EU AI Act in Ireland
Ireland took the opposite approach to Germany: rather than one lead regulator, a distributed model with fifteen designated competent authorities across financial, consumer, health, utility and telecom sectors, coordinated centrally. It is among the more advanced implementations, which makes it a useful reference even if you are not Irish.
80 days to 2 December 2026 — two new Article 5 prohibitions, and Article 50(2) marking for generative systems already on the market. Full timeline →
Who regulates AI in Ireland under the EU AI Act?
Ireland uses a distributed model. Reporting indicates fifteen competent authorities have been designated across financial, regulatory, consumer, health, utility and telecom sectors, under the remit of the Department of Enterprise, Trade and Employment, together with nine fundamental rights authorities designated under Article 77, and a National AI Office as central coordinating body.
Reg. (EU) 2024/1689 as amended by Reg. (EU) 2026/1744 · more questions on this page
Does this reach your organisation?
- Yes if you place an AI system on the EU market, or put one into service in the EU, wherever you are established.
- Yes if you are established in the EU and use an AI system under your own authority.
- Yes if you are outside the EU and the output your system produces is used in the Union.
No EU entity and no EU customers of record is not an exemption. Article 2 turns on market placement and on where output is used. Check your position in 12 questions →
High-volatility page, verify before relying on it
National implementation is moving and public sources disagree about the status of several member states. Everything below is dated to our last review. Before relying on any statement about which authority supervises you, check the Commission’s published list of notified national competent authorities and the authority’s own website. We would rather tell you a fact is contested than present it cleanly and be wrong. Our standards →
Status as at our last review
| Model | Distributed: fifteen designated competent authorities spanning financial, regulatory, consumer, health, utility and telecom sectors, under the remit of the Department of Enterprise, Trade and Employment. |
| Fundamental rights authorities | Nine designated under Article 77: the bodies empowered to request and access documentation where necessary to protect fundamental rights. |
| Coordinating body | A National AI Office (Oifig Náisiúnta na hIntleachta Saorga), reported as the central coordinating body. |
| Why it matters beyond Ireland | Ireland hosts the EU establishment of a large share of major technology companies. Where a provider’s EU entity is Irish, Irish authorities are frequently the relevant market surveillance authorities for that provider across the Union. |
Where this usually goes next
Three situations account for most people reading this page. Each has a different answer.
A deal is blocked on an AI questionnaire
Legal will not sign until you can evidence how AI is governed. HumanAudit’s AI Trust Package is a fixed $3,500 over five business days: a public trust page, a pre-filled SIG Lite / CAIQ / SSPA Section K questionnaire bank, and your AI inventory and classification.
You need ISO/IEC 42001 documentation
23 clause-mapped AIMS documents with all 38 Annex A controls pre-populated, editable and yours to keep, from $199. Or score your gaps first: 18 questions, free, no signup to begin.
You are not sure what reaches you
A request for information from the AI Office asks which AI systems you run, what each is for, which role you hold, and what is documented. The reply itself is penalty-bearing. Twenty minutes covers the same ground while nothing turns on the answer.
This reference is published by HumanAudit Inc. Not a law firm, not an accredited certification body, not a registered auditor. We build documentation, your counsel interprets it, and an accredited body of your choosing certifies you. How this is funded →
Where the sources disagree
Reporting on Ireland is more consistent than for Germany or France, but the precise count and identity of designated authorities and the operational status of the National AI Office should still be checked against the Department’s own publications rather than taken from a summary.
How to get a definitive answer
- The European Commission’s published list of national competent authorities notified under Article 70 is the authoritative record of who has been designated.
- The authority’s own website, which will usually say whether it has AI Act competence.
- Your sector regulator, which in several member states retains competence for high-risk AI in its field regardless of who the lead authority is.
What to do in Ireland specifically
- Find your competent authority by sector. With a distributed model, the question is never “who regulates AI in Ireland” but “which of the designated authorities covers my activity”.
- Note the Article 77 fundamental rights authorities. Ireland designated a set of them separately. They can request and access documentation where necessary to protect fundamental rights: a route into your records that does not run through your market surveillance authority.
- If your EU entity is Irish, this is your primary jurisdiction for AI Act supervision across the Union, not merely for Irish operations. That is why Irish capacity matters to companies with no Irish customers.
- Relative advance is an advantage and an exposure. An advanced member state is where early supervisory activity is most likely to originate. Expert analysis.
What does not depend on designation
The AI Act is a regulation. It applies directly and in full without national transposition. Member states designate authorities and set national penalty procedures: they do not create the obligations.
So none of this is waiting on a designation:
Article 50 disclosure, Article 4 literacy, Article 49 registration, classification and the Article 6(4) assessment are all live or actionable and none waits on a designation. Full checklist →
Status labels on this page
Verified fact: The Regulation applies directly without transposition; the Article 70 designation duty applied from 2 August 2025; the obligations listed above are independent of national designation.
Expert analysis: The assessment of what matters practically in an early enforcement conversation.
Unsettled: The current designation status in this member state. Sources conflict; verify against the Commission's published list.
Work on what does not depend on a regulator
Inventory, classification, Article 50 and Article 4 are all actionable today and none of them waits on a national designation. That is the work with no excuse attached to it.
Not sure where you sit?
The classifier maps your system against Articles 5, 6, 50 and Annex III. Twelve questions, no email.
Frequently asked
Who regulates AI in Ireland under the EU AI Act?
Ireland uses a distributed model. Reporting indicates fifteen competent authorities have been designated across financial, regulatory, consumer, health, utility and telecom sectors, under the remit of the Department of Enterprise, Trade and Employment, together with nine fundamental rights authorities designated under Article 77, and a National AI Office as central coordinating body. Verify the current list against the Department's own publications.
Why does Irish implementation matter to non-Irish companies?
Ireland hosts the EU establishment of a large share of major technology companies. Where a provider's EU entity is in Ireland, Irish authorities are frequently the relevant market surveillance authorities for that provider, which makes Irish designation and capacity relevant well beyond Irish-headquartered businesses.
What happens if this is not in order
Enforcement powers have applied since 2 August 2026. The AI Office can issue requests for information, evaluate models, interview staff and inspect premises. Three reporting channels are live: a public complaint tool, a whistleblower tool your own staff can use securely, and a complaints channel for downstream customers.
Penalties run to €35M or 7% for Article 5 prohibitions and €15M or 3% for other operator obligations including high-risk and Article 50. Separately, an incorrect or misleading reply to a request for information carries up to €7.5M or 1% — you can be substantively compliant and still penalised for how you answered. What is enforceable today →