Poland Draft AI Act
Draft Act on AI Systems
Poland's draft law implementing EU AI Act domestically, creating KRiBSI (national AI authority), regulatory sandboxes, and binding opinions mechanism.
Jurisdiction
Poland
Enacted
Pending
Effective
TBD
Enforcement
KRiBSI (Krajowa Rada ds. Inteligencji i Bezpieczeństwa Systemów Informacyjnych) - proposed
Expected passage 2025-2026 for EU AI Act implementation
DataGuidance Poland OverviewWhy It Matters
Poland's AI Act implementation with KRiBSI provides binding opinions on whether AI chatbots qualify as high-risk under EU AI Act, creating regulatory clarity pathway.
Recent Developments
Draft under consideration for 2025-2026 passage
At a Glance
Applies to
Requires
Who Must Comply
- AI system providers in Poland (when enacted)
- High-risk AI systems under EU AI Act
- AI operators seeking regulatory clarity
Obligations fall on:
Safety Provisions
- KRiBSI established as national AI authority
- Regulatory sandboxes for AI testing
- Binding opinions on AI system classification
- EU AI Act national implementation
- Market surveillance coordination
Compliance & Enforcement
Penalties
EU AI Act penalties (when enacted)
Primary Source
DataGuidance Poland Overview
https://www.dataguidance.com/
View on map
Poland
Focus Areas
Cite This
APA
Poland. (n.d.). Draft Act on AI Systems.
Related Regulations
Finland AI Act
Finland's EU AI Act implementation using decentralized supervision model. Traficom serves as single point of contact and coordination authority. Ten market surveillance authorities share enforcement across sectors. New Sanctions Board handles fines over EUR 100,000.
Hungary AI Act
Hungary's comprehensive AI law implementing the EU AI Act. Designates the National Media and Infocommunications Authority (NMHH) as the primary supervisory authority, with sectoral regulators for specific domains.
Denmark AI Act
First EU member state to fully implement the EU AI Act. Designates three competent authorities, establishes penalty framework aligned with EU maximums, and grants inspection/enforcement powers. Does not add material requirements beyond EU AI Act.
EU PLD
Modernized product liability framework explicitly covering AI systems and software as products. Shifts burden of proof in complex AI cases, allows disclosure orders for technical documentation, and addresses liability for AI-caused harm including through software updates.
TCO Regulation
Requires hosting services to remove terrorist content within one hour of receiving a removal order. One of few regulations with real-time moderation mandates.
EU CSAM Interim
Temporary legal bridge allowing certain communications providers to voluntarily detect/report/remove CSAM, notwithstanding ePrivacy constraints. Extended via 2024/1307 while permanent CSAR negotiated.
Last updated January 22, 2026. Verify against primary sources before relying on this information.