AI regulation in Netherlands: laws & policy (2026)
AI in Netherlands: comprehensive law.
As an EU member state, the Netherlands is governed by the directly-applicable EU AI Act, whose prohibited-practice and AI-literacy rules apply since 2 February 2025, GPAI obligations since 2 August 2025, and high-risk/transparency rules from 2 August 2026. National implementation is set out in the draft Uitvoeringswet AI-verordening, published for public consultation on 20 April 2026 (open until 1 June 2026), which establishes a decentralised supervisory model. Supervision is distributed across roughly ten existing sectoral market-surveillance authorities, with the Autoriteit Persoonsgegevens and the Rijksinspectie Digitale Infrastructuur designated as coordinating authorities.
Legal framework
EU Artificial Intelligence Act (Regulation (EU) 2024/1689), applied nationally via the draft Uitvoeringswet AI-verordening (AI Act Implementation Act); decentralised supervision coordinated by the Autoriteit Persoonsgegevens (AP) and the Rijksinspectie Digitale Infrastructuur (RDI)
The EU AI Act in Netherlands
In Netherlands, artificial intelligence is governed by the EU AI Act, the first comprehensive AI law, which applies directly as an EU regulation.
- Framework
- the EU AI Act (Regulation (EU) 2024/1689)
- Approach
- risk-based: unacceptable-risk AI is banned, high-risk AI faces strict duties, limited-risk AI has transparency rules
- General-purpose AI
- transparency duties for all GPAI models; systemic-risk models add safety and evaluation obligations
- Timeline
- phased: prohibitions from Feb 2025, GPAI rules from Aug 2025, most high-risk obligations from Aug 2026
- Maximum fine
- €35 million or 7% of global annual turnover for prohibited-AI breaches
- Oversight
- national market-surveillance authorities, coordinated by the EU AI Office
The AI Act is an EU regulation applied directly in Netherlands; national market-surveillance authorities handle enforcement.
Key points: artificial intelligence in Netherlands
EU AI Act is the binding framework
The Netherlands applies the directly-binding EU AI Act. Prohibited AI practices and AI-literacy duties have applied since 2 February 2025, GPAI-model obligations since 2 August 2025, and most high-risk (Annex III) and transparency rules from 2 August 2026, with product-embedded high-risk rules transitioning to 2 August 2028.
digital-strategy.ec.europa.eu ai-act-service-desk.ec.europa.eu
National implementation bill
On 20 April 2026 State Secretary Aerdts (Digital Economy) published the draft Uitvoeringswet AI-verordening with explanatory memorandum, opening public consultation until 1 June 2026; it sets out how AI Act supervision is organised in Dutch law.
Decentralised supervision model
The Netherlands opts for a decentralised model in which existing sectoral market-surveillance authorities each supervise AI within their own domain, so organisations deal with regulators they already know; around ten market-surveillance authorities are designated in total.
Coordinating authorities: AP and RDI
The Autoriteit Persoonsgegevens (Dutch DPA) and the Rijksinspectie Digitale Infrastructuur (State Inspectorate for Digital Infrastructure) are designated as coordinating supervisors. The AP has acted as national coordinating algorithm supervisor since 2023 through its Directie Coördinatie Algoritmes (DCA).
Sectoral high-risk supervisors
For high-risk AI, designated market-surveillance authorities include the RDI, the Human Environment and Transport Inspectorate (ILT), the Health and Youth Care Inspectorate, the Netherlands Food and Consumer Product Safety Authority (NVWA) and the Netherlands Labour Authority; the AFM and De Nederlandsche Bank (DNB) supervise the financial sector, with judicial-use AI overseen by the Procurator General at the Supreme Court and the Council of State.
National AI strategy and sandbox
Beyond the binding EU framework, the Netherlands maintains a national strategy rooted in the 2019 Strategic Action Plan for AI (SAPAI) and the public-private NL AI Coalition (AiNEd programme), now folded into the broader Dutch Digitalisation Strategy; an Article 57 AI regulatory sandbox is expected to launch around August 2026.
The EU AI Act in Netherlands: FAQ
Does the EU AI Act apply in Netherlands?
Yes. As an EU member, Netherlands is covered by the EU AI Act (Regulation (EU) 2024/1689), which applies directly.
What does the EU AI Act regulate in Netherlands?
It uses a risk-based approach: unacceptable-risk AI is banned, high-risk AI faces strict obligations, and general-purpose AI models carry transparency duties.
When does the EU AI Act take effect in Netherlands?
It is phased: prohibitions applied from February 2025, general-purpose-AI rules from August 2025, and most high-risk obligations from August 2026.
What are the penalties under the EU AI Act in Netherlands?
Up to €35 million or 7% of global annual turnover for breaching the prohibited-AI rules, with lower tiers for other breaches.
Timeline of decisions
- LawDraft AI Act Implementation Act Opens for Public Consultation
The Dutch government published a draft Implementation Act establishing how the EU AI Act will be governed nationally, adopting a decentralised model with ten sectoral market surveillance authorities co-ordinated by the AP and the RDI. The consultation runs until 1 June 2026 and is the foundational step toward a binding national AI supervisory architecture.
Loyens & Loeff
- Guidance · officialAP and RDI Publish Design Proposal for Dutch AI Regulatory Sandbox
The Dutch Data Protection Authority (AP) and the State Inspectorate for Digital Infrastructure (RDI) jointly published a design proposal for the national AI regulatory sandbox, which is mandatory under the EU AI Act by August 2026. The proposal emerged from a pilot with 25 organisations and outlines a single multi-sectoral testing environment operated without waiving compliance obligations.
Autoriteit Persoonsgegevens (AP)
- Law · officialEU AI Act First Obligations Take Effect in the Netherlands
The initial tranche of the EU AI Act became enforceable across the Netherlands, prohibiting a defined list of high-risk AI practices (e.g. social scoring, real-time biometric surveillance in public spaces) and requiring organisations to ensure employee AI literacy. These rules are directly applicable as EU law with no further national transposition needed.
Autoriteit Persoonsgegevens (AP)
- Guidance · officialGovernment-Wide Position on the Use of Generative AI Published
The Dutch government published binding guidance for civil servants on the responsible use of generative AI tools in government work, building on the January 2024 strategic vision. The position sets out permissible use cases, human-oversight requirements, and procurement conditions for AI products used across all ministries.
Government of the Netherlands
- Enforcement · officialDutch AP Fines Clearview AI €30.5 Million for Illegal Biometric Database
The AP imposed a €30.5 million fine on Clearview AI for scraping billions of facial images to build an unlawful biometric database in violation of GDPR Articles 5, 6, 9, 12-15, and 27. The AP additionally signalled it was considering holding Clearview executives personally liable, marking the Netherlands' most significant AI-related enforcement action to date.
Autoriteit Persoonsgegevens (AP)
- Law · officialEU AI Act Enters Into Force, Directly Applicable in the Netherlands
The EU Artificial Intelligence Act (Regulation 2024/1689) entered into force following publication in the Official Journal on 12 July 2024. As a directly applicable EU regulation it immediately formed part of Dutch law without national transposition, introducing the EU's first comprehensive risk-based AI legal framework and triggering an 18-month implementation clock for most provisions.
Autoriteit Persoonsgegevens (AP)
- Guidance · officialDutch Government Presents Government-Wide Vision on Generative AI
The Netherlands became one of the first EU member states to publish a comprehensive cross-government vision on generative AI, setting out six action lines covering public values, non-discrimination, transparency, and security. The vision directly informed the government's internal position paper published a year later and was sent to parliament as a formal policy document.
Government of the Netherlands
- Decision · officialDutch Government Launches National Algorithm Register
Secretary of State for Digitalisation Alexandra van Huffelen launched the public Algorithm Register (algoritmes.overheid.nl), requiring government bodies to disclose the AI and algorithmic systems they use. Within months over 1,000 entries were published; mandatory registration is foreseen once a legal obligation is enacted, and by 2025 the register covered more than 1,300 algorithms from 500+ bodies.
Dutch Government Algorithm Register
- IncidentRutte III Cabinet Resigns Over Discriminatory Childcare-Benefits Algorithm (Toeslagenaffaire)
The third Rutte cabinet resigned after a parliamentary inquiry found that the Tax and Customs Administration had used a discriminatory self-learning algorithm since 2013 to flag childcare-benefit fraud, disproportionately targeting ~26,000 families with non-Dutch nationality. The scandal became a defining European case study for the dangers of automated decision-making and algorithmic racial profiling in government.
Wikipedia (Dutch childcare benefits scandal)
- Decision · officialAmsterdam Launches World's First Municipal AI Algorithm Register
The Municipality of Amsterdam published a public AI register listing every algorithmic system deployed by city services, along with explanations of their logic, data sources, and human-oversight arrangements. The register became an international model and directly inspired the subsequent national Dutch government register launched in 2022.
OECD.AI Policy Observatory
- Decision · officialThe Hague Court Strikes Down SyRI Welfare-Fraud Profiling System
The District Court of The Hague ruled that the SyRI (Systeem Risico Indicatie) legislation, which used a hidden algorithmic risk model to profile low-income neighbourhoods for benefit fraud, violated the right to privacy under Article 8 ECHR because it was too opaque, collected disproportionate data, and lacked adequate safeguards against bias. The ruling was one of Europe's first judicial prohibitions of a government AI profiling tool.
UN OHCHR
- Guidance · officialNetherlands Publishes Strategic Action Plan for AI; Dutch AI Coalition Founded
The Dutch government released its first national AI strategy setting three pillars, economic competitiveness, societal benefit, and trustworthy AI, backed by roughly €45 million per year in public funding. Simultaneously, the Dutch AI Coalition (NL AIC), a public-private partnership with 400+ members from industry, academia, and government, was launched to implement the strategy and prevent fragmented AI development.
European Commission AI Watch
Sources
- digital-strategy.ec.europa.eu/en/policies/regulatory-framework-ai
- ai-act-service-desk.ec.europa.eu/en/ai-act/timeline/timeline-implementation-eu-ai-act
- rijksoverheid.nl/actueel/nieuws/2026/04/20/kabinet-zet-stap-met-toezicht-op-europese-a
- digitaleoverheid.nl/nieuws/consultatie-uitvoeringswet-ai-verordening-van-start/
- autoriteitpersoonsgegevens.nl/actueel/toezicht-op-ai-wordt-concreet-sleutelrol-voor-de-ap-en-de-rdi
- autoriteitpersoonsgegevens.nl/en/themes/algorithms-ai/eu-ai-act
- rdi.nl/actueel/nieuws/2026/04/20/toezicht-ai-balans-veiligheid-en-innovatie
- rdi.nl/onderwerpen/technologische-ontwikkelingen/kunstmatige-intelligentie/a
- loyensloeff.com/insights/news--events/news/dutch-implementation-of-the-ai-act-decentr
- stibbe.com/publications-and-insights/dutch-proposal-for-ai-supervision-hybrid-co
- ai-watch.ec.europa.eu/countries/netherlands/netherlands-ai-strategy-report_en
Next for Netherlands: Data & PrivacyComprehensive law
Next topicOrientation, not legal advice: verify against the primary sources linked above. Last verified 23 May 2026. Methodology & how to cite · State of Technology Regulation 2026