Regulation Tracker / EU AI Act / national implementation
What Cyprus has done nationally under Regulation (EU) 2024/1689 as amended by Regulation (EU) 2026/1744: the accompanying law, which bodies it has designated as market surveillance authority, single point of contact and notifying authority, its Article 99 penalty regime, whether an Article 57 regulatory sandbox exists (the deadline is 2 August 2027), and any national guidance that reaches courts, law firms or legal-AI deployers. Each row is dated and sourced to the gazette, parliament or authority; titles in the original language are quoted, English titles marked where translated by us.
compiled by the Cognesio LLP editorial teammethodas of 2026-09-07v0.3.0coding CC BY 4.0official acts quoted ≤25 words in the originalJSON Hugging Face GitHub
National implementing act · 2026 · draft
AI Cyprus announced consultation on a draft Artificial Intelligence Law of 2026 to set the national governance, market-surveillance, control, procedural and sanctions framework for the AI Act in Cyprus.
“"Its purpose is to implement Regulation (EU) 2024/1689"”
Authority designation · 2026 · designated
Authority: Personal Data Protection Commissioner; Ombudsman; Attorney-General — fundamental-rights authority
AI Cyprus lists the Article 77 fundamental-rights authorities as the Personal Data Protection Commissioner, Commissioner for Administration and Human Rights (Ombudsman), and Attorney-General of the Republic.
“"The list of public authorities designated by the Republic of Cyprus is as follows"”
Authority designation · 2025-01-22 · designated
Εθνικές Αρμόδιες Αρχές για την Εποπτεία του Κανονισμού για την Τεχνητή Νοημοσύνη
Authority: Commissioner of Communications; Commissioner for Personal Data Protection — market surveillance authority, single point of contact, notifying authority
A Deputy Ministry notice says the Council of Ministers designated national competent authorities for the AI Act on 22 January 2025, meeting Article 70 requirements and notifying the Commission.
“"προχώρησε στον ορισμό των εθνικών αρμόδιων αρχών"”
Authority designation · 2025-01-22 · designated
Επίτροπος Επικοινωνιών
Authority: Commissioner of Communications — market surveillance authority, single point of contact, notifying authority
The Council notice designates the Commissioner of Communications as notifying authority, market-surveillance authority and single point of contact for national AI Act implementation.
“"Κοινοποιούσα Αρχή (Notifying Authority)"”
Authority designation · 2025-01-22 · designated
Επίτροπος Προστασίας Δεδομένων Προσωπικού Χαρακτήρα
Authority: Commissioner for Personal Data Protection — market surveillance authority
The notice designates the Personal Data Protection Commissioner as market-surveillance authority for Annex III points 1, 6, 7 and 8 high-risk systems and for prohibited-practice supervision within its remit.
“"Αρχή Εποπτείας της Αγοράς (Market Surveillance Authority)"”
Regulatory sandbox (Art. 57) · 2026 · announced
Authority: To be set under draft Artificial Intelligence Law of 2026 — sandbox operator
The draft-law consultation notice states that Cyprus’s implementing law would create an AI Regulatory Sandbox aimed at supporting responsible innovation alongside governance, control and sanctions provisions.
Draft law would create an AI Regulatory Sandbox to support responsible innovation; operator details not yet final in the consultation notice.
“"the creation of an AI Regulatory Sandbox"”
Cyprus and the AI Act
Hugging Face