AI regulation in Ireland: laws & policy (2026)
AI in Ireland: comprehensive law.
As an EU member state, Ireland is governed by the directly applicable EU AI Act (Regulation (EU) 2024/1689), which is already in force with obligations phasing in through 2 August 2026 and beyond. Ireland has chosen a distributed enforcement model: the Regulation of Artificial Intelligence Bill 2026 (published 17 June 2026, progressing through the Oireachtas) establishes the AI Office of Ireland — Oifig IS na hÉireann — as the central coordinating authority and designates 15 existing sectoral regulators as national competent authorities. This regulatory architecture is complemented by the refreshed National AI Strategy 'AI — Here for Good' (July 2021, refreshed November 2024) and the successor Digital Ireland strategy to 2030.
Legal framework
EU AI Act (Regulation (EU) 2024/1689), directly applicable in Ireland with phased application from 2 Feb 2025; national implementation via the Regulation of Artificial Intelligence Bill 2026 establishing Oifig IS na hÉireann (AI Office of Ireland) as central coordinator, with a distributed model of 15 national competent authorities.
The EU AI Act in Ireland
In Ireland, artificial intelligence is governed by the EU AI Act, the first comprehensive AI law, which applies directly as an EU regulation.
- Framework
- the EU AI Act (Regulation (EU) 2024/1689)
- Approach
- risk-based: unacceptable-risk AI is banned, high-risk AI faces strict duties, limited-risk AI has transparency rules
- General-purpose AI
- transparency duties for all GPAI models; systemic-risk models add safety and evaluation obligations
- Timeline
- phased: prohibitions from Feb 2025, GPAI rules from Aug 2025, most high-risk obligations from Aug 2026
- Maximum fine
- €35 million or 7% of global annual turnover for prohibited-AI breaches
- Oversight
- national market-surveillance authorities, coordinated by the EU AI Office
The AI Act is an EU regulation applied directly in Ireland; national market-surveillance authorities handle enforcement.
Key points: artificial intelligence in Ireland
EU AI Act baseline
The EU AI Act (Regulation (EU) 2024/1689) entered into force on 1 August 2024 and is directly applicable in Ireland. Bans on prohibited AI practices and AI-literacy duties applied from 2 February 2025; general-purpose AI (GPAI) obligations from 2 August 2025; the bulk of high-risk system obligations apply from 2 August 2026.
National implementing bill
The Regulation of Artificial Intelligence Bill 2026 was published on 17 June 2026 by the Department of Enterprise, Trade and Employment. It gives domestic effect to the EU AI Act, creates market-surveillance powers, real-world testing and sandbox frameworks, and sets national enforcement and fine structures. The Bill is still progressing through the Oireachtas.
AI Office of Ireland (Oifig IS na hÉireann)
An independent statutory body serving as Ireland's central coordinating authority for the AI Act, required to be operational by 1 August 2026. It is the single national point of contact for the EU, coordinates competent authorities, provides shared technical expertise, and hosts a regulatory sandbox. Paul Byrne was appointed CEO on 30 July 2026.
Distributed model of competent authorities
Ireland has designated 15 national competent authorities — leveraging existing sectoral regulators such as the Data Protection Commission, Central Bank of Ireland, Coimisiún na Meán, HPRA, HSA, HEA and CCPC — rather than creating a single AI regulator. The AI Office coordinates their supervision and joint investigations.
National AI Strategy and AI Advisory Council
The National AI Strategy 'AI — Here for Good' (launched July 2021, refreshed 6 November 2024) is now being carried forward within 'Digital Ireland — Connecting our People, Securing our Future', setting ambitions to 2030. The independent AI Advisory Council published its recommendations report on 21 February 2025 covering skills, applied AI, literacy, sovereignty, biometrics and the creative sector.
Data-protection interplay
The Data Protection Commission (DPC) enforces GDPR against AI systems processing personal data and is a designated national competent authority under the AI Act framework. Recent DPC activity includes investigations into large-scale model training on EU/EEA users' data by major AI providers established in Ireland.
The EU AI Act in Ireland: FAQ
Does the EU AI Act apply in Ireland?
Yes. As an EU member, Ireland is covered by the EU AI Act (Regulation (EU) 2024/1689), which applies directly.
What does the EU AI Act regulate in Ireland?
It uses a risk-based approach: unacceptable-risk AI is banned, high-risk AI faces strict obligations, and general-purpose AI models carry transparency duties.
When does the EU AI Act take effect in Ireland?
It is phased: prohibitions applied from February 2025, general-purpose-AI rules from August 2025, and most high-risk obligations from August 2026.
What are the penalties under the EU AI Act in Ireland?
Up to €35 million or 7% of global annual turnover for breaching the prohibited-AI rules, with lower tiers for other breaches.
Timeline of decisions
- EnforcementDPC opens probe into X/Grok over AI 'nudification' of images
Ireland's Data Protection Commission launched a large-scale inquiry into X over Grok generating sexualised/'nudified' images of real people, examining potential GDPR breaches. It marks the DPC's escalating scrutiny of generative-AI harms on a platform it supervises EU-wide.
Irish Times
- Guidance · officialIreland designates full slate of AI Act competent authorities
DETE designated a further seven public bodies (15 total) as national competent authorities under a 'distributed' sectoral model, making Ireland one of the first six EU states to complete this step. It establishes who enforces the AI Act across media, transport, health, employment and finance.
Department of Enterprise, Tourism and Employment
- Decision · officialDPC clears Meta to resume AI training on EU user data
After Meta reassessed its plans following the EDPB opinion and added transparency, notice and objection safeguards, the DPC stated it did not object to Meta training generative AI on public EU posts from 27 May 2025 under 'legitimate interest'. It set the practical template for lawful AI training in the EU.
Data Protection Commission
- Enforcement · officialDPC commences statutory inquiry into X/Grok AI training
The DPC opened a formal inquiry into X Internet Unlimited Company's processing of public EU/EEA posts to train Grok LLMs, examining the lawfulness and transparency of the processing. It escalated the earlier Grok dispute into a full GDPR investigation.
Data Protection Commission
- Guidance · officialGovernment approves first eight AI Act competent authorities
The Irish Government approved an initial list of eight public bodies as AI Act competent authorities, confirming Ireland's distributed enforcement model built on existing sectoral regulators. It was the first concrete designation step toward national implementation.
Department of Enterprise, Tourism and Employment
- Guidance · officialEDPB adopts Opinion 28/2024 on AI models, requested by Irish DPC
At the Irish DPC's request, the European Data Protection Board issued an opinion on AI-model anonymity, use of 'legitimate interest' for training, and the effect of unlawfully sourced training data. It gave Ireland and the EU harmonised guidance underpinning subsequent AI-training decisions.
Data Protection Commission
- Guidance · officialNational AI Strategy Refresh 2024 published
DETE published 'AI, Here for Good: National AI Strategy Refresh 2024', updating the 2021 strategy for generative AI and the EU AI Act across seven strands and committing to a distributed regulatory model with a coordinating AI Office. It frames Ireland's current people-centred, risk-based approach.
Department of Enterprise, Tourism and Employment
- Enforcement · officialDPC concludes Grok proceedings with permanent undertaking by X
The DPC's High Court proceedings against X were struck out after X agreed to permanently abide by limits on processing EU/EEA users' public posts to train Grok. It resolved Ireland's first court action over AI training data.
Data Protection Commission
- Enforcement · officialDPC secures suspension of X's Grok AI training via High Court
Using Section 134 of the Data Protection Act 2018 for the first time, the DPC brought an urgent High Court application and X agreed to suspend training Grok on EU/EEA public posts. It was the first time any EU lead supervisory authority took such action over AI training.
Data Protection Commission
- Guidance · officialIreland launches first National AI Strategy 'AI, Here for Good'
The Taoiseach and Minister Robert Troy launched Ireland's first national AI strategy, setting a people-centred, ethical, whole-of-government approach to AI adoption and governance. It laid the policy foundation later refreshed for the EU AI Act era.
Department of Enterprise, Trade and Employment
Sources
- enterprise.gov.ie/en/news-and-events/department-news/2026/june/20260617.html
- enterprise.gov.ie/en/news-and-events/department-news/2026/july/20260730.html
- oireachtas.ie/en/bills/bill/2026/69/
- enterprise.gov.ie/en/legislation/general-scheme-of-the-regulation-of-artificial-intelli
- gov.ie/en/department-of-enterprise-tourism-and-employment/press-releases/pub
- enterprise.gov.ie/en/publications/national-ai-strategy-refresh-2024.html
- enterprise.gov.ie/en/publications/publication-files/ai-advisory-council-recommendations
- williamfry.com/knowledge/ireland-establishes-comprehensive-ai-regulatory-framework-u
- trustworthyai.ie/ireland-ai-regulation-bodies-governance-map.html
Next for Ireland: Data & PrivacyComprehensive law
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 29 Sept 2026. Methodology & how to cite · State of Technology Regulation 2026