New AI Oversight Authority Established as President Signs Legislation

President Karol Nawrocki signed a law regulating Poland’s artificial intelligence market, creating the Commission for Artificial Intelligence Development and Safety to oversee AI compliance and consumer protection.

Establishment of the AI Oversight Authority

President Karol Nawrocki signed legislation regarding the operational rules of the artificial intelligence market in Poland, as announced by the Chancellery of the President on Friday. The new regulations establish the Commission for Artificial Intelligence Development and Safety, which will serve as the national supervisory body for AI systems.

The legislation implements the European Union’s AI Act in Poland. Its provisions primarily create a market surveillance body—the Commission for Artificial Intelligence Development and Safety—empowered to initiate audits in companies and verify whether AI-based technologies meet regulatory requirements.

Presidential Perspective and Legislative Scope

According to President Karol Nawrocki, the law primarily organizes AI oversight in Poland. He noted that the legislation gained broad support in parliament, emphasizing that artificial intelligence can become an important tool for the Polish economy, science, and administration while acknowledging risks such as identity theft, image falsification, deepfakes, and the exploitation of technology to harm children and youth.

The President also stressed that Poland cannot choose between development and security, adding that innovation must be supported while technology always serves humanity rather than the reverse.

Commission Powers and Regulatory Sandboxes

The law allows individuals to submit complaints regarding the operation of AI systems directly to the Commission for Artificial Intelligence Development and Safety. The Commission’s tasks also include issuing authorizations for high-risk systems—utilized in education, critical infrastructure, employment, and migration management—as well as imposing penalties and withdrawing non-compliant systems from the market.

Additionally, the Commission is tasked with establishing regulatory sandboxes that enable companies to test innovative AI solutions in controlled and secure environments. The regulations stipulate that at least one regulatory sandbox must be established by August 2 of this year.

Structure and Advisory Council

The work of the Commission will be led by a chairperson, supported by two deputies, alongside the President of the Office of Competition and Consumer Protection (UOKiK), the President of the Office of Electronic Communications (UKE), and representatives from the Polish Financial Supervision Authority (KNF) and the National Broadcasting Council (KRRiT). The Commission is also required to cooperate with national authorities, including the Patent Office of the Republic of Poland, the Office for Registration of Medicinal Products, and cybersecurity bodies. Administrative and clerical support for the Commission will be provided by the office serving the Minister of Digitalization.

The Sejm will appoint the chairperson with the consent of the Senate within two months, and the Commission’s first meeting is scheduled to take place within three months of the law’s entry into force.

Furthermore, the new regulations mandate the creation of an advisory body operating alongside the commission: the Social Council for Artificial Intelligence, consisting of 9 to 15 members.

Exemptions and Supporting Measures

The law’s provisions do not apply to matters concerning national security involving the Internal Security Agency (ABW), the Foreign Intelligence Service (AW), the Military Counterintelligence Service, and the Military Intelligence Service. The regulations also exclude natural persons using AI systems exclusively for personal purposes unrelated to business, agricultural, or other legally regulated activities.

The legislation dictates that the Minister of Digitalization may provide financial support from the state budget and EU funds for scientific research and development work concerning AI. The minister will also serve as the body notifying conformity assessment bodies regarding EU AI procedures, while accreditation matters are assigned to the Polish Centre for Accreditation.

Additionally, the regulations specify a 14-day window for audited entities to sign the inspection protocol and deliver it to the Commission or submit objections, while mandating confidentiality from inspectors regarding trade secrets.

The European Union’s Artificial Intelligence Act entered into force on August 1, 2024, with certain exceptions. Provisions concerning prohibited AI systems in the EU took effect in February 2025. Member states had until August 2, 2025, to designate a market surveillance authority, and the regulation will apply in full by 2027.