Current position
Overview
AI legislation has been enacted.
Key legislation & sources
EU AI Act (Regulation 2024/1689)
Proposed Commission KRiBSI (draft legislation)
EU AI Act National Implementation Tracker
Digital Poland Programme
Council of Europe Framework Convention on AI (CETS 225)
EU AI ACT
The EU AI Act (Regulation 2024/1689) applies directly across all member states. Prohibitions on unacceptable-risk AI systems have been in force since 2 February 2025; GPAI model rules since 2 August 2025. High-risk AI obligations are due from 2 August 2026, subject to the Digital Omnibus proposal which may defer enforcement. For the full implementation timeline, governance structure, and current status, see the European Union overview.
The Ministry of Digital Affairs coordinates implementation. A national AI strategy has been published. Market surveillance and notifying authority designation is in progress.
Regulatory developments
Latest updates
Latest event import:
Updates sourced from Digital Policy Alert ↗. The latest available entries for this jurisdiction.
implementation
Act on Artificial Intelligence Systems becomes applicable for provisions on individual opinions, inspections, enforcement proceedings, settlement mechanism, penalties, and amendments to 10 existing laws establishing cooperation duties with KRiBSI (Act No. 1003)
Source: Digital Policy Alert · View update ↗
implementation
Act on Artificial Intelligence Systems becomes applicable except for provisions on individual opinions, inspections, enforcement proceedings, settlement mechanism, penalties, and amendments to 10 existing laws establishing cooperation duties with KRiBSI (Act No. 1003)
Source: Digital Policy Alert · View update ↗
opinion
President of Personal Data Protection Office submitted opinion on proposal for Act on Artificial Intelligence systems
Source: Digital Policy Alert · View update ↗
On 23 April 2026, the President of the Polish Office for Personal Data Protection submitted an opinion to the Parliament on the draft Act on Artificial Intelligence (AI) systems, adopted by the Council of Ministers on 31 March 2026. The Act applies to operators and deployers of high-risk AI systems in Poland. The Office for Personal Data Protection welcomed the removal of provisions that had encroached on its exclusive data protection competences, but argued that the draft's cooperation provisions between the Office for Personal Data Protection and the new Commission for the Development and Security of Artificial Intelligence remain legally hollow, failing to specify the form, scope, or procedures for inter-authority collaboration. The opinion also calls for the Office for Personal Data Protection's role as a fundamental rights protection body under the European Union's Artificial Intelligence Act to be explicitly enshrined in statute, and for the Office to be granted a formal right to submit reasoned positions on data processing matters before the Commission issues binding decisions.
law
Personal Data Protection Office presented proposal to introduce law addressing dissemination of harmful deepfake content
Source: Digital Policy Alert · View update ↗
On 18 September 2025, the President of the Personal Data Protection Office (UODO) presented a proposal to introduce a law protecting individuals from harmful deepfakes. The proposal focuses on technology companies and social media platforms hosting manipulated images, audio, or video of identifiable persons. It proposes legal accountability for creating and sharing deepfakes, stronger personal data protection, mandatory platform detection and labelling systems, rapid removal of illegal content, and public education on deepfake risks. It was highlighted that current Polish law provides partial protection against deepfakes through copyright, civil, penal, and Artificial Intelligence regulations, but does not fully address their specific risks. Key gaps include limited liability rules for creators, insufficient platform obligations, and lack of fast mechanisms to remove harmful content.
investigation
Office of Competition and Consumer Protection opened investigation into Netflix over alleged lack of consent for fee increase
Source: Digital Policy Alert · View update ↗
On 25 August 2025, the Polish Office of Competition and Consumer Protection (UOKiK) opened an investigation into Netflix over increased subscription fees applied without explicit consumer consent. UOKiK noted that Netflix treated users’ silence as acceptance of higher charges, a practice in noncompliance with consumer protection rules. The UOKiK emphasised that service providers cannot unilaterally change essential contract terms, such as price, especially when payments are automatically charged. Such practices may result in fines of up to 10% of turnover and potential refunds for incorrectly charged fees. UOKiK also stated that it is reviewing the policies and practices of other providers, including Apple, Disney+, Google (YouTube Premium), HBO Max, Microsoft (GamePass), Sony (PlayStation Plus), and Adobe, with some companies already committing to adjust their practices.
Showing 5 of 8 available API entries. Dates and summaries are supplied by Digital Policy Alert.