Gov­er­nance

The governance structure of the AI Act, set out in Articles 64 to 70, aims to ensure consistent and effective application of the Act across the European Union.

Implementation of the AI Act at European level

The following bodies are relevant to the implementation of the AI Act at European level:

European AI Office
  • EU Commission institution
    Monitors the implementation and enforcement of the rules for GPAI models in the EU
  • Has monitoring and enforcement powers
European AI Board
  • One representative per Member State + the European Data Protection Supervisor as observer
  • Advises and assists the Commission and the Member States in order to facilitate the consistent and effective application of the AI Act
Advisory forum
  • Stakeholders: Start-ups, SMEs, civil-society and academia
  • Advises the AI Office and the AI Board

Scientific panel

  • Independent Experts
  • Advises and supports the AI Office and the Member States

Implementation of the AI Act at national level

The following bodies relevant to the implementation of the AI Act at national level must be designated by 2 August 2025:

At least one notifying authority that notifies the European Commission and the other Member States of each conformity assessment body designated. Notifying authorities are responsible for setting up and carrying out the procedures for the assessment and notification of conformity assessment bodies. AI conformity assessment bodies check whether AI systems meet the requirements of the AI Act. A sectoral approach is planned for the fields covered by Annex I (current product sectors such as radio equipment and machinery); this means that the current notified bodies’ scope of competence will be extended (upon application) to cover AI.

At least one market surveillance authority as a competent authority. The market surveillance authority must be independent and must be fully independent in the fields of biometrics, law enforcement, migration, asylum, border control management and justice. It must also have adequate technical and financial resources, appropriate staffing and appropriate infrastructure, including cybersecurity. Its tasks include supporting SMEs and establishing an AI regulatory sandbox. It also acts as the single point of contact for the public and for other market surveillance authorities.

Mastodon