AI regulation in Cyprus (2026)

The EU AI Act applies directly to Cyprus as an EU Regulation. Prohibitions on unacceptable-risk AI have been in force since 2 February 2025; rules for general-purpose AI models since 2 August 2025; high-risk AI system obligations from 2 August 2026.

In January 2025, the Council of Ministers designated the Commissioner of Communications as the Market Surveillance Authority (covering high-risk AI in Annex III, points 1, 6, 7, 8), Notifying Authority, and Single Point of Contact for the AI Act.

Cyprus notified the European Commission of three Article 77 supervisory authorities: the Commissioner for Personal Data Protection, the Commissioner for Administration and Protection of Human Rights (Ombudsman), and the Attorney General.

A National AI Taskforce was established in January 2025, chaired by Chief Scientist Skourides, to formulate a new national AI strategy encompassing public and private sector adoption, with targets of an AI-first policy by 2028 and fully AI-powered personalised public services by 2030.

Cyprus's original National AI Strategy was approved by the Council of Ministers in January 2020, focusing on business competitiveness, public-sector modernisation, talent development, and ethical AI. A revised strategy under the new Taskforce is being prepared to replace it.

Cyprus held the EU Council Presidency during negotiations on the Digital Omnibus AI simplification package. On 7 May 2026, the Council and European Parliament reached a provisional agreement extending exemptions to small mid-caps, postponing AI regulatory sandbox establishment deadlines to 2 August 2027, and reducing governance fragmentation across Member States.