Partially in place NL Verified 21 Oct 2026

Netherlands

EU AI Act implementation, 2026

The Netherlands has a settled supervisory design (ten sectoral market surveillance authorities coordinated by the AP and RDI) but its implementing act is still a draft: consulted April-June 2026, with submission to the Tweede Kamer not planned before Q2 2027, so no national penalty regime or sandbox is legally in force.

Implementing law
In consultationApr 2026
Penalty regime (Art. 99)
Not adopted
Regulatory sandbox
Planned
Readiness rank
15 of 27score 45 / 100

Key findings

  • The Netherlands missed the 2 August 2025 designation deadline in legal terms: authorities are named in a draft act, not in force.
  • The model is deliberately decentralised - ten existing sectoral regulators - with the AP and RDI as joint coordinators and the RDI as single point of contact.
  • No national penalty regime exists yet; the AP and sector regulators can rely only on existing powers (notably GDPR) until the UAIV is enacted.
  • The sandbox design (RDI/AP, one multi-sectoral sandbox, digital portal) is mature, but it cannot operate on a statutory basis before the act passes.
  • Submission to parliament is now planned for Q2 2027, implying enactment no earlier than late 2027 or 2028 - well after the Omnibus-delayed high-risk dates.

National authorities

Market surveillance

Autoriteit Persoonsgegevens (AP)

Co-coordinator of AI supervision; supervisor for prohibited practices, transparency obligations and high-risk systems in domains without a clear sectoral supervisor (draft Uitvoeringswet AI-verordening)

web.archive.org (opens in new tab)
Market surveillance

Rijksinspectie Digitale Infrastructuur (RDI)

Co-coordinator of AI supervision, proposed single point of contact (Art. 70(2)), market surveillance for product-embedded AI, co-operator of the national sandbox

internetconsultatie.nl (opens in new tab)
Market surveillance

Sectoral authorities: ILT, IGJ, NVWA, Nederlandse Arbeidsinspectie, AFM, DNB, procureur-generaal bij de Hoge Raad, voorzitter Afdeling bestuursrechtspraak Raad van State

Domain-specific market surveillance (transport, health, consumer products, labour, financial markets, banking/insurance, judiciary) under the draft act; ten authorities in total

internetconsultatie.nl (opens in new tab)
Notifying authority

Sectoral notifying authorities designated in the draft Uitvoeringswet AI-verordening (same group of ten authorities; allocation per domain not yet fixed in law)

internetconsultatie.nl (opens in new tab)
Single point of contact (Art. 70(2))

Rijksinspectie Digitale Infrastructuur (RDI), in coordination with the Autoriteit Persoonsgegevens (proposed, not yet in force)

Implementing law, penalties and sandbox

Implementing law In consultation

Uitvoeringswet AI-verordening (UAIV)

Apr 2026

internetconsultatie.nl (opens in new tab)
Penalty regime Not adopted

No national penalty rules under Article 99 are in force; regulators rely on existing powers.

Regulatory sandbox Planned

The draft act contains implementing provisions for one multi-sectoral AI regulatory sandbox and for real-world testing, to be operated jointly by the market surveillance authorities and coordinated by the RDI and AP, based on their March 2025 design proposal (six-phase process with a digital application portal). The AP stated in April 2026 that it and the RDI would set up the sandbox from 2026, but no operational launch was confirmed and the legal basis awaits the act.

aiactblog.nl (opens in new tab)
National AI strategy

Internationale strategie voor een veilige en verantwoorde AI-transitie (cabinet strategy sent to the Tweede Kamer)

2026

rijksoverheid.nl (opens in new tab)

Notable developments

  1. Draft Uitvoeringswet AI-verordening opened for consultation

    State Secretary Willemijn Aerdts (EZK) put the implementing act into internet consultation on 20 April 2026 (closing 1 June 2026). It designates ten market surveillance authorities, gives the AP and RDI coordinating roles, and regulates the sandbox; the cabinet acknowledged the act will enter into force later than the AI Act requires.

    binnenlandsbestuur.nl (opens in new tab)

  2. AP sets out what it will enforce

    The Autoriteit Persoonsgegevens explained that it will enforce prohibited AI practices, transparency duties (chatbot and deepfake labelling) and a large share of high-risk use in work, education and government, and will appoint a dedicated AI board member; it noted that parts of the regulation already apply while the implementing law is not in force.

    web.archive.org (opens in new tab)

  3. AFM implementation assessment: feasible under conditions

    The AFM's uitvoeringstoets (11 June 2026) judged the draft act workable under conditions and called for a cooperation protocol with the AP, RDI and the College voor de Rechten van de Mens.

    afm.nl (opens in new tab)

  4. Judiciary responds: independence concerns on sandbox role

    The Raad voor de rechtspraak advised on 15 July 2026, and the chair of the Afdeling bestuursrechtspraak of the Raad van State responded on 8 July 2026 that the sandbox task and shared interpretation arrangements should not apply to the judiciary's internal supervisors, citing judicial independence.

    rechtspraak.nl (opens in new tab)

  5. Planning letter pushes parliamentary submission to Q2 2027

    A 31 August 2026 planning letter on digital affairs, as reported by AI Compliance Hub, schedules submission of the bill to the Tweede Kamer for the second quarter of 2027, after Raad van State advice; the entry-into-force date remains unknown.

    aicompliancehub.nl (opens in new tab)

Analysis

Dutch policy on AI Act supervision has been stable since the AP and RDI delivered their final recommendation in 2024: reuse existing sectoral regulators rather than build a new AI authority, and let the AP (for rights-sensitive and residual domains) and the RDI (for product-embedded AI and technical coordination) coordinate the system. The draft Uitvoeringswet AI-verordening published for consultation on 20 April 2026 codifies exactly that, naming ten market surveillance authorities including the AFM, DNB, IGJ, NVWA, ILT, the labour inspectorate and two internal judicial supervisors, and assigning the Article 70(2) single point of contact to the RDI.

What is missing is legal force. The consultation closed on 1 June 2026, implementation assessments from the AFM, the judiciary and others followed over the summer, and the cabinet's 31 August 2026 planning letter now foresees sending the bill to the Tweede Kamer only in the second quarter of 2027. Until then the Netherlands has no statutory penalty regime under Article 99, no statutory sandbox and no formally designated notifying authorities. Regulators have been candid about this: the AP's April 2026 statement stressed that EU obligations already apply even though the national law does not.

The practical consequence is a split picture. On paper the Netherlands belongs to the 'intermediate' group identified by Deloitte Legal in July 2026 (legislation advanced, enforcement elements not yet functional). In practice the AP is already acting as the de facto lead on prohibited practices and transparency through its GDPR mandate, the RDI/AP sandbox design is further along than in most member states, and the ten regulators have been building a cooperation structure. The Digital Omnibus on AI, which pushed Annex III high-risk obligations to 2 December 2027, reduces the cost of the delay but does not remove the gap: the Netherlands will likely be among the last larger member states to enact national AI Act legislation.

PDF edition

EU AI Act 2026 Q3 Report

All 27 member-state profiles including Netherlands, the readiness ranking, the Omnibus timeline and every source, as one print-ready PDF.

* You will also be subscribed to my newsletter. No spam, unsubscribe any time.

Sources

  1. Autoriteit Persoonsgegevens (AP) (opens in new tab) web.archive.org
  2. Rijksinspectie Digitale Infrastructuur (RDI) (opens in new tab) internetconsultatie.nl
  3. Regulatory sandbox (opens in new tab) aiactblog.nl
  4. Internationale strategie voor een veilige en verantwoorde AI-transitie (cabinet strategy sent to the Tweede Kamer) (opens in new tab) rijksoverheid.nl
  5. Draft Uitvoeringswet AI-verordening opened for consultation (opens in new tab) binnenlandsbestuur.nl
  6. AFM implementation assessment: feasible under conditions (opens in new tab) afm.nl
  7. Judiciary responds: independence concerns on sandbox role (opens in new tab) rechtspraak.nl
  8. Planning letter pushes parliamentary submission to Q2 2027 (opens in new tab) aicompliancehub.nl