Data Protection Commission

The DPC is competent as a Market Surveillance Authority under the EU AI Act, as designated under S.I. No. 366/2025, for the following areas:

  • for certain prohibited AI practices under Article 5

  • for certain Annex III High-Risk systems under Article 6(2)

Note: regulation of certain prohibited AI practices under Article 5 of the EU AI Act is contingent on other factors that are elsewhere under consideration, while the applicability date for measures for High-Risk AI systems (Annex III) has been extended by 16 months from the original 2026 date, i.e. to be applicable no later than 2 December 2027.

Find more information: Data Protection Commission