Deep Lex
Back to Regulation Tracker

Belgium AI Regulation

Law(s) enactedTreaty

CoE Framework Convention signatory

Overview

EU AI ACT
  • The EU AI Act (Regulation 2024/1689) applies directly across all member states. Prohibitions on unacceptable-risk AI systems have been in force since 2 February 2025; GPAI model rules since 2 August 2025. High-risk AI obligations are due from 2 August 2026, subject to the Digital Omnibus proposal which may defer enforcement. For the full implementation timeline, governance structure, and current status, see the European Union overview.
  • BIPT (Belgian Institute for Postal Services and Telecommunications) was confirmed as primary market surveillance authority under the Government Declaration of 31 January 2025. The Belgian DPA (APD/GBA) is active on AI and data guidance. Formal MSA and notifying authority designation procedures are not yet complete.

Key Sources

EU AI Act (Regulation 2024/1689)View
BIPT (Belgian Institute for Postal Services and Telecommunications)View
EU AI Act National Implementation TrackerView
Belgian AI Institute (AI4Belgium)View
Council of Europe Framework Convention on AI (CETS 225)View

This content is for informational and educational purposes only and does not constitute legal advice.

AI Regulation Timeline

  1. 01/12/2025
    implementation

    Minister for Government Modernisation’s circular banning use of DeepSeek AI system in all federal government services enters into force

    On 1 December 2025, the Minister for Government Modernisation’s circular banning the DeepSeek AI system in all federal government services entered into force. Federal employees are prohibited from using DeepSeek applications, which had to be removed from staff devices. The measure implements the preventative prohibition adopted on 11 September 2025, following the June analysis that required government services to list their artificial intelligence tools and identified risks linked to data transmitted to the DeepSeek system.

  2. 30/09/2025
    investigation

    Belgian Competition Authority approved joint control of Doktr by Proximus, AG Insurance and Nationaal Hulpfonds

    On 30 September 2025, the Belgian Competition Authority (BCA) approved the joint acquisition of Doktr by Proximus, AG Insurance, and Nationaal Hulpfonds under the simplified procedure. The transaction covers the telecommunications, insurance, and digital health sectors. Doktr allows patients and employees to consult registered doctors, psychologists, occupational physicians, and other qualified specialists through a secure video application for medical advice, prescriptions, or certificates. The Authority found no competition concerns.

  3. 24/09/2025
    investigation

    Competition Authority announced investigation into joint control of Doktr by Proximus, AG Insurance and Nationaal Hulpfonds

    On 24 September 2025, the Belgian Competition Authority opened an investigation into Proximus, AG Insurance, and Nationaal Hulpfonds acquiring joint control over Doktr, a Belgian video consultation platform. Doktr allows patients and employees to consult registered doctors, psychologists, occupational physicians, and other qualified specialists through a secure video application for medical advice, prescriptions, or certificates. The investigation aimed to assess whether the merger complied with competition rules and could raise market concerns. The Authority seeks to review the potential impact across telecommunications, insurance, and digital health sectors.

  4. 11/09/2025
    adoption

    Minister for Government Modernisation adopted banning use of DeepSeek AI system in all federal government services

    On 11 September 2025, the Minister for Government Modernisation adopted a circular banning the use of the DeepSeek AI system in all federal government services. The circular stated that the ban was preventative, following similar restrictions in other jurisdictions, and was based on a June analysis in which government services provided full lists of artificial-intelligence tools. It cited risks linked to data transmitted to the DeepSeek system and therefore prohibited its use in federal government offices.

  5. 10/05/2025
    consultation closed

    Data Protection Authority (APD) closes consultation on updated Recommendation (01/2020) on direct marketing including data protection regulations

    On 10 May 2025, the Data Protection Authority (APD) closes its consultation on the updated recommendation on direct marketing. The update is based on Recommendation 01/2020 and takes into account developments in case law, regulatory decisions, and guidance from the European Data Protection Board (EDPB). The revised Recommendation defines terms related to direct marketing, describes the legal basis for processing prospective customer data under the legitimate interest framework, and outlines data retention guidelines in accordance with the GDPR. It also specifies requirements for responding to data subject rights requests, including transparency obligations and procedural aspects for access, rectification, and erasure. Furthermore, the Recommendation describes the responsibilities of data controllers and processors, requiring them to ensure lawful data processing, proper documentation of legal bases, and compliance with security measures. The Recommendation outlines provisions on the rights of individuals, including the right to object to direct marketing, access personal data, and request rectification or erasure. In addition, it sets out rules on data minimisation, retention limits and automated decision making in marketing, in line with the GDPR and consumer protection laws.

  6. 10/03/2025
    consultation opened

    Data Protection Authority opened consultation on updated Recommendation (01/2020) on direct marketing including data protection regulations

    On 10 March 2025, the Data Protection Authority (APD) initiated a public consultation on the updated Recommendation 01/2025 on direct marketing until 10 May 2025. The update is based on Recommendation 01/2020 and takes into account developments in case law, regulatory decisions, and guidance from the European Data Protection Board (EDPB). The revised Recommendation defines terms related to direct marketing, describes the legal basis for processing prospective customer data under the legitimate interest framework, and outlines data retention guidelines in accordance with the GDPR. It also specifies requirements for responding to data subject rights requests, including transparency obligations and procedural aspects for access, rectification, and erasure. Furthermore, the Recommendation describes the responsibilities of data controllers and processors, requiring them to ensure lawful data processing, proper documentation of legal bases, and compliance with security measures. The Recommendation outlines provisions on the rights of individuals, including the right to object to direct marketing, access personal data, and request rectification or erasure. In addition, it sets out rules on data minimisation, retention limits and automated decision making in marketing, in line with the GDPR and consumer protection laws.

Last updated: 01/12/2025