Poland AI Systems Act
Ustawa z dnia 3 lipca 2026 r. o systemach sztucznej inteligencji (Act of 3 July 2026 on Artificial Intelligence Systems)
Polish national law implementing the EU AI Act. It creates the Komisja Rozwoju i Bezpieczeństwa Sztucznej Inteligencji (KRiBSI, AI Development and Safety Commission) as market surveillance authority and single point of contact, and sets the procedure for inspections, enforcement proceedings and administrative fines for breaches of Regulation (EU) 2024/1689.
Jurisdiction
Poland
Enacted
Jul 3, 2026
Effective
Aug 11, 2026
Enforcement
Komisja Rozwoju i Bezpieczeństwa Sztucznej Inteligencji (KRiBSI), supported administratively by the office of the minister for digital affairs; chair appointed by the Sejm with Senate consent.
Act of 3 July 2026, signed by President Nawrocki and promulgated in Dziennik Ustaw 2026 item 1003 on July 27, 2026. Under Article 127 the Act entered into force on August 11, 2026 (14 days after promulgation); Article 125(4) took effect July 28, 2026; Articles 8 to 18 and Chapters 3 to 5, 8 and 9 (individual opinions, inspections, enforcement proceedings, the sanction-mitigation settlement mechanism, administrative fines and criminal provisions, and amendments to other laws) take effect October 28, 2026.
Dziennik Ustaw 2026 poz. 1003 (Sejm ELI)Why It Matters
Poland created a dedicated collegial AI authority (KRiBSI) in place of assigning AI Act supervision to an existing regulator, and added binding-style individual opinions and a settlement mechanism that operators can use to obtain clarity on classification, including whether a chatbot or companion service is high-risk.
Recent Developments
The Sejm appointed Pamela Krzypkowska as KRiBSI chair by resolution of September 18, 2026, with Senate consent on September 24, 2026 (Monitor Polski 2026 items 945 and 946). Enforcement chapters, including fines, apply from October 28, 2026.
At a Glance
Applies to
Harms addressed
Requires
Who Must Comply
- Providers, deployers, importers and distributors of AI systems subject to Regulation (EU) 2024/1689 in Poland
- Providers of general-purpose AI models within the scope of the AI Act
Safety Provisions
- KRiBSI designated as market surveillance authority under Article 70(1) of the EU AI Act and as the single point of contact (Article 5)
- KRiBSI may issue individual opinions and explanations on application of the AI Act (Article 8)
- Inspection powers over compliance with the AI Act (Chapter 3)
- Enforcement proceedings, including on complaints, before KRiBSI (Chapter 4)
- Settlement mechanism allowing reduced fines in exchange for commitments (Chapter 5)
- Minister for digital affairs is the notifying authority for conformity assessment bodies (Chapter 6)
- Regulatory sandbox run by KRiBSI (Article 91)
- Administrative fines imposed by decision at the levels set in Chapter XII of the EU AI Act; appeal to the Warsaw Regional Court (competition and consumer protection court) (Articles 104 and 109)
Compliance & Enforcement
Key Dates
Aug 11, 2026
Act in force: KRiBSI established as market surveillance authority and single point of contact; notification and sandbox provisions apply
Oct 28, 2026
Articles 8-18 and Chapters 3-5, 8 and 9 apply: individual opinions, inspections, enforcement proceedings, settlement mechanism, administrative fines and criminal provisions
Penalties
€35M or 7% revenue (whichever higher); criminal liability
View on map
Poland
Focus Areas
Cite This
APA
Poland. (2026). Ustawa z dnia 3 lipca 2026 r. o systemach sztucznej inteligencji (Act of 3 July 2026 on Artificial Intelligence Systems).
Related Regulations
Italy D.Lgs. 179/2026
Second of the two legislative decrees implementing Italy's AI law (Law 132/2025). It designates the national authorities under the EU AI Act, sets national administrative fines for AI Act breaches, creates the Italian AI regulatory sandbox, and adds rules on AI in schools, work, the professions, health and public administration, including a bar on employment decisions taken solely by automated processing.
Ireland AI Act 2026
Ireland's national implementing law for the EU AI Act. Establishes Oifig IS na hÉireann, the AI Office of Ireland, and gives effect to Regulation (EU) 2024/1689 through a distributed model in which existing sectoral regulators act as market surveillance authorities, with an adjudication system for administrative fines capped at the AI Act's Article 99 limits and criminal offences for specified non-compliance with authorities' powers.
Germany KI-MIG
German national law implementing the EU AI Act, designating the Bundesnetzagentur (BNetzA) as the lead market surveillance authority under a centralized hybrid model.
CA AB 2246
Repeals and replaces the California Age-Appropriate Design Code Act. Requires a business providing an online service, product or feature likely to be accessed by children to estimate the age of child users with a reasonable level of certainty or extend child protections to all users, to configure high-privacy defaults, and to take reasonable steps to prevent specified harms including severe psychological harm. Removes the exceptions to the data-collection prohibitions, lets children void contracts entered through manipulative design features, and states that it creates no private right of action.
EU DSA Minors Guidelines
Commission guidelines under DSA Article 28(1) establishing measures for online platforms to protect minors, including age assurance, default privacy settings, anti-addictive design restrictions, recommender system safeguards, and protections against grooming and exploitation.
EU Kids Act (Proposed)
Commission proposal for an EU regulation on minors' online safety that would set a harmonised minimum age of 15 for autonomous accounts on risky social networking and video-sharing services, impose safety-by-design duties on those services, online games, app stores, AI companions and general conversational chatbots, and lay down EU-wide rules for privacy-preserving age assurance. Providers of AI companions and general conversational chatbots would have to avoid designs and behaviours that simulate interpersonal relationships likely to create emotional dependency in minors, disable use of a minor's prior interactions by default, gate access for under-13s behind guardian tools, and test and monitor their systems for risks to minors' health, safety and wellbeing.
Last updated October 11, 2026. Verify against primary sources before relying on this information.