Resource Center / Tools and Trackers / EU AI Act Regulatory Directory

 

EU AI Act Regulatory Directory

This tool identifies competent authorities responsible for the implementation and enforcement of the EU AI Act.


Published: July 2025


Contributors:


This tool identifies competent authorities responsible for the implementation and enforcement of the EU Artificial Intelligence Act. This includes three types of authorities: market surveillance and notifying authorities, together referred to as national competent authorities, as well as national authorities protecting fundamental rights.

Each country entry provides an overview such authorities and indicates their current status of designation. The listings clarify whether the authorities have been officially designated, identified through draft legislative proposal or other formal communication but are pending official designation, or not officially identified. In accordance with the EU AI Act, all EU member states must designate or establish their national competent authorities by 2 Aug. 2025.

The current outline is based on publicly available information as of mid-July 2025 and will be updated to reflect changes in designation status across EU member states. If you have comments about this tool, please share it with us at research@iapp.org.

The IAPP additionally hosts an "EU AI Act" topic page, which regularly updates with the latest news and resources.


EU institutions

Authorities at the EU level

The EU AI Act designates the European Data Protection Supervisor as the competent authority — both market surveillance and notifying authority — in relation to AI systems used or deployed by EU institutions, agencies, offices and bodies.

Furthermore, the EU AI Office holds the powers of a market surveillance authority concerning AI systems that are based on a general-purpose AI model when both the model and the system are developed by the same provider.

Legend

= Identified

= Not yet identified

  • expand_more

    EU AI Office
    Holds the powers of a market surveillance authority concerning AI systems that are based on a general-purpose AI model when the both model and the system are developed by the same provider.
    View here

  • expand_more

    European Data Protection Supervisor
    The competent authority – both market surveillance and notifying authority - in relation to AI systems used or deployed by EU institutions, agencies, offices and bodies.
    View here


EU member states

Designation status, establishment of authorities and protecting fundamental rights

The EU AI Act requires EU member states to establish new or designate already existing national bodies as their national competent authorities responsible for the implementation and enforcement of the EU AI Act. Each member state must appoint at least one market surveillance authority and at least one notifying authority as such bodies, but more than one of each can be designated to match the organizational needs of each country.

In addition, the EU AI Act also mandates every member state to identify their national authorities protecting fundamental rights which are tasked with ensuring that high-risk AI systems comply with EU fundamental rights legislation.

Legend

= Officially designated

= Some competent authorities are officially designated while others are pending designation

= Pending designation (according to a draft legislative proposal or official confirmation)

= Awaiting designation (no pending official legislative proposal or official confirmation)

Back to Top



Approved
AIGP, CDPO, CDPO/BR, CDPO/FR, CIPM, CIPP/A, CIPP/C, CIPP/CN, CIPP/E, CIPP/G, CIPP/US, CIPT, LGPD
Credits: 3

Submit for CPEs