The enforcement of the AI Act is shared between the European Commission’s AI Office, the European Data Protection Supervisor, and national competent authorities designated by the Member States.
As Artificial Intelligence (AI) grows increasingly capable and integrated into everyday life, enforcement of the AI Act helps ensure that AI is developed, deployed, and used safely, giving people and businesses across the EU greater confidence in this technology.
Which authorities are responsible for enforcement?
The AI Office enforces the rules for:
- Providers of general-purpose AI (GPAI) models, including the most advanced models which may pose systemic risks (GPAI models can perform many kinds of tasks and can be integrated into different AI systems)
- AI systems developed by the same provider – or a provider within the same business group – of the underlying GPAI model
- AI systems integrated into very large online platforms (VLOPS) or very large online search engines (VLOSES) designated under the Digital Services Act (DSA)
The national competent authorities enforce the rules for other AI systems.
The European Data Protection Supervisor (EDPS) enforces the rules for AI systems used by EU institutions.
AI Office's enforcement powers
Under the AI Act, the AI Office has both investigative and sanctioning powers.
Investigative powers
In the context of both GPAI models and AI systems, the AI Office can send requests for information (RFIs) to verify providers’ compliance with the AI Act. RFIs can be issued as simple RFIs by the AI Office or, more formally, by decision of the Commission. For simple RFIs, fines can be imposed if a provider’s reply is incorrect or misleading. For RFIs issued by decision, fines can also be imposed if the provider fails to reply or replies incompletely.
In the context of GPAI models, the AI Office can:
- Perform model evaluations and issue requests for access (RFAs): The AI Office – or independent experts appointed by it – can require providers to grant access to their models in order to conduct evaluations.
- Request providers to take measures, including, if necessary, restrict the public availability of a model.
In the context of AI systems, the AI office can conduct interviews of any person who might have information related to an investigation (and who consents to be interviewed), as well as conduct inspections of providers premises.
Sanctioning powers
Excerpt from the official page. The original is authoritative. Continue reading at EU AI Act Implementation ↗