EU AI Act enforcement status update as of March 2026

The European Commission maintains a list of single points of contact for member states regarding the EU AI Act. As of March 2026, that list included eight entries from the 27 member states. Member states were required to designate competent authorities and single points of contact by 2 August 2025. The national market surveillance authority serves as the single point of contact at the national level. The AI Act requires member states to name at least one notifying authority and a market surveillance authority. The notifying authority sets up procedures for assessing high-risk AI systems before they enter the market. It designates conformity assessment bodies to perform the assessments, which then become notified bodies. The market surveillance authority conducts checks after AI systems have been placed on the internal market. These checks can include requesting documents, evaluating systems and imposing fines when necessary. A separate authority may handle checks for certain sectors such as financial institutions or law enforcement.