EDPS sets out its role under the EU AI Act

The AI Act entered into force in the European Union on 1 August 2024, establishing the first comprehensive legal framework on AI globally. The framework is designed to support the development and use of safe and trustworthy AI systems across the EU while protecting fundamental rights, safety and ethical principles.

The European Data Protection Supervisor serves as the competent authority when AI systems used by EU institutions, bodies, offices and agencies fall within the scope of the AI Act. Its responsibilities include monitoring implementation and compliance, with the ability under certain conditions to impose administrative fines on entities that fail to comply.

The EDPS also acts as the market surveillance authority and notified body for relevant EU institutions. These roles cover measures to ensure products meet applicable Union requirements, protect the public interest, and conduct third-party conformity assessment activities such as testing, certification and inspection.

Natural or legal persons may submit complaints to the EDPS when they have grounds to believe an AI system of an EU institution has infringed AI Act provisions. Under Article 77(2), the EDPS must publish the list of EU public authorities and bodies within Article 77(1) that supervise or enforce fundamental rights obligations linked to high-risk AI systems.