For AI systems used by Union institutions, bodies and agencies, the desk is the European Data Protection Supervisor (EDPS (market surveillance authority for the Union institutions)), not a Member State authority.
Checked 2026-09-17 against a Commission page last updated 2026-09-07. This is a dated copy of that register, not legal advice.
Who enforces the EU AI Act in EU institutions, bodies and agencies?
| Country / scope | EU institutions, bodies and agencies |
|---|---|
| ISO | EU |
| Authority | European Data Protection Supervisor (EDPS (market surveillance authority for the Union institutions)) |
| Status | named |
What to do with this row
If your customer is an EU institution, put EDPS on the inventory row. A national SPOC will not take that file.
- Open the Commission register and confirm the row has not moved.
- Write the name, the status, and today's date on the inventory line for this country.
- GPAI models still go to the AI Office, even if this national desk is named.
See also
- Austria — — (not named)
- Belgium — — (not named)
- Jump to any Member State
- Full 27-country table
- What applies when
Limits
This table is a dated copy of the Commission's Single Point of Contact register, checked on 2026-09-17 against a page the Commission last updated on 2026-09-07. It is not legal advice and it is not a substitute for the live register. A national law can name an authority before this list does. GPAI models are supervised by the AI Office regardless of which country your users sit in.