AI regulation in Cyprus: laws & policy (2026)
AI in Cyprus: comprehensive law.
Cyprus is governed by the EU AI Act (Regulation (EU) 2024/1689), which applies directly as an EU Regulation without requiring national transposition. The Council of Ministers designated competent authorities in January 2025 and established a National AI Taskforce to develop a new national AI strategy targeting AI-first governance by 2028. Cyprus holds no standalone domestic AI statute; the EU AI Act, partially in force since February 2025, constitutes the comprehensive legal framework.
Legal framework
EU AI Act (Regulation (EU) 2024/1689) directly applicable; Commissioner of Communications designated as Market Surveillance Authority, Notifying Authority, and Single Point of Contact; Deputy Ministry of Research, Innovation and Digital Policy as coordinating body
The EU AI Act in Cyprus
In Cyprus, artificial intelligence is governed by the EU AI Act, the first comprehensive AI law, which applies directly as an EU regulation.
- Framework
- the EU AI Act (Regulation (EU) 2024/1689)
- Approach
- risk-based: unacceptable-risk AI is banned, high-risk AI faces strict duties, limited-risk AI has transparency rules
- General-purpose AI
- transparency duties for all GPAI models; systemic-risk models add safety and evaluation obligations
- Timeline
- phased: prohibitions from Feb 2025, GPAI rules from Aug 2025, most high-risk obligations from Aug 2026
- Maximum fine
- €35 million or 7% of global annual turnover for prohibited-AI breaches
- Oversight
- national market-surveillance authorities, coordinated by the EU AI Office
The AI Act is an EU regulation applied directly in Cyprus; national market-surveillance authorities handle enforcement.
Key points: artificial intelligence in Cyprus
EU AI Act phased applicability
The EU AI Act applies directly to Cyprus as an EU Regulation. Prohibitions on unacceptable-risk AI have been in force since 2 February 2025; rules for general-purpose AI models since 2 August 2025; high-risk AI system obligations from 2 August 2026.
Designated competent authorities
In January 2025, the Council of Ministers designated the Commissioner of Communications as the Market Surveillance Authority (covering high-risk AI in Annex III, points 1, 6, 7, 8), Notifying Authority, and Single Point of Contact for the AI Act.
Fundamental rights supervisory authorities (Article 77)
Cyprus notified the European Commission of three Article 77 supervisory authorities: the Commissioner for Personal Data Protection, the Commissioner for Administration and Protection of Human Rights (Ombudsman), and the Attorney General.
National AI Taskforce (2025)
A National AI Taskforce was established in January 2025, chaired by Chief Scientist Skourides, to formulate a new national AI strategy encompassing public and private sector adoption, with targets of an AI-first policy by 2028 and fully AI-powered personalised public services by 2030.
National AI Strategy (2020, under revision)
Cyprus's original National AI Strategy was approved by the Council of Ministers in January 2020, focusing on business competitiveness, public-sector modernisation, talent development, and ethical AI. A revised strategy under the new Taskforce is being prepared to replace it.
EU AI Act Digital Omnibus amendment (May 2026)
Cyprus held the EU Council Presidency during negotiations on the Digital Omnibus AI simplification package. On 7 May 2026, the Council and European Parliament reached a provisional agreement extending exemptions to small mid-caps, postponing AI regulatory sandbox establishment deadlines to 2 August 2027, and reducing governance fragmentation across Member States.
The EU AI Act in Cyprus: FAQ
Does the EU AI Act apply in Cyprus?
Yes. As an EU member, Cyprus is covered by the EU AI Act (Regulation (EU) 2024/1689), which applies directly.
What does the EU AI Act regulate in Cyprus?
It uses a risk-based approach: unacceptable-risk AI is banned, high-risk AI faces strict obligations, and general-purpose AI models carry transparency duties.
When does the EU AI Act take effect in Cyprus?
It is phased: prohibitions applied from February 2025, general-purpose-AI rules from August 2025, and most high-risk obligations from August 2026.
What are the penalties under the EU AI Act in Cyprus?
Up to €35 million or 7% of global annual turnover for breaching the prohibited-AI rules, with lower tiers for other breaches.
Timeline of decisions
- Decision · officialCouncil of Ministers Designates National AI Competent Authorities and Establishes AI Taskforce
By Cabinet decision of 22 January 2025 — fulfilling Article 70 of the EU AI Act — Cyprus designated three authorities: the Deputy Ministry of Research, Innovation and Digital Policy (DMRID) as overall coordinator and European AI Board representative; the Commissioner of Electronic Communications as Notifying Authority and Market Surveillance Authority (single point of contact); and the Commissioner for Personal Data Protection as sector-specific Market Supervisory Authority. The same decision created a 10-member National AI Taskforce mandated to produce an updated National AI Strategy by end-2025.
Deputy Ministry of Research, Innovation and Digital Policy — gov.cy
- Decision · officialCyprus Adopts National Research and Innovation Strategy 2024-2026
The Council of Ministers approved a three-year strategy embedding AI adoption as a core pillar of Cyprus's competitiveness and modernisation agenda, setting the investment and skills foundation required ahead of the EU AI Act compliance timeline and establishing Cyprus's aspiration to become a regional high-technology hub.
Deputy Ministry of Research, Innovation and Digital Policy — gov.cy
- Guidance · officialCyprus Publishes Its First National Artificial Intelligence Strategy
The Cypriot government released its foundational National AI Strategy on 13 January 2020, structured around four pillars: maximising investment through public-private partnerships, creating national data spaces, cultivating talent and lifelong learning, and developing ethical and trustworthy AI. This non-binding roadmap was the first comprehensive AI policy document for Cyprus and shaped subsequent government priorities.
European Commission Knowledge4Policy — Cyprus AI Strategy Report
- Decision · officialCyprus National Digital Strategy 2020-2025 Adopted
The government launched a five-year national digitalisation roadmap covering digital public services, digital infrastructure, and skills development, providing the overarching policy context within which AI adoption and eventual AI-specific regulation would be embedded.
European Commission — Digital Skills and Jobs Platform
Sources
- gov.cy/dmrid/en/uncategorized/regulation-eu-2024-1689-establishing-harmonise
- ai.cy/
- globallegalinsights.com/practice-areas/ai-machine-learning-and-big-data-laws-and-regulations/
- digital-strategy.ec.europa.eu/en/policies/market-surveillance-authorities-under-ai-act
- chambersandco.com/european-union-artificial-intelligence-act-and-its-implementation-in-
- knowledge4policy.ec.europa.eu/ai-watch/cyprus-ai-strategy-report_en
- consilium.europa.eu/en/press/press-releases/2026/05/07/artificial-intelligence-council-an
- chiefscientist.gov.cy/cyprus-s-bold-ai-agenda-in-focus-as-skourides-joins-golub-and-zambogl
- eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32024R1689
- fastforward.com.cy/tech/cyprus-national-ai-strategy-ai-factories-network
- gov.cy/dmrid/en/documents/national-strategy-for-artificial-intelligence/
- digital-strategy.ec.europa.eu/en/library/digital-omnibus-ai-regulation-proposal
Next for Cyprus: Data & PrivacyComprehensive law
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 24 May 2026. Methodology & how to cite · State of Technology Regulation 2026