Cyprus has designated the Commissioner for Electronic Communications and Postal Regulation as the national Notifying Authority, Market Surveillance Authority, and Single Point of Contact for the EU AI Act. The Commissioner for Personal Data Protection oversees fundamental rights compliance. The Commissioner for Administration and the Protection of Human Rights (Ombudsman) and the Attorney General are additionally designated as relevant authorities. Full enforcement of the EU AI Act in Cyprus applies from August 2, 2026.
Who it affects: Developers and deployers of AI systems classified as high-risk under the EU AI Act who operate in Cyprus fall under the Commissioner’s market surveillance authority. The framework covers all sectors subject to the EU AI Act, with personal data and fundamental rights aspects separately supervised by the data protection authority.
What is notably missing: The Communications Commissioner is primarily a sectoral regulator for telecoms and postal services. Cyprus has not established a dedicated AI authority with standalone AI expertise and enforcement resources. No AI literacy or training obligations for workers or citizens are created by this governance designation. The designation is a compliance step for EU regulatory purposes rather than a domestic AI policy initiative.