Business@OptimusCyberX.ai+[00] [0000] [0000] AI-powered cybersecurity for small and mid-sized businesses · Building with AI? Visit Optimus AI →
Optimus CyberX, Cybersecurity Simplified
Get a free security assessment
Menu
National AI regulation

Ireland’s AI Act, and other national AI laws

How Ireland is enforcing the EU AI Act, and what its national law adds.

27EU member states
Manyauthorities, one coordinator
EU AI Actbase law
2026Irish Act signed

Official sources

Use these official places to read the text and find the latest version.

Official website

The Department of Enterprise, Tourism and Employment leads on AI Act implementation in Ireland.

Visit enterprise.gov.ie ↗

Get the document

The Regulation of Artificial Intelligence Act 2026 is on the Irish Statute Book. Each country publishes its own implementing law and designates its authorities.

Open the official page ↗

Works alongside

EU AI Act, GDPR, ISO 42001.

Browse all frameworks →

What Ireland AI Act is

The EU AI Act is an EU law, but each member state must name the authorities that enforce it. Some countries also add their own rules or guidance.

This page tracks the national picture, starting with Ireland, which signed its Regulation of Artificial Intelligence Act 2026 into law on 21 July 2026.

History

How Ireland AI Act got to where it is today

The milestones that changed what organisations have to do.

2024

EU AI Act enters into force

Member states begin preparing national enforcement.

2025

Authorities designated

States name their market surveillance authorities. Ireland uses a distributed model, with several sector regulators plus a central body.

2026Current

Irish AI Act signed

The Regulation of Artificial Intelligence Act 2026 is signed on 21 July 2026. It sets up the AI Office of Ireland as the central coordinating body and single point of contact, with enforcement and sanctions for the AI Act, and provides for regulatory sandboxes.

Dates are for orientation. The official website holds the authoritative record.

Do you need it?

If any of these sound familiar, probably yes.

1

You operate in Ireland or another EU state.

2

You sell AI across several countries.

3

You need to know your national regulator.

4

You track national differences.

What it asks of you

The requirements fall into six areas.

01

Who enforces

Name the national authorities.

02

National rules

Additional local requirements.

03

Sandboxes

Supervised testing spaces for AI.

04

Penalties

National penalty rules.

05

Reporting

Where to report incidents.

06

Updates

Track new national laws.

The 4 parts, 8 authority groups and 30 items

Ireland has a distributed model: the AI Office of Ireland coordinates, and existing sector regulators supervise AI in their own areas. This page lists who does what, so you know whom to talk to.

8 authority groups · 30 items

Legal basis and institutionsHow Ireland set up national AI Act oversight.2 authority groups · 5 items
National implementing lawIreland passed a national Act to put the EU AI Act into operation.2 items
  1. IE-ACT

    The Regulation of Artificial Intelligence Act 2026 is the Irish law that establishes the AI Office of Ireland and supports national enforcement of the EU AI Act.

    What you do

    • Add the Act to your legal register and check its provisions with counsel
    • Monitor commencement and secondary rules
  2. IE-MODEL

    Ireland uses a distributed model where existing sector regulators oversee AI in their own areas, coordinated by a central office.

    What you do

    • Identify which regulator covers your sector and AI use cases
    • Keep a map of regulators to systems

Evidence to keep

  • Record of the Irish Act and commencement dates
  • Legal register entry for AI regulation
AI Office of IrelandThe central coordinating body and single point of contact.3 items
  1. IE-AIO1

    The AI Office of Ireland (Oifig IS na hÉireann) is the independent statutory body, established on 2 August 2026, that coordinates implementation of the EU AI Act in Ireland.

    What you do

    • Subscribe to its updates and guidance
    • Use it as your first point of contact for general queries
  2. IE-AIO2

    The Office acts as Ireland's single point of contact for the AI Act and provides central functions.

    What you do

    • Route EU-level enquiries through it
    • Record the contact in your compliance file
  3. IE-AIO3

    The Office runs business support, including a compliance guide for understanding which obligations apply.

    What you do

    • Walk through the Office's compliance guide for each AI system
    • Keep a copy of the outcome

Evidence to keep

  • Contact record for the AI Office
  • Record of guidance received and applied
Designated national competent authoritiesRegulators designated to date for oversight and enforcement.4 authority groups · 13 items
Financial and data authoritiesAuthorities for financial services and personal data related AI.2 items
  1. IE-CBI

    Central Bank of Ireland: market surveillance authority for certain prohibited practices and for high-risk AI systems in its remit.

    What you do

    • Regulated firms map AI use cases to Central Bank expectations
    • Engage compliance and risk functions early
  2. IE-DPC

    Data Protection Commission: market surveillance authority for certain prohibited AI practices and certain high-risk use cases.

    What you do

    • Align AI Act work with GDPR impact assessments
    • Keep records for AI systems that process personal data

Evidence to keep

  • Authority-to-AI-system mapping
  • Regulator correspondence log
Media, communications and competitionAuthorities for media, radio equipment and consumer-related AI.3 items
  1. IE-CNAM

    Coimisiún na Meán: designated national competent authority under the AI Act.

    What you do

    • Media and platform businesses check applicable duties
    • Follow its published guidance
  2. IE-COMREG

    ComReg: market surveillance and notifying authority for radio equipment under the Radio Equipment Directive.

    What you do

    • Manufacturers with AI in radio equipment confirm product compliance routes
    • Check CE marking steps
  3. IE-CCPC

    Competition and Consumer Protection Commission: market surveillance authority for certain high-risk AI systems in Annex I products.

    What you do

    • Consumer product makers review AI in regulated products
    • Prepare product documentation

Evidence to keep

  • Authority mapping for products and content tools
Product, health and transport authoritiesAuthorities for AI in regulated products and sectors.7 items
  1. IE-HSA

    Health and Safety Authority: market surveillance authority for AI safety systems under six of the Annex I Section A product laws.

    What you do

    • Machinery and equipment makers check which laws apply
    • Plan conformity assessment
  2. IE-HPRA

    Health Products Regulatory Authority: regulator for medical devices and in vitro diagnostic devices, relevant to AI embedded in them.

    What you do

    • Medical AI developers align AI Act and device conformity
    • Maintain combined technical files
  3. IE-HSE

    Health Service Executive: designated national competent authority listed by the AI Office.

    What you do

    • Health suppliers confirm requirements with the HSE where relevant
    • Record the engagement
  4. IE-CRR

    Commission for Railway Regulation: national safety and competent authority for rail, listed as an AI Act authority.

    What you do

    • Rail technology suppliers check AI components
    • Align with rail safety processes
  5. IE-CRU

    Commission for Regulation of Utilities: energy and water regulator listed as an AI Act authority.

    What you do

    • Utility technology suppliers check AI used in operations
    • Document risk controls
  6. IE-MSO

    Marine Survey Office of the Department of Transport: maritime transport regulator listed as an AI Act authority.

    What you do

    • Maritime tech suppliers check applicable rules
    • Keep product documentation
  7. IE-NTA

    National Transport Authority: market surveillance authority for road transport and intelligent transport management systems.

    What you do

    • Transport technology suppliers confirm routes with the NTA
    • Keep records of conformity

Evidence to keep

  • Product regulator mapping
  • Conformity documentation by product type
EmploymentAuthority for AI at work.1 item
  1. IE-WRC

    Workplace Relations Commission: supervises the deployment and use of AI systems in the Irish labour market.

    What you do

    • Employers list recruitment, monitoring and management tools
    • Inform workers and keep human oversight records

Evidence to keep

  • Record of HR AI tools and how workers were informed
Fundamental rights authorities (Art. 77)Public bodies with added powers to access AI documentation.1 authority group · 9 items
Listed authoritiesThese bodies are not AI Act competent authorities but can request documentation from providers and deployers from 2 August 2026.9 items
  1. IE-FR1

    An Coimisiún Toghcháin may use access powers where AI affects electoral matters.

    What you do

    • Keep documentation accessible and current
    • Name a person to answer requests
  2. IE-FR2

    Coimisiún na Meán is also on the list of fundamental rights authorities.

    What you do

    • Keep documentation for high-risk systems affecting rights
    • Respond promptly to requests
  3. IE-FR3

    The Data Protection Commission is on the list and can access AI Act documentation in rights-related cases.

    What you do

    • Link AI documentation to your GDPR records
    • Prepare a combined evidence pack
  4. IE-FR4

    The Environmental Protection Authority is on the list for environmental rights matters.

    What you do

    • Check whether your AI affects environmental decisions
    • Retain relevant records
  5. IE-FR5

    The Financial Services and Pensions Ombudsman is on the list.

    What you do

    • Financial firms keep explanation records for AI-assisted decisions
    • Maintain complaints evidence
  6. IE-FR6

    The Irish Human Rights and Equality Commission is on the list and has an interest in discrimination risks.

    What you do

    • Run and keep bias assessments for high-risk systems
    • Keep decision explanation procedures
  7. IE-FR7

    The Ombudsman is on the list for public service decisions.

    What you do

    • Public suppliers retain AI documentation for their customers
    • Support public body requests
  8. IE-FR8

    The Ombudsman for Children's Office is on the list.

    What you do

    • Assess impact on children for relevant systems
    • Keep records of that assessment
  9. IE-FR9

    The Ombudsman for the Defence Forces is on the list.

    What you do

    • Suppliers to defence bodies keep documentation available
    • Confirm scope with counsel

Evidence to keep

  • Document pack ready for regulator access requests
  • Register of high-risk AI documentation
Support and innovationNational programmes that help SMEs comply.1 authority group · 3 items
Regulatory sandbox and supportA controlled space to test AI with regulatory guidance.3 items
  1. IE-SBX

    Ireland runs an AI regulatory sandbox programme where developers can test AI with regulatory guidance.

    What you do

    • Consider applying if developing a novel or high-risk system
    • Keep sandbox findings in your technical file
  2. IE-LIT

    Free AI learning resources are provided for staff awareness and literacy.

    What you do

    • Use them to support Art. 4 AI literacy
    • Record completions
  3. IE-SUP

    National business supports and funding exist for AI adoption.

    What you do

    • Check supports before committing to compliance spend
    • Track applications

Evidence to keep

  • Sandbox application or interest record
  • Records of guidance received

Outcomes and implementation examples are from AI Office of Ireland: National Competent Authorities, published by NIST. Descriptions of what to do and the evidence lists are our own plain-English guidance. Check the official source for the authoritative text.

Your path to getting started

Five steps from first look to ready. Effort depends on your size and starting point.

  1. 1

    List your markets

    Countries.

  2. 2

    Find each regulator

    And its guidance.

  3. 3

    Map national differences

    Per country.

  4. 4

    Update compliance plan

    Add local notes.

  5. 5

    Monitor changes

    Quarterly.

How Optimus AI helps

Each area maps to a part of the platform, so the work and the evidence sit together.

What it asksWhat you do in Optimus AI
Who enforcesRegulator register
National rulesObligations register
SandboxesSandbox notes
PenaltiesEvidence pack
ReportingIncident workflow
UpdatesChange alerts

Free Ireland AI Act readiness checklist

A one-page PDF you can print or share with your team. No sign-up needed.

Download the checklist (PDF)
  • Country tracker
  • Regulator contact sheet
  • National obligations register
  • Change log

Share or cite this page

Writing about Ireland AI Act? You are welcome to link to this guide. Copy the link below.

<a href="/frameworks/ireland-ai-act/">Ireland AI Act explained in plain English - Optimus CyberX</a>

Common questions

Is there an Irish AI Act?

Yes. The Regulation of Artificial Intelligence Act 2026 was signed into law on 21 July 2026 and comes into operation by ministerial order.

Do I follow EU or national rules?

Both. The EU AI Act applies directly. National law covers enforcement.

Who enforces in Ireland?

The AI Office of Ireland coordinates and is the single point of contact. Enforcement is shared across designated sector regulators, under a distributed model. The Central Bank and the competition authority are given powers to impose sanctions.

Will other countries be added?

Yes. As other member states pass their own laws or name their authorities, we plan to add pages for them.

Related frameworks

See how ready you are for Ireland AI Act

Answer questions across every area. We email you a report showing where you comply and where you do not.

Run your free assessment