Several authorities at national and EU levels will be responsible for the governance and enforcement of the new EU AI rulebook.
It is for EU member states to designate the national authorities that will be in charge of enforcing the rules on high-risk AI (HRAI) systems. EU countries can rely on existing authorities or create new ones.
However, national data protection authorities must have powers vis-à-vis certain HRAI systems (e.g. in the area of law enforcement, migration and biometrics).
The European Commission will have broad investigatory and enforcement powers over general-purpose AI (GPAI) models by supervising their use through a newly established AI Office.
A new European AI Board will guide the consistent application of the AI Act across the EU, while an advisory forum and a scientific panel will assist in the implementation of the new rules.
Cullen International is publishing a series of reports analysing different aspects of the new AI rulebook. Part 3 of the report series places an emphasis on all the involved national and European bodies in charge of enforcing the new rules.
See also:
Part 1: Scope
Part 2: Obligations
Part 4: Interplay with other EU acts
For more information and to access our AI Act report series, please click on “Access the full content” - or on “Request Access”, in case you are not subscribed to our European Digital Economy service.
more news
27 January 26
Global trends in digital policies and regulations to watch in 2026
The geopolitical climate of 2026 will likely influence public policies for infrastructure for digital connectivity, data-based services and the online platform economy in all parts of the world. Our global trend report aims to briefly comment on these trends.
26 January 26
The DNA explained: addressing fragmented national approaches to spectrum
Cullen International is issuing a series of analyses on different aspects of the Digital Networks Act (DNA) proposal. This report covers radio spectrum.
23 January 26
Analysis of how UK Cyber Security and Resilience Bill compares to EU NIS2
Our new report analyzes how the UK Cyber Security and Resilience Bill compares to the EU NIS2 DIrective. The UK bill proposes amendments to the existing UK NIS Regulations that would align the UK cybersecurity regime closer with the EU framework established under the NIS2.