Australia has not appointed a single statutory authority with general enforcement jurisdiction over all AI systems. There is no central Australian AI regulator equivalent to an authority administering a comprehensive AI Act.

The Australian AI Safety Institute has been announced as a key National AI Plan action and sits within the Department of Industry, Science and Resources. It replaced the previously planned AI Advisory Body, which was discontinued in February 2026. It is intended to perform technical analysis, monitoring, testing and policy-support functions and to support government agencies and existing regulators. It is not an enforcement regulator and does not displace statutory regulators or alter their legal remits.

Existing regulators continue to supervise AI-related conduct within their statutory mandates. Depending on the use case, they include the OAIC for privacy and freedom of information; the Australian Competition and Consumer Commission (ACCC) for competition and consumer protection; the eSafety Commissioner for online safety; the Australian Securities and Investments Commission (ASIC) and the Australian Prudential Regulation Authority (APRA) for financial services, markets and prudential and operational-risk matters; the Therapeutic Goods Administration (TGA) and health regulators for therapeutic goods, medical devices and health uses; workplace, safety and anti-discrimination bodies; cyber security and critical-infrastructure authorities; ombudsmen and administrative-review bodies; and state and territory regulators. A single AI deployment may engage several regulators concurrently.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

A supervisory body with authority for AI has not yet been appointed in Brazil by way of statutory appointment. According to the Brazilian AI Bill, once the Bill is sanctioned, the National Data Protection Authority (ANPD) will coordinate a National Artificial Intelligence Regulation and Governance System (SIA), which will be created and integrated by state sector regulation bodies and self-regulation and certification entities, the Artificial Intelligence Regulatory Cooperation Council (Cria) and the Committee of Artificial Intelligence Experts and Scientists (Cecia). Amongst the duties of the SIA will be the regulation of high-risk systems, strengthening the powers of the sectoral authorities and the ANPD, harmonising the work of regulatory bodies and carrying out periodic studies and sending an opinion to Congress every four years on the need to improve legislation on AI.

In December 2025, ANPD identified ‘artificial intelligence and emerging technologies in the context of personal data processing’ as one of its priority areas for supervisory and enforcement activities for the 2026-27 biennium, signalling increased regulatory scrutiny of AI-related data protection issues.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

A supervisory body with authority for AI has not yet been appointed in Canada by way of statutory appointment. For the deployment of AI in the public sector, the federal government has committed to establishing an AI Centre of Expertise on project support, knowledge sharing, and strategic guidance to support AI adoption and experimentation. In November 2025, the federal government launched its first register of AI uses in federal government, providing public transparency on how AI systems are deployed across federal departments and agencies. Bill C-34, if enacted, would establish the Digital Safety Commission of Canada as a new independent regulatory body with authority over regulated social media services and chatbot services. The Commission would be composed of three to five full-time members appointed by the Governor in Council, with renewable terms of up to five years. The Commission could issue compliance orders directing operators to take or refrain from specific actions, enforceable as Federal Court orders.

Article 14 of the Chilean AI Bill creates the ‘AI Advisory Board’ as an advisory and permanent body that shall advise the Minister of Science, Technology, Knowledge and Innovation (Science Ministry) on matters related to the development, promotion and continuous improvement of AI systems. The main duties of this entity are to:

• propose to Science Ministry a list of 'High-Risk' and 'Limited-Risk' AI systems; as amended by the Government indications, Article 32 requires that such list shall be reflected in the implementing regulation;
• advise the Science Ministry, and other relevant ministries, regarding the scope and compliance with the regulation applicable to AI system operators, without prejudice to sectoral authorities’ powers;
• submit to the Science Ministry a proposal regarding guidelines for the development of controlled test sites for AI systems, as well as for compliance and accountability standards;
• collaborate with the Science Ministry in promoting AI literacy and citizen outreach;
• evaluate, every five years, the implementation of the law and its regulation; and
• publish Board minutes on the Science Ministry’s website.

Article 24 of the Chilean AI Bill states that the ‘Data Protection Agency’ (Agency) shall be responsible for the enforcement of the law, sanctioning law infringements. The Government indications added a specific judicial claims mechanism against fines imposed by the Agency.

In addition, Article 23 makes the Science Ministry responsible for promoting, designing and preparing AI literacy and citizen outreach programmes, including tools to explain the technology and educate the public on rights, obligations, advantages, potential and risks associated with AI uses.

While a single national supervisory body with specific authority for AI has not yet been appointed in PRC, the development of AI-related regulations is undertaken collaboratively by various governmental authorities (including the Cyberspace Administration of China/CAC, the Ministry of Education, the Ministry of Science and Technology, the Ministry of Industry and Information Technology/MIIT, the Ministry of Public Security/MPS and the National Radio and Television Administration).

In addition, National Technical Committee 260 on Cybersecurity of SAC (‘TC260’) plays a pivotal role in organising and executing technical standardisation efforts related to domestic information security matters, and formulates technical standards across an array of domains, including network security technology, security mechanisms, security services, security management and security assessments.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

Notwithstanding the DPO and PCPD publishing AI guidance materials, a single supervisory body with authority for regulating and enforcing AI has not yet been appointed in Hong Kong by way of statutory appointment. The Government has indicated that it is reviewing the existing legal framework for AI, but at time of writing has not proposed the establishment of a dedicated AI regulator. Instead, at least for now:

• the PCPD will supervise compliance with personal data privacy in AI contexts; and
• otherwise, Hong Kong has adopted a sector-driven approach to AI regulation, with specific industry regulators releasing guidance, and supervising compliance, on the use and deployment of AI within their field.

The Government is in the process of establishing Hong Kong Artificial Intelligence Research and Development Institute (AIRDI), which is expected to come into full operation in the second half of 2026. While AIRDI is designed to play an important role in Hong Kong's AI ecosystem by supporting AI research and development, technology transfer, commercialisation and broader industry adoption of AI, improving the local AI governance framework, and strengthening the foundation for AI technology development, its role appears to be intended to be facilitative and advisory rather than enforcement-oriented.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

There is no single supervisory authority for AI in India. At the central level, MeitY is the key ministry entrusted with policy and promotion of matters relating to information technology, electronics, and internet, which includes AI and cybersecurity. It is also the nodal body responsible for the IndiaAI Mission and the India AI Governance Guidelines.

Sectoral regulators also play a role in guiding, monitoring and addressing AI-related issues within their respective domains, as discussed in the Regulatory guidance/voluntary codes section.

Privacy concerns arising from the use or misuse of AI will fall within the ambit of the Data Protection Board, which is a specific body to be constituted under the DPDPA. Consumer protection issues arising from unfair trade practices or misleading advertising involving AI may be addressed through the central consumer protection authorities and consumer forums.

Some Indian states such as Kerala and Tamil Nadu have also taken steps towards AI governance by appointing dedicated ministers/ministries for promotion and governance of AI.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

Israel has not designated a single cross‑sector AI regulator.

In 2023, the Ministry of Science, Technology and Space established the Center for Regulation and AI Policy, which serves as a governmental knowledge and coordination hub for regulators and government ministries in the field of artificial intelligence. The Center provides expertise and policy support, assists in developing strategies for the safe use of AI and, where appropriate, innovation-supportive regulation, leads Israel’s engagement in international AI policy forums and coordinates inter-ministerial and expert advisory work in this area.

In October 2025, the Prime Minister’s Office announced a National AI Directorate to coordinate the national AI strategy across ministries, however the Directorate is not a statutory regulator. More recently, in June 2026, the Israeli government approved a comprehensive National AI Plan, to be led by the National AI Directorate, setting out strategic priorities across infrastructure, human capital, international partnerships and public services.

The PPA supervises compliance with the PPL (including for AI‑related processing).

Sector regulators may address AI within their remits using existing powers. However, no sectoral regulator has yet been statutorily appointed as an ‘AI authority’ in Israel.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

A supervisory body with authority for AI has not yet been appointed in Japan by way of statutory appointment. Please note that Japan’s AI Basic Plan refers to the strengthening of the functions of the Japan AI Safety Institute (‘AISI’), including in relation to technical evaluation of AI models and understanding AI-related risks. AISI is not a dedicated AI supervisory authority with statutory enforcement powers.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

A supervisory body with the authority for AI has not yet been appointed in Mauritius by way of statutory appointment.

However, on 10 April 2026, the AI Unit was set up under the aegis of the Ministry of Information Technology, Communication and Innovation, with the aim of accelerating the transition to a digitally advanced economy. It acts as a cross-cutting enabler, integrating AI across all national digital projects and ensuring AI technologies are responsibly and effectively harnessed to improve public services, economic productivity and social well-being.

A supervisory body with authority for AI has not yet been appointed in Mexico by way of statutory appointment.

No supervisory authority specifically dedicated to AI has been designated in Morocco. Oversight is therefore exercised under existing regulatory frameworks.

Where an AI use involves the processing of personal data, it falls within the competence of the national data protection authority. In addition, other authorities may exercise oversight within their respective areas of competence, to the extent that an AI use falls within their scope. These include, in particular, the General Directorate for Information Systems Security in matters relating to information systems security, the Moroccan Office of Industrial and Commercial Property in the field of industrial property, and the Moroccan Copyright Office in relation to copyright.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

New Zealand does not have a dedicated AI regulator. Oversight of AI-related matters is distributed across existing sectoral regulators where their mandate interacts with AI, including the Office of the Privacy Commissioner (OPC) (privacy and personal information), the Financial Markets Authority (financial services), and the Commerce Commission (consumer protection). Other bodies with relevant sectoral mandates include the Human Rights Commission, and the Reserve Bank of New Zealand (RBNZ) (prudential oversight), as well as industry governance bodies with profession-specific oversight, such as the New Zealand Law Society.

In the public service, the Government Chief Digital Officer coordinates AI policy. Recently, Te Aka Matua o te Ture (the New Zealand Law Commission) has been instructed by the Minister of Justice to review the legal issues related to the use of automated decision-making by government. This is a significant instruction as Te Aka Matua o te Ture is an independent, statutory body established to advise on and review legislation.

More generally, New Zealand’s regulatory approach remains principles-based and light-touch, with no immediate plans for a dedicated AI regulator. The July 2024 Cabinet Paper and July 2025 AI Strategy (each discussed in the Regulatory Guidance / Voluntary Codes section) confirmed the Government’s preference for leveraging existing regulatory frameworks rather than introducing economy-wide AI-specific legislation.

No supervisory body has been officially appointed with specific authority over AI. However, various regulators exercise oversight over AI within their respective areas of regulatory purview. The Central Bank of Nigeria (CBN), for instance, regulates the use of AI in financial services, as underlined by its Baseline Standards for Automated Anti-Money Laundering (AML) Solutions issued in March 2026, which set minimum requirements for financial institutions on the deployment of automated AML/CFT/CPF solutions (including AI) covering customer identification and verification, risk profiling, transaction monitoring, sanctions screening, and real-time reporting. Similarly, the Nigeria Data Protection Commission exercises regulatory oversight over AI to the extent that its deployment impacts the processing of personal data.

The NCC has regulatory oversight over AI if used in the telecommunications sector. This is underlined by its issuance of the Internet Code of Practice, 2026, which includes some provisions governing the use of AI and emerging technologies by Internet Access Service Providers in the sector. NITDA also plays a role in AI policy development through its National Centre for Artificial Intelligence and Robotics (NCAIR).

The Norwegian Communications Authority (Nkom) has been appointed as the supervisory authority for Norway according to the proposal for the Norway AI Act.

There was a 2 August 2025 deadline for EU Member States to report to the Commission on the status of the financial and human resources of the national competent authorities (EU AI Act Article 70(6)). This deadline has not been met in Norway, as the EU AI Act has not yet been implemented into Norwegian law. However, Norway is expected to comply with the reporting requirements under Article 70(6) once the Act has been incorporated into the EEA Agreement and implemented into national law.

There was a 2 August 2025 deadline for EU Member States to designate national competent authorities (notifying authorities and market surveillance authorities), communicate them to the Commission, and make their contact details publicly available (Article 70(2) of the EU AI Act). In Norway. Nkom has been designated as the competent supervisory authority, and compliance with Article 70(2) is expected following implementation of the Act.

There is a 2 August 2027 deadline for EU Member States to ensure that their competent authorities have established at least one AI regulatory sandbox at national level, which should be operational by this date (Article 57(1) of the EU AI Act). In Norway, this requirement is expected to be met. Norway has established AI Norway (KI-Norge) as a national arena for AI governance and innovation, including an AI Sandbox where businesses can test and develop AI systems in a controlled environment.

Pursuant to Article 4 of the AI Law, the National Authority, as the governing body of the National System of Digital Transformation, is the technical and regulatory authority at the national level responsible for directing, evaluating and supervising the use and promotion of the development of artificial intelligence and emerging technologies, in order to achieve the country's objectives in terms of digital transformation and sustainable development objectives in accordance with current regulations.

Article 4 of the AI Law states that the National Authority, within the framework of the digital transformation, is appointed to develop and articulate actions to promote and encourage:

• The development of artificial intelligence and its adoption as a tool to boost the country's development and welfare.
• The training of professionals with competence in the exploitation, development and use of AI in the country.
• The creation and strengthening of digital infrastructure as an enabler for the development of AI.
• The development of a data infrastructure in order to make high quality, reusable and accessible public data available.
• The adoption of ethical guidelines for a sustainable, transparent and replicable use of AI.
• A collaborative AI ecosystem at national and international level.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

SDAIA is the competent authority overseeing data and AI in Saudi Arabia.

It supervises three key entities:

• The National Data Management Office (NDMO) operates under SDAIA's oversight and is tasked with developing and implementing data policies which underpin entities' responsible use of data.
• The National Center for AI (NCAI) is tasked with developing and deploying innovative data and AI-driven solutions to enhance decision-making and improve overall government performance.
• The National Information Center (NIC) provides national digital infrastructure and data services to support government entities, enabling secure data integration, analytics, and digital service delivery.

A single supervisory body with authority for AI has not yet been appointed in Singapore by way of statutory appointment. Instead, at least for now, Singapore adopts a sector-driven approach to AI regulation, with specific industry regulators releasing guidance on the use and deployment of AI within their field.

While the National Artificial Intelligence Council (NAIC) led by the Prime Minister was established in February 2026 to provide strategic direction and drive AI development in four key sectors (advanced manufacturing, connectivity, finance, and healthcare), it mainly serves a policy coordination function rather than a supervisory authority.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

No supervisory body has been officially appointed with specific authority over AI in South Africa. The withdrawn draft policy envisaged the establishment of various entities to regulate AI such as:

• National AI Commission (a policy-making body);
• AI Ethics Board (to enforce ethical governance);
• AI Regulatory Authority (to monitor and enforce compliance);
• AI Ombudsperson Office (to allow individuals to challenge AI-driven decisions and receive redress);
• AI Insurance Superfund (to compensate individuals or entities harmed by AI-driven outcomes);
• National AI Safety Institute (for international collaboration on AI); and
• Integrated AI-Powered Monitoring Centre (to improve efficiency in service delivery).

There is currently debate regarding whether to establish new regulatory authorities or leverage the existing regulatory authorities. If new authorities are established, these will most likely fall under the authority of the DCDT.

There is currently no single primary supervisory authority under the AI Act in Korea. The Minister of MSIT has overall responsibility for AI policy coordination, enforcement of the AI Act, and operation of the AI Safety Institute. However, it is expected that regulatory agencies will continue to handle specific issues according to their respective domains. For example, PIPC will handle personal information-related issues, KMCC communication regulation issues, and the Korea Fair Trade Commission (KFTC) fair trade issues. The National AI Strategy Committee (NAISC), chaired by the President and comprising ministers and private-sector experts, provides high-level policy deliberation and coordination.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

European Level

The European Commission established the European AI Office (AI Office) on 24 January 2024. The AI Office is a European Commission function and forms part of the Directorate-General for Communications Networks, Content and Technology; it must therefore operate in accordance with the Commission's internal processes. The AI Office is responsible for assisting the European Commission with the oversight, monitoring, and enforcement of requirements for GPAI models and systems. Under the Digital Omnibus for AI, the AI Office has been granted enforcement powers over AI systems embedded in VLOPs and VLOSEs, and certain GPAI systems enforcement is centralised within the AI Office. It is primarily made up of hired full-time staff from a range of backgrounds such as technology specialists, economists, policy specialists, and lawyers.

In addition, the European Artificial Intelligence Board (AI Board) has been established under Article 65 of the EU AI Act. The AI Board's core responsibility is to advise and assist the Commission and Member States to facilitate the consistent and effective application of the EU AI Act. The AI Board includes a representative from each Member State, and the AI Office and the European Data Protection Supervisor participate as non-voting observers.

Member State Level

Article 70 of the EU AI Act concerns the designation of national competent authorities by EU Member States. It specifies that each Member State shall establish or designate as national competent authorities at least one notifying authority and at least one market surveillance authority for the purposes of the general supervision and enforcement of the EU AI Act. Where multiple market surveillance authorities are appointed, one of the market surveillance authorities must act as the single point of contact. The authorities must operate independently and without bias. Member States were required to notify the Commission of their appointed authorities and publicly available information on how to contact them by 2 August 2025, and must report to the Commission on the financial and human resources of their competent authorities by the same date and every two years thereafter (Article 70(6)). The designation of national authorities has been slower than expected, which may affect early enforcement consistency.

At present, the Electronic Transactions Development Agency (ETDA) has been assigned to review draft laws related to AI in Thailand. Sectoral regulators may also issue AI-related guidelines. For example, the Bank of Thailand (BOT) has issued the AI-related guidance in the financial sector, and the National Cyber Security Agency (NCSA) has issued the guidelines on the cybersecurity aspects of AI use.

The AI Governance Center (AIGC), under the Electronic Transactions Development Agency (ETDA), has also been established to perform key missions related to AI. These include developing a governance framework for AI in electronic transactions, providing consultation on AI policy and governance, and sharing knowledge on AI applications.

A supervisory body with authority for AI has not yet been appointed in Türkiye by way of statutory appointment. However, by Presidential Decree published on 25 December 2025, new AI directorates were established within the executive branch to broaden technology governance. These directorates may assume coordinating or oversight functions for AI-related matters, though their precise powers and relationship to any future AI-specific regulatory authority remain to be defined by implementing legislation.

On 14 June 2026, the UAE established the Artificial Intelligence and Data Authority as the central body responsible for data, AI, and digital governance nationwide. The Authority merges the competencies previously held by the Office of AI, the Digital Government Sector within the Telecommunications and Digital Government Regulatory Authority (TDRA), and the UAE Data Office. It is tasked with shaping national AI strategy and policy, while ensuring alignment across federal and local government entities. Its jurisdiction will apply across the state, with free zones continuing to operate under separate regulatory frameworks.

On the emirate level, specific authorities are responsible for promoting and developing the use of AI.

• In Abu Dhabi, the Artificial Intelligence and Advanced Technology Council (AIATC) leads the overarching strategy, investment, and regulation of advanced technology and AI in Abu Dhabi.
• In Dubai the Dubai Centre for Artificial Intelligence is tasked with establishing laws, policies, and legislation, promoting AI awareness, and adopting advanced technologies and fostering innovation.

On the sectoral level, the CBUAE acts as the sectoral regulator for AI and machine learning (AI/ML) for licensed financial sector institutions across the UAE.

A single supervisory body with authority for AI has not yet been appointed in the UK by way of statutory appointment – see the Enforcement / Fines section.

However, Lord Holmes’ proposed AI (Regulation) Bill seeks to create a central statutory AI Authority, which would coordinate oversight across sectors and set governance standards. In July 2026, the new Government under Prime Minister Andy Burnham appointed Kanishka Narayan MP as Minister for AI, with a portfolio including AI opportunities, the AI Security Institute, semiconductors and online safety.

The US has no centralised federal regulator specifically dedicated to AI. Instead, federal oversight of AI remains distributed across multiple agencies and advisory bodies. For example, the Trump Administration’s December 2025 EO pushed a national policy framework and strategies to challenge state AI laws but did not suggest the need for a new regulator to oversee such efforts; it relies instead on existing agencies and officials.

Similarly, most states do not charge a single agency with oversight or responsibility for AI-related matters. A growing number of states have adopted AI-specific statutes that embed regulatory or enforcement authority in existing agencies or frameworks, such as consumer protection, and that sometimes designate specialised oversight bodies in particular market sectors.

For example, Colorado’s AG will enforce the State’s new automated decision-making technology law under the Colorado Consumer Protection Act, with no private right of action, and the Texas Attorney General has exclusive authority to enforce the Texas Responsible AI Governance Act (TRAIGA); Utah, meanwhile, has designated oversight through its Department of Commerce and an emerging Office of AI Policy. New York’s RAISE Act will create a new agency, within a larger, existing one, to implement that law. At the local level, New York City’s Local Law 144 assigns enforcement to NYC’s Department of Consumer and Worker Protection (DCWP).

In other states, AGs are actively leveraging existing consumer protection, privacy, and anti-discrimination laws to investigate and enforce against AI-related harms. In addition to engaging AGs, several states have empowered consumer protection agencies or other regulatory bodies to oversee AI-related compliance, resulting in a decentralised enforcement landscape where responsibilities vary by jurisdiction.