1. Risk Rating 
  2. AI regulation in your jurisdiction
  3. Existing Regulatory Frameworks Applicable to AI
  4. Regulatory Oversight of AI
  5. AI Guidance, Policies, and Strategic Frameworks 
  6. International AI Standards and Guidelines 
  7. Forthcoming AI Legislation 
  8. Useful links

jurisdiction

Poland
Add jurisdiction

Risk Rating 

Medium.

AI regulation in your jurisdiction

There is no dedicated national legislative act governing AI in Poland. However,  Poland is directly subject to the Regulation (EU) 2024/1689 – Artificial Intelligence Act (“EU AI Act”), which establishes harmonised rules for AI across all EU member states. The Act introduces a risk-based approach, banning certain harmful AI practices, and imposes strict obligations on high-risk and general-purpose AI systems.

Although Poland does not yet have a fully enacted, dedicated local AI law, there is legislative work in progress to adapt national law to the EU AI Act.

Existing Regulatory Frameworks Applicable to AI

Other than EU, relevant local laws that govern AI-related activities in Poland are as follows:

  • Data Protection:
    • Personal Data Protection Act and local laws implementing the GDPR (e.g. Banking Law) – govern personal data processing and interacts closely with profiling and automated decision-making.
  • Product safety and liability:
    • Civil Code – provides rules of civil liability, which may apply for damages caused by AI.
    • General Product Safety Regulation and Act on General Product Safety –  relevant where AI is a product or safety component
  • Cybersecurity and operational resilience:
    • Act on National Cybersecurity System -  intersect with AI risk management, especially for critical services and infrastructures using AI.
  • Copyright and IPR
    • Copyright Act & Industrial Property Law – regulate the IP rights for AI-generated works, models, source codes.
    • Act on Combating Unfair Competition – provides protection of training data, algorithms and models as trade secrets.
  • Telco and digital services:
    • The Act on Electronic Communications, in relation to data processing in digital services.

Regulatory Oversight of AI

Apart from the EU authorities/regulators, currently, there is no AI-specific local authority or regulator responsible for overseeing AI in Poland.

However, Poland is in the process of establishing a specialized body called the Commission for the Development and Safety of Artificial Intelligence (Komisja Rozwoju i Bezpieczeństwa Sztucznej Inteligencji – KRiBSI). The key tasks assigned to the Commision will include:

  • conducting market surveillance for AI systems,
  • being central point of contact designated by the EU AI Act,
  • overseeing regulatory sandboxes,
  • issuing individual opinions, explanations and interpretations,
  • handling incident reports and complaints,
  • conducting inspections and enforcing compliance with EU AI regulations,
  • collaborating with key national and EU bodies, etc.

Other key bodies:

Polish Data Protection Authority (UODO): active in AI-related issues, especially where personal data and profiling is involved.

  • Enforcement: UODO has already taken enforcement actions in cases involving AI-based profiling and automated decisions, particularly under GDPR Article 22.
  • Guidance: UODO quite frequently publishes its positions and opinions related to AI development, in particular UODO has published guidance on DPIAs for AI systems.
  • Policy development:  UODO plays a proactive and influential role in AI policy development in Poland by, for example, submitting its expert feedback on the Polish AI policy and Draft Act on AI systems,  advocating for strong, privacy protections.

Minister of Digitization plays a central role in shaping AI policy and regulation in Poland. In particular, it is tasked with preparing and adopting the Draft Act on AI Systems. Moreover, it has recently published updated version of the Policy for AI development in Poland until 2030, which sets a rational direction for the development of AI in Poland in the coming years. The Ministry has also established the PL/AI advisory team comprising of Polish AI experts.

AI Guidance, Policies, and Strategic Frameworks 

There are several documents related to AI that are relevant in Poland:

  • Policy for AI development in Poland until 2030 (“AI Policy”) (link) –  outlines a strategic vision to build a coordinated AI ecosystem combining robust infrastructure, skilled talent, measurable goals, and cross-sector collaboration among government, academia, and business - to ensure safe, responsible, and innovation-driven development of artificial intelligence in Poland.
  • Sectoral Artificial Intelligence Strategy until 2039 (“AI Strategy”) (link) -  positions AI implementation as a top priority for strengthening Poland’s Armed Forces, aiming for a responsible, systemic, and scalable approach that enhances technological superiority through legal, organizational, and infrastructural reforms in the National Defence Ministry.
  • Ministry’s of Digitisation Brochure on prohibited AI systems (link) – provides useful explanations regarding prohibited AI systems under EU AI Act  and outlines the techniques, functions, and methods of their operation.
  • Polish Data Protection Authority’s (UODO) guidance on data protection impact assessment in the context of AI (link) – includes useful guidance on when and why organizations using AI systems must conduct DPIAs, focusing on risks to individuals’ rights and freedoms during AI development and deployment, especially in cases involving personal data, profiling, automated decisions, and high-risk AI under the EU AI Act.

International AI Standards and Guidelines 

The Polish AI legal framework is strongly aligned with international standards and guidelines.

The Polish AI Policy consistently follows the OECD AI principles, promoting the use of AI that respects human rights and democratic values. Moreover, it clearly addresses that all actions set out by the AI Policy will be consistent and compatible with those proposed by the European Commission, including AI Continent Action Plan and the European Strategy for Artificial Intelligence in Science Paving the way for the Resource for AI Science in Europe (RAISE).

Forthcoming AI Legislation 

Poland is in the process of adopting a national law to complement the EU AI Act (“Draft Act on AI Systems”). The very recent project is from 18 November 2025. However, it is not even on the Parliament legislative stage.

The Draft Act on AI Systems primarily focuses on adapting local law to the EU AI Act, by:

  • establishing national supervisory authorities for AI systems and general-purpose AI models, including  Commission for the Development and Security of Artificial Intelligence (KRiBSI),
  • regulating administrative procedures for handling violations, conducting inspections, as well as compliance assessments and related mechanisms,
  • defining administrative fines for breaches of AI regulations,
  • setting procedures for reporting serious incidents related to AI use,
  • introducing measures to support AI development, including regulatory sandboxes and fundings, especially for SMEs, etc.