Governance and enforcement of the AI Act

The AI Act’s governance will be steered by three advisory bodies:

• the European Artificial Intelligence Board, composed of representatives from the EU Member States,
• the Scientific Panel, composed of independent experts in the field of AI,
• the Advisory Forum, representing a diverse selection of stakeholders, both commercial and non-commercial.

This multistakeholder governance will ensure a balanced approach to the implementation of the AI Act.

The AI Office

The AI Office, established within the Commission, oversees the AI Act’s enforcement and implementation in the EU Member States. It will also be responsible to supervise the most powerful AI models, so-called general-purpose AI models.

National competent authorities

The Commission and the AI Office work closely with national competent authorities, who supervise the implementation and application of the AI Act at national level.

National competent authorities are the following authorities:

• Market surveillance authorities supervise and enforce compliance with the rules for AI systems, including prohibitions and rules for high-risk AI.
• Notifying authorities designate and supervise notified bodies, which are independent bodies that carry out pre-market conformity assessment.

Each Member State should have designated and empowered national competent authorities until 2 August 2025. The Commission is working closely with the EU countries to support them in this process through the European AI Board.

Involvement of other authorities in AI incidents

Malfunctioning of AI systems can result in violations of fundamental rights laws, for example those protecting privacy or the right to non-discrimination. To facilitate effective investigations of such violations by the fundamental rights protection authorities, the AI Act provides rules that ensure cooperation and information flows between all authorities.

What rights does the AI Act introduce for fundamental rights protection authorities?

• Right to be informed by market surveillance authorities, e.g. about serious incidents.
• Right to request information and cooperation from market surveillance authorities.
• Right to request cooperation from providers of high-risk AI systems for which an incident has occurred.

What are the fundamental rights protection authorities who benefit from these rules?

These are public authorities or bodies in the member states that are empowered to supervise or enforce the respect of obligations under Union law protecting fundamental rights.

Each Member State must identify the relevant authorities and publish a list. 

Access the consolidated list of all identified authorities