{"schemaVersion":"1.0","datasetVersion":"2026-09-01.1","snapshotDate":"2026-09-01","name":"EU AI Act national implementation tracker","description":"A dated Kritia research snapshot of national implementation measures, competent-authority designations, single points of contact and regulatory sandboxes across all 27 EU member states.","publisher":{"name":"Kritia","url":"https://kritia.ai"},"methodologyUrl":"https://kritia.ai/about#sources-and-review","trackerUrl":"https://kritia.ai/eu-ai-act/countries","countries":[{"code":"AT","name":"Austria","profileUrl":"https://kritia.ai/eu-ai-act/countries/austria","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":[],"sandbox":"planned","sandboxLabel":"Planned","note":"Austria has designated no AI Act authority. RTR's KI-Servicestelle is an advisory help desk, not a supervisor, and must not be treated as one.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"AI Act implementation FAQ","publisher":"Austrian Regulatory Authority for Broadcasting and Telecommunications","url":"https://www.rtr.at/rtr/service/ki-servicestelle/faq/FAQ.en.html","supports":"The absence of a completed national authority implementation and the service desk's advisory role."},{"title":"Parliamentary answer on national AI sandboxes","publisher":"Austrian Parliament","url":"https://www.parlament.gv.at/dokument/XXVIII/AB/5056/imfname_1761608.pdf","supports":"Preparatory sandbox work without a settled host or timetable."}]},{"code":"BE","name":"Belgium","profileUrl":"https://kritia.ai/eu-ai-act/countries/belgium","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":[],"sandbox":"planned","sandboxLabel":"Planned","note":"BIPT is the government's intended lead, but implementing legislation and the cooperation agreement remain in preparation. Belgium's notified Article 77 bodies are not market surveillance authorities; draft work also provides for a national sandbox.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Draft BIPT operational plan 2026","publisher":"Belgian Institute for Postal Services and Telecommunications","url":"https://www.bipt.be/file/cc73d96153bbd5448a56f19d925d05b1379c7f21/340c7ea48b28face473d7459475155f486790fa1/2025-12-17-consultation-projet-plan-operationnel-ibpt-2026.pdf","supports":"BIPT's proposed coordination role and legislation still in preparation."},{"title":"Committee report on AI Act implementation","publisher":"Belgian Chamber of Representatives","url":"https://www.dekamer.be/FLWB/PDF/56/1280/56K1280007.pdf","supports":"Ongoing bill, cooperation-agreement and national-sandbox work."}]},{"code":"BG","name":"Bulgaria","profileUrl":"https://kritia.ai/eu-ai-act/countries/bulgaria","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":[],"sandbox":"unknown","sandboxLabel":"Status not verified","note":"No binding authority designation or implementing law was verified. An unadopted member-sponsored bill proposes an authority structure and sandbox, while the government says its own law is planned for autumn 2026.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Council of Ministers agenda — 9 July 2026","publisher":"Council of Ministers of Bulgaria","url":"https://gov.bg/bg/prestsentar/zasedaniya-na-ms/dneven-red-na-zasedanie-na-ministerskiya-savet-na-09-07-2026-g","supports":"The government's stated timetable for a national implementation law."},{"title":"Artificial-intelligence bill dossier","publisher":"National Assembly of Bulgaria","url":"https://www.parliament.bg/en/bills/ID/166661","supports":"The existing member-sponsored proposal and its unadopted status."}]},{"code":"HR","name":"Croatia","profileUrl":"https://kritia.ai/eu-ai-act/countries/croatia","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":[],"sandbox":"unknown","sandboxLabel":"Status not verified","note":"No authority designated. An implementing bill is being prepared by the Ministry of Justice, Administration and Digital Transformation.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"2026 public-consultation plan","publisher":"Croatian Ministry of Justice, Public Administration and Digital Transformation","url":"https://mpudt.gov.hr/print.aspx?id=6229&lang=sl&url=print","supports":"The planned Q3 2026 consultation for an implementing bill."},{"title":"Register of legislative drafting groups","publisher":"Croatian Ministry of Justice, Public Administration and Digital Transformation","url":"https://mpudt.gov.hr/pristup-informacijama-6341/savjetovanja-s-javnoscu/radne-skupine-za-izradu-nacrta-prijedloga-zakona-drugih-propisa-i-akata/30044?big=0&lang=de","supports":"The active national drafting group."}]},{"code":"CY","name":"Cyprus","profileUrl":"https://kritia.ai/eu-ai-act/countries/cyprus","status":"designated","statusLabel":"Binding authority designation verified","nationalLaw":null,"singlePointOfContact":"Commissioner of Communications","authorities":["Commissioner of Communications","Commissioner for Personal Data Protection (specified Annex III areas)"],"sandbox":"unknown","sandboxLabel":"Status not verified","note":"Designated early, by Council of Ministers decision of 22 January 2025 — a designation instrument, not an implementing statute.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Cyprus AI Act authority designation","publisher":"Deputy Ministry of Research, Innovation and Digital Policy","url":"https://www.gov.cy/dmrid/en/uncategorized/regulation-eu-2024-1689-establishing-harmonised-rules-on-artificial-intelligence-ai-act/","supports":"The 22 January 2025 decision, contact point and designated authority remits."}]},{"code":"CZ","name":"Czechia","profileUrl":"https://kritia.ai/eu-ai-act/countries/czechia","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":["Czech Telecommunication Office (proposed)","Czech National Bank (proposed, financial services)","Office for Personal Data Protection (proposed)","Office for Standards, Metrology and Testing (proposed notifying authority)"],"sandbox":"planned","sandboxLabel":"Planned","note":"An adaptation act cleared interministerial comment but had not been enacted. Treat the authorities below as proposed.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Draft Artificial Intelligence Act announcement","publisher":"Czech Ministry of Industry and Trade","url":"https://mpo.gov.cz/en/guidepost/for-the-media/press-releases/the-ministry-of-industry-and-trade-has-prepared-a-draft-law-on-artificial-intelligence----289865/","supports":"The draft status, proposed authority allocation and planned sandbox."}]},{"code":"DK","name":"Denmark","profileUrl":"https://kritia.ai/eu-ai-act/countries/denmark","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Act No. 467 of 14 May 2025 (Denmark)","singlePointOfContact":"Danish Agency for Digital Government (Digitaliseringsstyrelsen)","authorities":["Danish Agency for Digital Government (Digitaliseringsstyrelsen)","Danish Data Protection Agency (Datatilsynet)","Danish Court Administration (Domstolsstyrelsen)"],"sandbox":"operational","sandboxLabel":"Operational","note":"Scope limit worth knowing: the Danish Act currently makes only the Article 5 prohibited practices enforceable. The bill extending supervision and sanctions to high-risk and Article 50 transparency duties has not passed.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Act No. 467 of 14 May 2025","publisher":"Danish Legal Information","url":"https://www.retsinformation.dk/eli/lta/2025/467/pdf","supports":"Denmark's central contact and market-surveillance authority allocation."},{"title":"Regulatory sandbox for AI","publisher":"Danish Agency for Digital Government","url":"https://digst.dk/tilsyn/ai-forordningen/regulatorisk-sandkasse-for-ai/","supports":"The operational national sandbox."}]},{"code":"EE","name":"Estonia","profileUrl":"https://kritia.ai/eu-ai-act/countries/estonia","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":["Consumer Protection and Technical Regulatory Authority (TTJA, proposed)"],"sandbox":"unknown","sandboxLabel":"Status not verified","note":"No binding Article 70 designation or implementing law was verified. Estonia's 2026–2029 market-surveillance strategy names TTJA as the responsible authority in planning and marks the implementing measures to be confirmed.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"National Market Surveillance Strategy 2026–2029","publisher":"Estonian Ministry of Economic Affairs and Communications","url":"https://mkm.ee/sites/default/files/documents/2026-01/Eesti%20riiklik%20toodete%20j%C3%A4relevalvestrateegia%202026-2029.pdf","supports":"TTJA's planned role and implementing measures still marked to be confirmed."}]},{"code":"FI","name":"Finland","profileUrl":"https://kritia.ai/eu-ai-act/countries/finland","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Act on the Supervision of Certain Artificial Intelligence Systems (1377/2025) (Finland)","singlePointOfContact":"Finnish Transport and Communications Agency (Traficom)","authorities":["Finnish Transport and Communications Agency (Traficom)","Finnish Safety and Chemicals Agency (Tukes)","Finnish Supervisory Agency (Lupa- ja valvontavirasto)"],"sandbox":"planned","sandboxLabel":"Planned","note":"Decentralised model: supervision is split across nine sectoral authorities, with Traficom coordinating and supervising the Article 50 transparency duties.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Act on the Supervision of Certain Artificial Intelligence Systems 1377/2025","publisher":"Finlex","url":"https://www.finlex.fi/en/legislation/2025/1377","supports":"Finland's distributed authority model and Traficom's coordinating role."},{"title":"AI regulatory sandboxes","publisher":"Traficom","url":"https://www.traficom.fi/en/ai-regulation/ai-regulatory-sandboxes","supports":"The planned framework and current pilot activity."}]},{"code":"FR","name":"France","profileUrl":"https://kritia.ai/eu-ai-act/countries/france","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":["Directorate-General for Competition, Consumer Affairs and Fraud Control (DGCCRF, coordinating)","National Commission on Informatics and Liberty (CNIL)","Regulatory Authority for Audiovisual and Digital Communication (ARCOM)"],"sandbox":"planned","sandboxLabel":"Planned","note":"The authority allocation is a government scheme announced in September 2025 and is conditional on legislation that has not passed. No binding designation is in force.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Proposed French AI Act supervision structure","publisher":"Directorate-General for Competition, Consumer Affairs and Fraud Control","url":"https://www.economie.gouv.fr/dgccrf/actualites-dgccrf/ia-la-dgccrf-coordonnera-laction-des-autorites-de-surveillance-en-france","supports":"The proposed DGCCRF coordination role and distributed authority scheme."},{"title":"AI Act implementation bill dossier","publisher":"French Senate","url":"https://www.senat.fr/dossier-legislatif/pjl25-118.html","supports":"The bill's parliamentary status rather than an enacted designation."}]},{"code":"DE","name":"Germany","profileUrl":"https://kritia.ai/eu-ai-act/countries/germany","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"KI-Marktüberwachungs- und -Innovationsförderungs-Gesetz (KI-MIG), BGBl. 2026 I Nr. 223, in force 29 July 2026 (Germany)","singlePointOfContact":"Federal Network Agency (Bundesnetzagentur)","authorities":["Federal Network Agency (Bundesnetzagentur) — central market surveillance authority","Independent AI Market Surveillance Chamber at the Bundesnetzagentur","Federal Financial Supervisory Authority (BaFin) — regulated financial services"],"sandbox":"planned","sandboxLabel":"Planned","note":"KI-MIG centralises supervision at the Bundesnetzagentur, which is also the single point of contact and runs an AI service desk and testing sandboxes.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"KI-Marktüberwachungs- und -Innovationsförderungsgesetz","publisher":"Federal Ministry of Justice — Laws on the Internet","url":"https://www.gesetze-im-internet.de/ki-mig/BJNR0DF0B0026.html","supports":"BNetzA, BaFin, the independent chamber, contact point and statutory sandbox mandate."}]},{"code":"GR","name":"Greece","profileUrl":"https://kritia.ai/eu-ai-act/countries/greece","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Law 5321/2026 (Greece), Government Gazette 20 July 2026","singlePointOfContact":"Hellenic Data Protection Authority (HDPA)","authorities":["Hellenic Data Protection Authority (HDPA) — prohibited practices, high-risk and transparency","Hellenic Telecommunications and Post Commission (EETT) — notifying authority"],"sandbox":"planned","sandboxLabel":"Planned","note":"Greece goes beyond the EU baseline in places. EETT is the notifying authority and hosts the national sandbox jointly with the HDPA.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Law 5321/2026 — Government Gazette record","publisher":"National Printing Office of Greece","url":"https://search.et.gr/el/fek/?fekId=802524","supports":"Greece's national implementation statute."},{"title":"Hellenic DPA role in AI Act implementation","publisher":"Hellenic Data Protection Authority","url":"https://www.dpa.gr/en/enimerwtiko/press-releases/hellenic-dpa-takes-leading-role-implementing-eu-ai-act-greece","supports":"The HDPA contact, surveillance and joint-sandbox roles."}]},{"code":"HU","name":"Hungary","profileUrl":"https://kritia.ai/eu-ai-act/countries/hungary","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Act LXXV of 2025 (Hungary), in force 1 December 2025","singlePointOfContact":"Minister of Enterprise Development","authorities":["Minister of Enterprise Development — AI market surveillance authority","Central Bank of Hungary (Magyar Nemzeti Bank) — financial services","National Accreditation Authority — notifying authority"],"sandbox":"planned","sandboxLabel":"Planned","note":"Act LXXV is a framework act; Government Decree 344/2025 makes the actual designations. The market surveillance authority sits inside the ministry rather than being a standalone agency.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Act LXXV of 2025","publisher":"Hungarian National Legislation Database","url":"https://njt.jog.gov.hu/jogszabaly/2025-75-00-00","supports":"Hungary's national AI framework and sandbox duty."},{"title":"Government Decree 344/2025","publisher":"Hungarian National Legislation Database","url":"https://njt.jog.gov.hu/jogszabaly/2025-344-20-22","supports":"The authority designations and sector allocation."}]},{"code":"IE","name":"Ireland","profileUrl":"https://kritia.ai/eu-ai-act/countries/ireland","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Regulation of Artificial Intelligence Act 2026 (Ireland)","singlePointOfContact":"AI Office of Ireland (Oifig IS na hÉireann)","authorities":["AI Office of Ireland (coordination and single point of contact)","Central Bank of Ireland","Coimisiún na Meán","Commission for Communications Regulation (ComReg)","Commission for Railway Regulation","Commission for Regulation of Utilities","Competition and Consumer Protection Commission","Data Protection Commission","Health and Safety Authority","Health Products Regulatory Authority","Health Service Executive","Marine Survey Office","National Transport Authority","Workplace Relations Commission"],"sandbox":"planned","sandboxLabel":"Planned","note":"Distributed model: the AI Office and thirteen existing sector bodies are designated for market surveillance. Two ministers additionally act as notifying authorities; the designation instrument assigns specific remits rather than one catch-all regulator.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Regulation of Artificial Intelligence Act 2026","publisher":"Oireachtas","url":"https://data.oireachtas.ie/ie/oireachtas/act/2026/31/eng/enacted/a3126.pdf","supports":"The enacted Irish implementation statute and AI Office functions."},{"title":"S.I. No. 403/2026 — commencement order","publisher":"Irish Statute Book","url":"https://www.irishstatutebook.ie/eli/2026/si/403/made/en/pdf","supports":"The 31 July commencement and its two specified exceptions."},{"title":"S.I. No. 405/2026 — competent-authority designations","publisher":"Irish Statute Book","url":"https://www.irishstatutebook.ie/eli/2026/si/405/made/en/pdf","supports":"The market-surveillance and notifying-authority remits."},{"title":"EU Artificial Intelligence Act — Irish implementation and authorities","publisher":"Department of Enterprise, Tourism and Employment","url":"https://www.gov.ie/en/department-of-enterprise-tourism-and-employment/publications/eu-artificial-intelligence-ai-act/","supports":"Ireland's distributed model, competent-authority list and AI Office role."},{"title":"National competent authorities","publisher":"AI Office of Ireland","url":"https://aioffice.gov.ie/national-competent-authorities/","supports":"The AI Office's live description of designated Irish authorities."},{"title":"Ireland's AI Regulatory Sandbox Programme","publisher":"AI Office of Ireland","url":"https://aioffice.gov.ie/for-business/irelands-ai-regulatory-sandbox-programme/","supports":"The sandbox programme's current development status."}]},{"code":"IT","name":"Italy","profileUrl":"https://kritia.ai/eu-ai-act/countries/italy","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Law No. 132 of 23 September 2025, Article 20(2) (Italy)","singlePointOfContact":"National Cybersecurity Agency (ACN)","authorities":["National Cybersecurity Agency (ACN) — general market surveillance","Agency for Digital Italy (AgID) — notifying authority","Bank of Italy (Banca d'Italia) — financial services","Italian Companies and Exchange Commission (CONSOB) — financial markets","Institute for Insurance Supervision (IVASS) — insurance"],"sandbox":"planned","sandboxLabel":"Planned","note":"The strongest designation in the union: it is explicit in Article 20(2) of the statute itself, not in a secondary instrument.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Law No. 132 of 23 September 2025","publisher":"Italian Official Gazette","url":"https://www.gazzettaufficiale.it/atto/vediMenuHTML?atto.codiceRedazionale=25G00143&atto.dataPubblicazioneGazzetta=2025-09-25&tipoSerie=serie_generale&tipoVigenza=originario","supports":"Article 20's ACN, AgID, financial-sector and contact-point designations."}]},{"code":"LV","name":"Latvia","profileUrl":"https://kritia.ai/eu-ai-act/countries/latvia","status":"designated","statusLabel":"Binding authority designation verified","nationalLaw":null,"singlePointOfContact":"Consumer Rights Protection Centre (PTAC)","authorities":["Consumer Rights Protection Centre (PTAC)","Health Inspectorate (Veselības inspekcija)"],"sandbox":"operational","sandboxLabel":"Operational","note":"PTAC is notified to the Commission as supervisor and single point of contact, and Latvia's special regulatory environment is operating; Latvia has no implementing statute in this snapshot.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Special regulatory environment (AI sandbox)","publisher":"State Digital Development Agency of Latvia","url":"https://www.vdaa.gov.lv/lv/informacija-par-specialo-regulativo-vidi-jeb-smilskasti","supports":"The operational sandbox, application count and selected participants."}]},{"code":"LT","name":"Lithuania","profileUrl":"https://kritia.ai/eu-ai-act/countries/lithuania","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Laws XV-106 (Information Society Services amendment) and XV-105 (Technology and Innovation amendment), in force 1 April 2025 (Lithuania)","singlePointOfContact":"Communications Regulatory Authority (RRT)","authorities":["Communications Regulatory Authority (RRT) — market surveillance and single point of contact","Innovation Agency Lithuania — notifying authority and regulatory sandbox"],"sandbox":"operational","sandboxLabel":"Operational","note":"Designated ahead of the deadline by two amending laws effective 1 April 2025, with an operational sandbox.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Law XV-106 amending the Law on Information Society Services","publisher":"Seimas of the Republic of Lithuania","url":"https://e-seimas.lrs.lt/portal/legalAct/lt/TAD/a41a24e2d27811efbd239e318cbd5b26","supports":"RRT's market-surveillance and contact-point role."},{"title":"Law XV-105 amending the Law on Technology and Innovation","publisher":"Seimas of the Republic of Lithuania","url":"https://e-seimas.lrs.lt/portal/legalAct/lt/TAD/51938be0d27711efbd239e318cbd5b26","supports":"The Innovation Agency's notifying-authority and sandbox functions."},{"title":"Lithuanian AI regulatory sandbox","publisher":"Ministry of the Economy and Innovation of Lithuania","url":"https://eimin.lrv.lt/lt/veiklos-sritys/skaitmenine-politika/dirbtinis-intelektas/di-akto-igyvendinimas/di-smeliadeze/","supports":"The sandbox's operational status since October 2025."}]},{"code":"LU","name":"Luxembourg","profileUrl":"https://kritia.ai/eu-ai-act/countries/luxembourg","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":["National Commission for Data Protection (CNPD, proposed)"],"sandbox":"planned","sandboxLabel":"Planned","note":"No authority is legally designated. Draft law 8476 has been before the Media and Communications Committee since January 2025.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Bill 8476 dossier","publisher":"Chamber of Deputies of Luxembourg","url":"https://www.chd.lu/fr/dossier/8476","supports":"The draft's committee status and absence of an enacted designation."},{"title":"Deposited text of Bill 8476","publisher":"Chamber of Deputies of Luxembourg","url":"https://wdocs-pub.chd.lu/docs/Dossiers_parlementaires/8476/20250515_Dep%C3%B4t.pdf","supports":"The proposed CNPD coordination, sector authorities and sandbox."}]},{"code":"MT","name":"Malta","profileUrl":"https://kritia.ai/eu-ai-act/countries/malta","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Artificial Intelligence Regulations, 2025 (Legal Notices 226 and 227 of 2025) (Malta)","singlePointOfContact":"Malta Digital Innovation Authority (MDIA)","authorities":["Malta Digital Innovation Authority (MDIA) — lead market surveillance authority","Information and Data Protection Commissioner (IDPC)"],"sandbox":"planned","sandboxLabel":"Planned","note":"Legislated by legal notices under the Malta Digital Innovation Authority Act rather than by a standalone statute.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Artificial Intelligence Regulations, 2025 — Legal Notice 226","publisher":"Legislation Malta","url":"https://legislation.mt/eli/ln/2025/226/eng","supports":"MDIA's lead authority, contact-point and sandbox functions."},{"title":"Artificial Intelligence Regulations, 2025 — Legal Notice 227","publisher":"Legislation Malta","url":"https://legislation.mt/eli/ln/2025/227/eng","supports":"The complementary Maltese authority allocation."}]},{"code":"NL","name":"Netherlands","profileUrl":"https://kritia.ai/eu-ai-act/countries/netherlands","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":["Dutch Data Protection Authority (Autoriteit Persoonsgegevens) — co-coordinating","State Inspectorate for Digital Infrastructure (RDI) — co-coordinating","Human Environment and Transport Inspectorate (ILT)"],"sandbox":"planned","sandboxLabel":"Planned","note":"Treat these designations as intended rather than enacted: the implementing Act is still a pre-parliamentary draft. The Netherlands plans no national top-up beyond the Act.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"AI Regulation Implementation Act consultation","publisher":"Government of the Netherlands","url":"https://www.internetconsultatie.nl/uaiv/b1","supports":"The consultation-draft status, proposed authority structure and sandbox provisions."},{"title":"Proposed AP and RDI supervision roles","publisher":"Dutch Data Protection Authority","url":"https://autoriteitpersoonsgegevens.nl/actueel/toezicht-op-ai-wordt-concreet-sleutelrol-voor-de-ap-en-de-rdi","supports":"The intended co-coordination roles, not enacted powers."}]},{"code":"PL","name":"Poland","profileUrl":"https://kritia.ai/eu-ai-act/countries/poland","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Act of 3 July 2026 on Artificial Intelligence Systems, Dz.U. 2026 poz. 1003, in force 11 August 2026 (Poland)","singlePointOfContact":"Commission for the Development and Safety of Artificial Intelligence","authorities":["Commission for the Development and Safety of Artificial Intelligence"],"sandbox":"planned","sandboxLabel":"Planned","note":"The Act entered into force on 11 August 2026, but substantial institutional and enforcement provisions commence on 28 October 2026. KRiBSI is the named market-surveillance authority and single point of contact.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Act of 3 July 2026 on Artificial Intelligence Systems","publisher":"Polish Legal Acts Database","url":"https://eli.gov.pl/eli/DU/2026/1003/ogl/pol","supports":"The Polish authority, contact-point, commencement and sandbox framework."},{"title":"AI regulatory sandboxes","publisher":"Polish Ministry of Digital Affairs","url":"https://www.gov.pl/web/cyfryzacja/piaskownice-regulacyjne-ai--wsparcie-innowacji-poprzez-ich-bezpieczne-testowanie-w-praktyce","supports":"The sandbox's planned rather than operational status."}]},{"code":"PT","name":"Portugal","profileUrl":"https://kritia.ai/eu-ai-act/countries/portugal","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":["National Communications Authority (ANACOM, proposed role)"],"sandbox":"planned","sandboxLabel":"Planned","note":"Official governance material gives ANACOM roles in AI coordination and lists it under Article 77, but Kritia could not verify a binding Article 70 market-surveillance or single-point-of-contact designation.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"AI Act governance model","publisher":"Government of Portugal — Digital Portugal","url":"https://digital.gov.pt/pt/estrategia-digital/regulamentacao/ai-act/modelo-de-governacao","supports":"ANACOM's announced governance role without proving a binding Article 70 designation."},{"title":"Article 77 fundamental-rights authorities","publisher":"Government of Portugal — Digital Portugal","url":"https://digital.gov.pt/pt/estrategia-digital/regulamentacao/ai-act/lista-de-entidades-que-supervisionam-a-protecao-dos-direitos-fundamentais-no-ambito-do-artigo-77-do-AI-Act","supports":"The Article 77 list, which must not be presented as Article 70 market-surveillance designation."}]},{"code":"RO","name":"Romania","profileUrl":"https://kritia.ai/eu-ai-act/countries/romania","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":["National Authority for Management and Regulation in Communications (ANCOM, proposed)","Financial Supervisory Authority (ASF) and National Bank of Romania (proposed, financial services)"],"sandbox":"unknown","sandboxLabel":"Status not verified","note":"ANCOM is named by a government memorandum, but ANCOM itself still describes the role as proposed. Not yet enforceable.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Artificial Intelligence Act in Romania — implementation status","publisher":"National Authority for Management and Regulation in Communications","url":"https://www.ancom.ro/en/about-us/media-en/press-releases/artificial-intelligence-act-in-romania-current-state-of-the-implementation-framework/","supports":"The proposed ANCOM and sectoral roles and their dependence on future national legislation."}]},{"code":"SK","name":"Slovakia","profileUrl":"https://kritia.ai/eu-ai-act/countries/slovakia","status":"pending","statusLabel":"No binding designation verified","nationalLaw":null,"singlePointOfContact":null,"authorities":["Office for Digital Integrity (proposed single point of contact)","Office for Standardisation, Metrology and Testing (proposed notifying authority)"],"sandbox":"planned","sandboxLabel":"Planned","note":"The draft act remains in the official Slov-Lex legislative process and has not been enacted. The authorities and sandbox below are proposed, not binding designations.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Legislative process LP/2026/17","publisher":"Slov-Lex","url":"https://www.slov-lex.sk/elegislativa/legislativne-procesy/SK/LP/2026/17","supports":"The implementation measure's continuing draft status."},{"title":"Consultation comments for LP/2026/17","publisher":"Slov-Lex","url":"https://www.slov-lex.sk/pripomienky/legislativne-procesy/SK/LP/2026/17/pripomienky/zobraz","supports":"The official consultation record without relying on an unverified objection count."}]},{"code":"SI","name":"Slovenia","profileUrl":"https://kritia.ai/eu-ai-act/countries/slovenia","status":"law_in_force","statusLabel":"Binding national measure in force","nationalLaw":"Act on the Implementation of Regulation (EU) 2024/1689 (ZIUDHPUI), Uradni list RS 85/2025, in force 21 November 2025 (Slovenia)","singlePointOfContact":"Agency for Communication Networks and Services (AKOS)","authorities":["Agency for Communication Networks and Services (AKOS)","Information Commissioner","Bank of Slovenia","Insurance Supervision Agency","Market Inspectorate of the Republic of Slovenia"],"sandbox":"planned","sandboxLabel":"Planned","note":"One of the earliest member states to legislate. The Act adds no substantive obligations beyond the Regulation itself.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Act implementing Regulation (EU) 2024/1689","publisher":"Official Gazette of the Republic of Slovenia","url":"https://www.uradni-list.si/glasilo-uradni-list-rs/vsebina/2025-01-3035","supports":"AKOS, sector authorities and the national sandbox mandate."},{"title":"AI Act implementation overview","publisher":"Agency for Communication Networks and Services of Slovenia","url":"https://www.akos-rs.si/umetna-inteligenca/raziscite/splosno","supports":"The sandbox's planned status and AKOS coordination role."}]},{"code":"ES","name":"Spain","profileUrl":"https://kritia.ai/eu-ai-act/countries/spain","status":"designated","statusLabel":"Binding authority designation verified","nationalLaw":null,"singlePointOfContact":"Spanish Artificial Intelligence Supervisory Agency (AESIA)","authorities":["Spanish Artificial Intelligence Supervisory Agency (AESIA)","Spanish Data Protection Agency (AEPD)","Bank of Spain (Banco de España)"],"sandbox":"planned","sandboxLabel":"Planned","note":"AESIA exists under Royal Decree 729/2023, but Spain's AI Act implementing bill is still in committee. The 2023 sandbox was a time-limited pilot; the successor national sandbox remains tied to pending legislation.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Royal Decree 817/2023 — controlled AI testing environment","publisher":"Spanish Official State Gazette","url":"https://www.boe.es/buscar/doc.php?id=BOE-A-2023-22767","supports":"The time limit on Spain's pilot sandbox rather than a continuing national sandbox."}]},{"code":"SE","name":"Sweden","profileUrl":"https://kritia.ai/eu-ai-act/countries/sweden","status":"designated","statusLabel":"Binding authority designation verified","nationalLaw":null,"singlePointOfContact":"Swedish Post and Telecom Authority (PTS)","authorities":["Swedish Post and Telecom Authority (PTS) — coordinating","Swedish Authority for Privacy Protection (IMY)","Swedish Financial Supervisory Authority (Finansinspektionen)","Swedish Medical Products Agency (Läkemedelsverket)","Swedish Board for Accreditation and Conformity Assessment (Swedac)"],"sandbox":"planned","sandboxLabel":"Planned","note":"Five authorities were tasked by government decision of 4 June 2026 (Fi2026/01365). No complementing statute is in force.","sources":[{"title":"Market Surveillance Authorities under the AI Act","publisher":"European Commission","url":"https://digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act","supports":"The Commission's published contact-point and authority layer; its own update date remains part of the evidence."},{"title":"Government decision Fi2026/01365","publisher":"Government of Sweden","url":"https://www.regeringen.se/contentassets/0377f932c1b74404895c0bbdaa5abb08/uppdrag-att-vara-nationella-behoriga-myndigheter-enligt-ai-forordningen.pdf","supports":"The 4 June 2026 tasking of five national authorities."}]}]}