Partially in place SK Verified 21 Oct 2026

Slovakia

EU AI Act implementation, 2026

Slovakia's government approved a combined AI Act / Data Governance Act / Data Act implementing bill on 26 August 2026 (parliamentary print 1447) naming MIRRI as general market surveillance authority, single point of contact and sandbox operator; it is in first reading with a proposed effective date of 1 January 2027, so no authority or penalty regime is yet in force.

Implementing law
Draft billAug 2026
Penalty regime (Art. 99)
Not adopted
Regulatory sandbox
Planned
Readiness rank
16 of 27score 45 / 100

Key findings

  • Slovakia has a complete, government-approved implementing bill in parliament but nothing in force; authorities, penalties and the sandbox all depend on adoption before the proposed 1 January 2027 start.
  • The model bundles three EU acts (AI Act, DGA, Data Act) in one law and avoids a new agency - MIRRI, a ministry, becomes the AI regulator and single point of contact.
  • The notifying authority is the standards office (ÚNMS SR); sectoral surveillance goes to the data protection office, the Ministry of Justice, the inspection service and the National Security Authority.
  • AI fines follow Article 99 tiers directly; the bill's own EUR 10 million / 4% ceiling applies to data-regulation breaches, with a one-time 'cure period' exemption.
  • A national AI strategy was presented in June 2026 but no government adoption was confirmed.

National authorities

Market surveillance

Ministerstvo investícií, regionálneho rozvoja a informatizácie SR (MIRRI)

Proposed general market surveillance authority for AI, single point of contact, data coordinator and operator of the national AI regulatory sandbox (bill §6)

info.sk (opens in new tab)
Market surveillance

Sectoral authorities: Úrad na ochranu osobných údajov (data protection), Ministry of Justice (AI in courts), Úrad inšpekčnej služby, Národný bezpečnostný úrad

Proposed sectoral market surveillance authorities for specific high-risk domains (bill §7)

aiprioritymap.com (opens in new tab)
Notifying authority

Úrad pre normalizáciu, metrológiu a skúšobníctvo SR (Slovak Office of Standards, Metrology and Testing) - proposed in the bill

aiprioritymap.com (opens in new tab)
Single point of contact (Art. 70(2))

MIRRI (proposed; bill not yet adopted)

Implementing law, penalties and sandbox

Implementing law Draft bill

Zákon o štátnej správe v oblasti umelej inteligencie a európskej dátovej regulácie (government bill, parliamentary print 1447; LP/2026/17 in interministerial comment)

Aug 2026

slov-lex.sk (opens in new tab)
Penalty regime Not adopted

No national penalty rules under Article 99 are in force; regulators rely on existing powers.

Regulatory sandbox Planned

The bill tasks MIRRI with establishing and operating a national AI regulatory sandbox with priority access for micro, small and medium enterprises and an advisory function; it cannot start before the law takes effect (proposed 1 January 2027). No sandbox exists today.

info.sk (opens in new tab)
National AI strategy

No national AI strategy identified.

Notable developments

  1. First draft enters interministerial comment

    MIRRI's initial AI governance bill went into interministerial review from 1 August 2025 (comments to 21 August 2025) with an intended effective date of 1 January 2026 - a date that was not met.

    lexmundi.com (opens in new tab)

  2. Act No. 318/2025 Coll. amends conformity-assessment law

    Promulgated 21 November 2025 and effective 1 January 2026, Act 318/2025 amends Act 56/2018 on conformity assessment of products; its text references Regulation (EU) 2024/1689, which third-party trackers describe as an AI Act adaptation for conformity assessment.

    static.slov-lex.sk (opens in new tab)

  3. Government approves the AI and data governance bill

    On 26 August 2026 the government approved the bill on state administration in AI and European data regulation. MIRRI leads; the previously mooted 'Office for Digital Integrity' will not be created; costs estimated at EUR 8.24 million and 68 posts for 2027; effective date proposed 1 January 2027.

    teraz.sk (opens in new tab)

  4. Legal commentators flag enforcement gap at 2 August 2026

    Slovak legal press noted that Article 50 transparency duties applied from 2 August 2026 while Slovakia still had no law designating supervisory authorities or sanctions, and that the nudifier ban applies from 2 December 2026.

    pravnenoviny.sk (opens in new tab)

  5. Bill delivered to the National Council as print 1447

    Delivered to the NR SR on 28 August 2026; after first reading the lead Committee on Public Administration and Regional Development has until 16 November 2026 to report, so second and third readings are expected in late 2026.

    aiprioritymap.com (opens in new tab)

Analysis

Slovakia's path has been slower than its first draft implied. MIRRI circulated an AI governance bill in August 2025 intended to apply from 1 January 2026, but the text was reworked into a single 'law on state administration in the field of AI and European data regulation' that also implements the Data Governance Act and the Data Act. The government approved that version on 26 August 2026 and it reached the National Council as print 1447 two days later. Its structure is ministry-centred: MIRRI is general market surveillance authority, single point of contact, data coordinator and sandbox operator, while the data protection office, Ministry of Justice, inspection service and National Security Authority supervise their own high-risk domains and the standards office ÚNMS acts as notifying authority. An earlier idea of a separate 'Office for Digital Integrity' was dropped.

The bill is substantively ready - it carries over the Article 99 fine tiers, adds a one-time remediation window before fines, budgets 68 new posts and EUR 8.24 million for 2027, and gives SMEs priority sandbox access - but legally Slovakia remains in the group Deloitte Legal called late, partial implementers. The committee reporting deadline of 16 November 2026 and the 1 January 2027 effective date make adoption before year-end plausible, though not certain. Act 318/2025 on conformity assessment, in force since January 2026, provides a narrow AI Act hook but not a supervisory framework.

The practical effect is that prohibitions, GPAI and transparency duties bind Slovak operators with no domestic enforcer or sanctioning route until the bill passes. The Digital Omnibus on AI (Annex III high-risk from 2 December 2027, sandboxes by 2 August 2027) means Slovakia can still land its framework before the heaviest obligations bite, which is why the score sits in the middle of the range despite nothing being in force.

PDF edition

EU AI Act 2026 Q3 Report

All 27 member-state profiles including Slovakia, the readiness ranking, the Omnibus timeline and every source, as one print-ready PDF.

* You will also be subscribed to my newsletter. No spam, unsubscribe any time.

Sources

  1. Ministerstvo investícií, regionálneho rozvoja a informatizácie SR (MIRRI) (opens in new tab) info.sk
  2. Sectoral authorities: Úrad na ochranu osobných údajov (data protection), Ministry of Justice (AI in courts), Úrad inšpekčnej služby, Národný bezpečnostný úrad (opens in new tab) aiprioritymap.com
  3. Zákon o štátnej správe v oblasti umelej inteligencie a európskej dátovej regulácie (government bill, parliamentary print 1447; LP/2026/17 in interministerial comment) (opens in new tab) slov-lex.sk
  4. First draft enters interministerial comment (opens in new tab) lexmundi.com
  5. Act No. 318/2025 Coll. amends conformity-assessment law (opens in new tab) static.slov-lex.sk
  6. Government approves the AI and data governance bill (opens in new tab) teraz.sk
  7. Legal commentators flag enforcement gap at 2 August 2026 (opens in new tab) pravnenoviny.sk