European regulator
The role of the European AI Office
Created within the European Commission, the European AI Office is the centre of AI expertise and enforcement for the EU AI Act. It directly supervises general-purpose AI models, coordinates national authorities and ensures a harmonised application of the regulation across the Union.
A central office at the Commission
The AI Office drafts codes of practice, publishes guidance and directly supervises providers of general-purpose AI (GPAI) models such as large language models. It is the single point of contact for these providers across the EU.
Its enforcement powers
It can request technical documentation and model evaluations from GPAI providers, order corrective measures or even the withdrawal of a model. Fines can reach €15M or 3% of worldwide turnover for model providers. It also coordinates joint investigations between Member States.
The European governance
The AI Office relies on the European AI Board, which gathers the Member States, an independent scientific panel and an advisory forum. Notified bodies assess the conformity of high-risk systems, and the EDPS supervises EU institutions.
Who audits companies in each country?
Company inspections are carried out by the national market surveillance authorities designated by each Member State, coordinated by the AI Office. For example:
- France — the CNIL plays the central role, already competent whenever AI processes personal data.
- Spain — AESIA, the first European agency dedicated to AI supervision.
- Germany — the Bundesnetzagentur (federal network agency) coordinates market surveillance.
- Netherlands — the Autoriteit Persoonsgegevens and the RDI share supervision.
- Italy — AgID and ACN (the cybersecurity agency) have been designated.
Fulfai keeps your inventory, risk classification and documentation ready for these inspections, whatever the country.
This page is provided for information purposes only and does not constitute legal advice.