English

Bodies with power

National market surveillance authorities under the AI Act (27 Member States)

Type
Government body
Place
European Union — Individual EU Member States
Last checked
2026-09-22
Next check due
2027-03-21

Ways to reach them

  • ARTICLE 85 — right to lodge a complaint with a market surveillance authority · Complaint route
    Verified · 2026-09-22

    'Any natural or legal person having grounds to consider that there has been an infringement' of the AI Act may complain to the market surveillance authority of their Member State. The authority must handle it under its Regulation (EU) 2019/1020 procedures, alongside any other administrative or judicial remedy. APPLIES FROM 2 AUGUST 2026 (Article 113).

    VERIFIED — text and applicability date confirmed. Note this citation is to the widely used AI Act Explorer, a non-official but reliable consolidated text; the authoritative text is in the Official Journal.

  • Commission list of national Single Points of Contact · Web form
    Verified · 2026-09-22

    The Commission page carries a table of designated Single Points of Contact by Member State, with links to some national authorities (e.g. Ireland's AI Office at aioffice.gov.ie).

    VERIFIED — BUT the page itself states 'The Commission is considering the notifications and will publish a list of Single Points of Contact in due time', i.e. the authoritative consolidated directory does NOT yet exist.

  • Named national complaint portals · Complaint route
    varies by Member State; no consolidated EU directory published
    Verification expired · 2026-09-22

    This route is retained as reference only. Its verification is missing, more than 180 days old, or the contact window is not currently open; do not rely on it until it is re-checked.

    Designated leads include Cyprus (Commissioner of Communications), Denmark (Danish Agency for Digital Government), Finland (Traficom as SPOC, decentralised model), Hungary (Minister for Enterprise Development), Ireland (15 designated bodies, SPOC is the Minister for Enterprise, Tourism and Employment), Italy (National Cybersecurity Agency, with AgID as notifying authority), Lithuania (Communications Regulatory Authority), Malta (Malta Digital Innovation Authority and the IDPC), Slovenia (Agency for Communication Networks and Services).

    VERIFIED via the AI Act national implementation tracker (updated 17 June 2026). Individual national complaint-form URLs were NOT verified and must be checked per country.

  • Homepage · Homepage
    Unchecked

What it does

Supervise and enforce the AI Act's rules for AI SYSTEMS — prohibited practices and high-risk requirements — within their territory, using the powers in Regulation (EU) 2019/1020: request information, demand documentation, require corrective action, order withdrawal or recall from the market, and impose penalties set in national law (up to 7% of global turnover for prohibited practices). They do NOT supervise GPAI models; that is the AI Office's exclusive competence. Member States were required to designate them by 2 August 2025, and many have not: as of June 2026, only 9 Member States had fully designated both market surveillance and notifying authorities, 12 had partial clarity, and 6 had designated none at all.

Its powers

fine

Honest assessment

Article 85 is the AI Act's single genuine citizen-facing right, live since 2 August 2026 — anyone with grounds may complain and the authority must process it. In practice it is badly broken at the point of use: six Member States have designated nobody, a third have only partial designations, Ireland split the function across fifteen bodies, and the Commission has still not published the consolidated contact directory it promised. So the right exists and the address often does not. Where an authority IS designated and is an existing regulator (Italy's ACN, Denmark's digital agency, Finland's Traficom), complaints land in a functioning inbox. Note the scope limit that catches people out: market surveillance authorities cannot act against a GPAI MODEL provider — that is the AI Office's exclusive competence — so a frontier-model complaint filed nationally will be bounced or forwarded.

Notes

Around 2,000 bodies across the EU carry some market surveillance function, which is why no single directory works. Always verify your own Member State's designation before filing.

Sources

Something wrong here?