Unacceptable Risk

For example, AI systems that allow “social scoring” by governments or companies are considered a clear threat to people's fundamental rights and are therefore banned.

High Risk

High-risk AI systems such as AI-based medical software or AI systems used for recruitment must comply with strict requirements, including risk-mitigation systems, high-quality data sets, clear user information, human oversight, etc.

Limited Risk

Systems like chatbots must clearly inform users that they are interacting with a machine, while certain AI-generated content must be labelled as such.

Minimal Risk

Most AI systems such as spam filters and AI-enabled video games face no obligation under the AI Act, but companies can voluntarily adopt additional codes of conduct.

Submit Complaint

Governance

The governance of the EU Artificial Intelligence (AI) Act

The governance of the EU Artificial Intelligence (AI) Act is structured around a multi-level framework designed to ensure consistent implementation, effective supervision, and expert guidance across all Member States.

EU Level

AI Office

The AI Office, established as a European centre of expertise in artificial intelligence, oversees the enforcement of the Regulation and ensures its uniform application across all EU Member States. It supports the governance bodies in their tasks and acts as the competent market surveillance authority for general-purpose AI models.

AI Board

The AI Board is composed of representatives from each Member State and is supported by the AI Office, which serves as its secretariat. The Board plays a central role in coordinating implementation throughout the EU by:

  • Providing advice and assistance on the Regulation’s application,
  • Discussing and developing implementation guidelines,
  • Coordinating national competent authorities, and
  • Exchanging technical and regulatory expertise.

Advisory Forum

The Advisory Forum brings together a broad range of stakeholders including startups, SMEs, academia, and non-commercial organizations, offering technical expertise and advice to the AI Board.

Scientific Panel

The Scientific Panel, composed of independent experts in AI, provides technical guidance to the AI Office and national authorities on applying the Regulation’s requirements, particularly concerning general-purpose AI models.

National Level

At the national level, each Member State, such as Cyprus, is responsible for implementing, supervising, and enforcing the AI Act.

Cyprus has already taken the first official steps towards implementing the Artificial Intelligence Act (AI Act). In January 2025, the Council of Ministers designated the Deputy Ministry of Research, Innovation and Digital Policy as the authority responsible for setting policy direction and providing strategic coordination of the national AI governance framework. The Commissioner of Communications was appointed as both Notifying Authority and Market Surveillance Authority, also assuming the role of the single point of contact. In addition, the Commissioner for Personal Data Protection was also designated as a Market Surveillance Authority. 

Cyprus has opted for a centralised governance model. The Commissioner of Communications serves as the single point of contact for the Regulation and works closely with the Office of the Commissioner for Personal Data Protection on related matters. At the same time, a collaborative framework is being developed to define responsibilities and strengthen cooperation with other national market surveillance authorities, with the aim of promoting information exchange, providing technical support, and enhancing transparency within Cyprus’s artificial intelligence ecosystem. 

Market Surveillance Authorities

are responsible for monitoring and enforcing the Regulation,

The Notifying Authority

is responsible for setting up and carrying out the necessary procedures for the assessment, designation and notification of conformity assessment bodies and for their monitoring, and 

The Notified Bodies

are conformity Assessment Bodies (C.A.B.) which have been notified by the Notifying Authority, and perform conformity assessment activities on AI systems, including testing, certification and inspection;

The Council of Ministers also approved the establishment of a National Artificial Intelligence (AI) Taskforce, with an advisory role and the main objective of developing, integrating, and implementing artificial intelligence in Cyprus. The Taskforce, chaired by the Chief Scientist for Research, Innovation and Technology, will submit proposals and recommendations to the President of the Republic through the Deputy Minister of Research, Innovation and Digital Policy. 

The Cyprus Organization for the Promotion of Quality (CYS-CYSAB) acts as the National Accreditation Body, responsible for accrediting assessment bodies under the AI Act. A cooperative framework is being developed to define roles and strengthen collaboration between the CYS-CYSAB and the national notifying authority, promoting information sharing, technical support, and transparency in the Cypriot AI ecosystem.