Artificial Intelligence · Poland
AI regulation in Poland: the EU AI Act (2026)
Poland shaded by its artificial intelligence status
AI in Poland: comprehensive law, anchored by EU AI Act (Regulation (EU) 2024/1689), directly applicable in Poland, with a national implementing 'Act on Artificial Intelligence Systems' (Ustawa o systemach sztucznej inteligencji) adopted by the Council of Ministers on 31 March 2026 and pending in Parliament; designated authority to be the Commission for the Development and Safety of AI (KRiBSI)..
As an EU member state, Poland is governed by the directly-applicable EU AI Act, which entered into force on 1 August 2024 and applies in phases (prohibitions since 2 Feb 2025, GPAI obligations since 2 Aug 2025, the bulk of obligations from 2 Aug 2026). Poland's national implementing law, which designates the competent authority and sets enforcement/penalty procedures, has been adopted by the Council of Ministers (31 March 2026) but is not yet enacted by Parliament. The binding comprehensive framework therefore already applies, while the national institutional architecture is still being finalised.
The EU AI Act in Poland
In Poland, artificial intelligence is governed by the EU AI Act, the first comprehensive AI law, which applies directly as an EU regulation.
- Framework
- the EU AI Act (Regulation (EU) 2024/1689)
- Approach
- risk-based: unacceptable-risk AI is banned, high-risk AI faces strict duties, limited-risk AI has transparency rules
- General-purpose AI
- transparency duties for all GPAI models; systemic-risk models add safety and evaluation obligations
- Timeline
- phased: prohibitions from Feb 2025, GPAI rules from Aug 2025, most high-risk obligations from Aug 2026
- Maximum fine
- €35 million or 7% of global annual turnover for prohibited-AI breaches
- Oversight
- national market-surveillance authorities, coordinated by the EU AI Office
The AI Act is an EU regulation applied directly in Poland; national market-surveillance authorities handle enforcement.
The EU AI Act in Poland: FAQ
Yes. As an EU member, Poland is covered by the EU AI Act (Regulation (EU) 2024/1689), which applies directly.
It uses a risk-based approach: unacceptable-risk AI is banned, high-risk AI faces strict obligations, and general-purpose AI models carry transparency duties.
It is phased: prohibitions applied from February 2025, general-purpose-AI rules from August 2025, and most high-risk obligations from August 2026.
Up to €35 million or 7% of global annual turnover for breaching the prohibited-AI rules, with lower tiers for other breaches.
Key points
Regulation (EU) 2024/1689 is a directly-applicable EU regulation in force in Poland since 1 August 2024; prohibited practices and AI-literacy duties apply from 2 Feb 2025, general-purpose AI (GPAI) model obligations from 2 Aug 2025, and most remaining obligations (including transparency under Art. 50) from 2 Aug 2026, with embedded high-risk products extended to 2 Aug 2028.
Poland's draft 'Act on Artificial Intelligence Systems' (first published 16 Oct 2024 on the Government Legislation Centre portal, revised after consultations) was adopted by the Council of Ministers on 31 March 2026 and submitted to Parliament; it is not yet enacted, so the national-level transposition (authority designation, penalties, procedures) remains a bill.
Unlike most EU states, Poland plans to create a brand-new collegiate body, the Commission for the Development and Safety of Artificial Intelligence (Komisja Rozwoju i Bezpieczeństwa Sztucznej Inteligencji, KRiBSI), as its sole national market-surveillance authority and single EU point of contact, rather than dispersing oversight among existing sectoral regulators.
Under the draft, KRiBSI is to comprise a chairperson, two deputy chairpersons and permanent members representing the Office of Competition and Consumer Protection (UOKiK), the Financial Supervision Authority (KNF), the Office of Electronic Communications (UKE) and the National Broadcasting Council (KRRiT), to pool scarce AI-supervision expertise.
Enforcement and sanctions are aligned with the EU AI Act, under which breaches of prohibited-AI rules can already draw fines up to EUR 35 million or 7% of global annual turnover; the national act adds Polish procedural and institutional detail on top of the EU baseline.
Alongside the AI Act, AI deployment in Poland is shaped by other directly-applicable EU rules, notably GDPR (supervised nationally by the President of the Personal Data Protection Office, UODO, which has issued opinions on the draft AI act), providing additional data-protection constraints on AI systems.
Timeline - major decisions & events
The Polish Council of Ministers formally adopted the draft Ustawa o systemach sztucznej inteligencji (Act on Artificial Intelligence Systems), submitting it to the Sejm for enactment. The bill designates a newly created, single-authority regulator, the Commission for the Development and Safety of Artificial Intelligence (KRiBSI), as Poland's sole national market-surveillance authority under the EU AI Act, making Poland one of only two EU states (alongside Lithuania) to centralise oversight in a brand-new institution.
Digital Policy Alert ↗Following the October 2024 public consultation, the Ministry of Digital Affairs released a substantially revised draft with clearer delineation of KRiBSI's enforcement powers, updated provisions on regulatory sandboxes, and stronger citizen-complaint rights against AI-driven decisions. The revised text was the basis for the bill ultimately adopted by the Council of Ministers in March 2026.
Digital Policy Alert ↗Multiple government ministries (Digital Affairs, Education, Defence) signed a letter of intent to launch a PLN 1 billion (~EUR 235 million) AI Innovation Fund, co-ordinated through a new AI Council drawing on the Polish Development Fund (PFR), the National Centre for Research and Development (NCBiR), and the National Development Bank (BGK). The fund is intended to channel public investment into AI start-ups and public-sector AI pilots.
Notes From Poland ↗The Ministry of Digital Affairs released the first public draft of the Ustawa o systemach sztucznej inteligencji, opening a consultation period through 15 November 2024. The bill proposed KRiBSI as the sole national supervisory authority, established conformity-assessment rules for high-risk AI systems, and set administrative penalties up to EUR 35 million or 7 % of global turnover, mirroring EU AI Act maxima.
Regulations.AI ↗Deputy Prime Minister and Minister of Digital Affairs Krzysztof Gawkowski formally appointed the 'PL/AI, Artificial Intelligence for Poland' advisory board comprising Polish AI researchers and industry experts. Tasked with drafting recommendations for public-sector AI adoption, healthcare, and environmental applications, the board also informed the drafting of Poland's national AI Systems Act.
Chambers & Partners ↗Poland's data protection authority (Urząd Ochrony Danych Osobowych, UODO) launched a formal investigation into OpenAI following a complaint by privacy researcher Łukasz Olejnik alleging that ChatGPT generated false biographical information, failed to correct hallucinated personal data, and offered no lawful basis for training-data scraping, marking Poland's first significant AI-specific regulatory enforcement action under GDPR.
TechCrunch ↗Poland's first comprehensive national AI strategy was enacted as an annex to Council of Ministers Resolution No. 196. It defined six strategic pillars, AI and society, innovative companies, science, education, international cooperation, and the public sector, and set objectives to build a competitive AI ecosystem aligned with OECD/EU ethical principles. This document remained Poland's primary AI policy framework until superseded by the 2024 legislative process.
Polish Government (gov.pl) ↗Poland - other topics
Artificial Intelligence in other countries
Last verified 5/25/2026 · Orientation, not legal advice - verify against the primary sources linked above. Methodology & how to cite · Explore the full world map →