Who enforces the EU AI Act?
For an AI system, the market surveillance authority of the Member State where the system is on the market. For a general-purpose model, the EU AI Office — not this national list. Pick the country below. The next page is the Commission's Single Point of Contact, with the status as of 2026-09-07.
The lists below work without JavaScript. GPAI models are not in this dropdown: they go to the AI Office in every country.
Named on the Commission list
- Denmark — Digitaliseringsstyrelsen (Agency for Digital Government)
- Finland — Traficom (Transport and Communications Agency)
- Greece — Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)
- Ireland — Oifig IS na hÉireann (AI Office of Ireland)
- Italy — Agenzia per la cybersicurezza nazionale (National Cybersecurity Agency)
- Latvia — Patērētāju tiesību aizsardzības centrs (Consumer Rights Protection Centre)
- Lithuania — Lietuvos Respublikos ryšių reguliavimo tarnyba (Communications Regulatory Authority of the Republic of Lithuania)
- Malta — L-Awtorità Maltija għall-Innovazzjoni Diġitali (Malta Digital Innovation Authority (MDIA))
- Poland — Komisja Rozwoju i Bezpieczeństwa Sztucznej Inteligencji (KRiBSI) (Commission for the Development and Security of Artificial Intelligence)
Pending final adoption
- Cyprus — Επίτροπος Επικοινωνιών (Commissioner of Communications)
- Czechia — Český telekomunikační úřad (Czech Telecommunication Office)
- Estonia — Tarbijakaitse ja Tehnilise Järelevalve Amet (Consumer Protection and Technical Regulatory Authority)
- France — Direction générale de la concurrence, de la consommation et de la répression des fraudes (DGCCRF) (Directorate General for Competition Policy, Consumer Affairs and Fraud Control)
- Germany — Bundesnetzagentur (Federal Network Agency)
- Luxembourg — Commission nationale pour la protection des données (National Commission for Data Protection)
- Netherlands — Rijksinspectie Digitale Infrastructuur (Dutch Authority for Digital Infrastructure)
- Portugal — ANACOM (National Regulatory Authority for Communications)
- Romania — ANCOM (National Authority for Management and Regulation in Communications of Romania)
- Slovenia — Agencija za komunikacijska omrežja in storitve Republike Slovenije (AKOS) (Agency for Communication Networks and Services of the Republic of Slovenia)
- Spain — Agencia Española de Supervisión de Inteligencia Artificial (Spanish Artificial Intelligence Surveillance Agency)
- Sweden — Post- och telestyrelsen (Swedish Post and Telecom Authority)
Not named
Not a Member State
- EU institutions, bodies and agencies — European Data Protection Supervisor (EDPS (market surveillance authority for the Union institutions))
- General-purpose AI models (all Member States) — European AI Office (AI Office inside the European Commission — not a national desk)