Artificial Intelligence · Poland
Artificial Intelligence - Poland
As an EU member state, Poland is governed by the directly-applicable EU AI Act, which entered into force on 1 August 2024 and applies in phases (prohibitions since 2 Feb 2025, GPAI obligations since 2 Aug 2025, the bulk of obligations from 2 Aug 2026). Poland's national implementing law — which designates the competent authority and sets enforcement/penalty procedures — has been adopted by the Council of Ministers (31 March 2026) but is not yet enacted by Parliament. The binding comprehensive framework therefore already applies, while the national institutional architecture is still being finalised.
Regulation (EU) 2024/1689 is a directly-applicable EU regulation in force in Poland since 1 August 2024; prohibited practices and AI-literacy duties apply from 2 Feb 2025, general-purpose AI (GPAI) model obligations from 2 Aug 2025, and most remaining obligations (including transparency under Art. 50) from 2 Aug 2026, with embedded high-risk products extended to 2 Aug 2028.
Poland's draft 'Act on Artificial Intelligence Systems' (first published 16 Oct 2024 on the Government Legislation Centre portal, revised after consultations) was adopted by the Council of Ministers on 31 March 2026 and submitted to Parliament; it is not yet enacted, so the national-level transposition (authority designation, penalties, procedures) remains a bill.
Unlike most EU states, Poland plans to create a brand-new collegiate body — the Commission for the Development and Safety of Artificial Intelligence (Komisja Rozwoju i Bezpieczeństwa Sztucznej Inteligencji, KRiBSI) — as its sole national market-surveillance authority and single EU point of contact, rather than dispersing oversight among existing sectoral regulators.
Under the draft, KRiBSI is to comprise a chairperson, two deputy chairpersons and permanent members representing the Office of Competition and Consumer Protection (UOKiK), the Financial Supervision Authority (KNF), the Office of Electronic Communications (UKE) and the National Broadcasting Council (KRRiT), to pool scarce AI-supervision expertise.
Enforcement and sanctions are aligned with the EU AI Act, under which breaches of prohibited-AI rules can already draw fines up to EUR 35 million or 7% of global annual turnover; the national act adds Polish procedural and institutional detail on top of the EU baseline.
Alongside the AI Act, AI deployment in Poland is shaped by other directly-applicable EU rules — notably GDPR (supervised nationally by the President of the Personal Data Protection Office, UODO, which has issued opinions on the draft AI act) — providing additional data-protection constraints on AI systems.
Machine-assisted translation · verified 5/25/2026 · orientation, not legal advice. English version →