenPartial clarity.
The Swedish government proposed that the Post and Telecom Authority be the coordinating market surveillance authority and the single point of contact. Other authorities would have sector-specific market surveillance responsibilities (for example the Medical Products Agency).
The Swedish Board for Accreditation and Conformity Assessment and the Medical Products Agency are proposed to be the notifying authorities.4 authorities appear in the Commission’s consolidated list.Sweden has established an AI Council with the aim of strengthening Swedish AI competitiveness.