Poland has brought new artificial intelligence enforcement provisions into force on Wednesday, 28 October, giving its national AI regulator legal powers to investigate suspected violations, carry out inspections and impose financial penalties under applicable Polish and European Union rules.
The changes mark a significant step in Poland’s implementation of the EU Artificial Intelligence Act, establishing procedures through which potentially unlawful AI systems can be examined by national authorities.
The new framework is overseen by the Commission for the Development and Security of Artificial Intelligence (KRiBSI), Poland’s newly established AI supervisory authority.
- Find more news from Poland on our Homepage .
However, although the relevant legal provisions now apply, the commission is still developing some of the practical arrangements needed to handle complaints.
What changes on 28 October?
The changes follow the adoption of Poland’s Act on Artificial Intelligence Systems on 3 July 2026.
According to the legislation published in Poland’s official legal register, most of the Act entered into force on 11 August, but lawmakers delayed several important enforcement provisions until 28 October.
These provisions establish procedures for regulatory inspections, market surveillance investigations and administrative penalties.
They also cover the commission’s ability to issue individual opinions and explanations concerning the application of AI legislation.
Under the framework, regulators can examine whether relevant organisations are complying with applicable requirements and take enforcement action where the legal conditions are met.
The legislation also establishes procedures for exceptional mitigation of sanctions in qualifying circumstances.
The commencement of these provisions does not mean that every use of artificial intelligence is now subject to identical regulatory requirements. The applicable obligations depend on the type of AI system, how it is used and which provisions of European and national legislation are already in force.
How can people complain about AI systems?
One of the most significant practical developments is the establishment of a national mechanism for reporting suspected violations of AI legislation.
Article 59 of Poland’s legislation provides for complaints concerning possible breaches of the national Act or the EU AI Act.
Complaints may concern the suspected unlawful operation or deployment of an AI system, including circumstances where its use raises questions about compliance with applicable safeguards.
The commission’s official complaints guidance confirms that eligible complainants can report possible violations.
However, the authority’s electronic complaints form was still described as being under development on 28 October.
Reporting by Rzeczpospolita indicates that complaints should generally be submitted electronically, with paper submissions possible where electronic filing is not feasible.
The distinction matters for individuals and organisations seeking to raise concerns immediately. The legal mechanism is now in place, but the availability of a dedicated online submission system has not yet been confirmed.
Submitting a complaint does not automatically establish that an AI system has broken the law or guarantee that a formal investigation will follow.
The commission must assess complaints within the applicable legal framework and determine whether further regulatory action is justified.
You May Also Be Interested In
Who is responsible for enforcing the rules?
Poland’s new supervisory commission is chaired by Pamela Krzypkowska, an artificial intelligence specialist and former senior official at the Ministry of Digital Affairs.
Her appointment followed parliamentary procedures in September 2026.
According to her official government biography, Krzypkowska previously worked on AI implementation in the private sector and held senior positions responsible for research, innovation and technology policy within the ministry.
KRiBSI is intended to serve as an independent supervisory authority, supported administratively by the Ministry of Digital Affairs.
Its responsibilities extend beyond enforcement.
The commission is also expected to support innovation, provide regulatory guidance and oversee initiatives designed to help organisations develop and test AI systems within controlled regulatory environments.
The Ministry of Digital Affairs previously explained that the commission would bring together representatives of existing Polish regulatory institutions, including authorities responsible for competition, financial markets, telecommunications and broadcasting.
This structure is designed to coordinate AI supervision across sectors already subject to specialist regulation.
The ministry had previously indicated that the commission would begin operating in November 2026.
Consequently, the legal commencement of its enforcement powers should not be confused with confirmation that every aspect of its organisational and technical infrastructure is already fully operational.
Can companies now face financial penalties?
The provisions taking effect on Wednesday include procedures allowing administrative financial penalties to be imposed for violations falling within the relevant legislation.
The Polish Act links the commission’s sanctioning powers to the circumstances, limits and conditions established by the EU AI Act.
However, the existence of a national enforcement procedure does not mean that every AI-related violation can immediately attract the same penalty.
The EU framework distinguishes between different categories of prohibited practices, regulatory obligations and types of organisations.
Financial penalties must be assessed under the applicable provisions, taking account of the nature of the infringement and the relevant legal requirements.
For businesses developing or deploying AI systems, the practical significance is that Poland now has a more developed domestic framework for investigating suspected non-compliance and pursuing enforcement proceedings.
Companies must nevertheless assess their obligations against the specific EU rules applicable to their activities rather than assuming that every requirement took effect on 28 October.
How does this relate to the EU AI Act?
Poland’s legislation provides national supervisory and procedural arrangements for enforcing the EU’s wider artificial intelligence regulatory framework.
The EU AI Act establishes rules intended to address risks associated with artificial intelligence, including threats to safety, fundamental rights and the reliability of certain automated decision-making systems.
Its requirements are being introduced in stages.
Prohibitions on specified unacceptable AI practices began applying in February 2025, while governance provisions and obligations concerning general-purpose AI models began applying in August 2025.
A wider group of provisions became applicable in August 2026.
However, important deadlines for high-risk AI systems have been extended.
Under Regulation (EU) 2026/1744, adopted in July 2026, certain high-risk AI requirements will apply from 2 December 2027.
These include requirements affecting specified uses of AI in areas such as employment, education, critical infrastructure and migration.
For high-risk AI systems associated with products covered by relevant EU product legislation, the corresponding requirements will generally apply from 2 August 2028.
The revised timetable means that businesses and public authorities must distinguish between obligations already enforceable and those subject to later application dates.
The Polish changes on 28 October concern national supervisory powers and procedures. They do not bring forward the EU’s remaining implementation deadlines.
What happens next?
The immediate challenge is turning the new legal framework into an accessible and effective supervisory system.
That includes completing the commission’s operational arrangements, making complaint procedures available and establishing how investigations will work in practice.
For individuals, the development creates a clearer national route for raising concerns about potentially unlawful AI systems.
For companies and public institutions, it introduces a domestic enforcement framework alongside the EU obligations that already apply.
The next significant test will be how the commission handles complaints, coordinates with other regulators and applies its new powers as Poland’s AI oversight system becomes fully operational.
