TOOLS AND TRACKERS

EU AI Act: Regulatory Directory

This tool identifies competent authorities responsible for the implementation and enforcement of the EU AI Act.


Published: 30 July 2025

Last updated: 7 Jan. 2026

This tool identifies competent authorities responsible for the implementation and enforcement of the EU Artificial Intelligence Act. This includes three types of authorities: market surveillance and notifying authorities, together referred to as national competent authorities, as well as national authorities protecting fundamental rights.

Each country entry provides an overview of such authorities and indicates their current status of designation. The listings clarify whether the authorities have been officially designated, identified through draft legislative proposal or other formal communication but are pending official designation, or not officially identified. In accordance with the EU AI Act, all EU member states must designate or establish their national competent authorities by 2 Aug. 2025.

The current outline is based on publicly available information as of mid-November 2025 and will be updated to reflect changes in designation status across EU member states. If you have comments about this tool, please share it with us at research@iapp.org.

EU institutions

Authorities at the EU level

The EU AI Act designates the European Data Protection Supervisor as the competent authority — both market surveillance and notifying authority — in relation to AI systems used or deployed by EU institutions, agencies, offices and bodies.

Furthermore, the EU AI Office holds the powers of a market surveillance authority concerning AI systems that are based on a general-purpose AI model when both the model and the system are developed by the same provider.


EU member states

National competent authorities and authorities protecting fundamental rights

The EU AI Act requires EU member states to establish new or designate already existing national bodies as their national competent authorities responsible for the implementation and enforcement of the EU AI Act. Each member state must appoint at least one market surveillance authority and at least one notifying authority as such bodies, but more than one of each can be designated to match the organizational needs of each country.

In addition, the EU AI Act also mandates every member state to identify their national authorities protecting fundamental rights which are tasked with ensuring that high-risk AI systems comply with EU fundamental rights legislation.

CPE credit badge

This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.

Submit for CPEs

Contributors:

Laura Pliauškaitė

European Operations Coordinator, IAPP


Tags:

AI and machine learningLaw and regulationRegulatory guidanceStrategy and governanceGovernmentTechnologyEU AI ActAI governance
TOOLS AND TRACKERS

EU AI Act: Regulatory Directory

This tool identifies competent authorities responsible for the implementation and enforcement of the EU AI Act.

Published: 30 July 2025

Last updated: 7 Jan. 2026


Contributors:

Laura Pliauškaitė

European Operations Coordinator, IAPP


This tool identifies competent authorities responsible for the implementation and enforcement of the EU Artificial Intelligence Act. This includes three types of authorities: market surveillance and notifying authorities, together referred to as national competent authorities, as well as national authorities protecting fundamental rights.

Each country entry provides an overview of such authorities and indicates their current status of designation. The listings clarify whether the authorities have been officially designated, identified through draft legislative proposal or other formal communication but are pending official designation, or not officially identified. In accordance with the EU AI Act, all EU member states must designate or establish their national competent authorities by 2 Aug. 2025.

The current outline is based on publicly available information as of mid-November 2025 and will be updated to reflect changes in designation status across EU member states. If you have comments about this tool, please share it with us at research@iapp.org.

EU institutions

Authorities at the EU level

The EU AI Act designates the European Data Protection Supervisor as the competent authority — both market surveillance and notifying authority — in relation to AI systems used or deployed by EU institutions, agencies, offices and bodies.

Furthermore, the EU AI Office holds the powers of a market surveillance authority concerning AI systems that are based on a general-purpose AI model when both the model and the system are developed by the same provider.


EU member states

National competent authorities and authorities protecting fundamental rights

The EU AI Act requires EU member states to establish new or designate already existing national bodies as their national competent authorities responsible for the implementation and enforcement of the EU AI Act. Each member state must appoint at least one market surveillance authority and at least one notifying authority as such bodies, but more than one of each can be designated to match the organizational needs of each country.

In addition, the EU AI Act also mandates every member state to identify their national authorities protecting fundamental rights which are tasked with ensuring that high-risk AI systems comply with EU fundamental rights legislation.

CPE credit badge

This content is eligible for Continuing Professional Education credits. Please self-submit according to CPE policy guidelines.

Submit for CPEs

Tags:

AI and machine learningLaw and regulationRegulatory guidanceStrategy and governanceGovernmentTechnologyEU AI ActAI governance

Related resources