Competent Authority

The new independent regulatory body proposed to oversee AI systems in Costa Rica, empowered to develop implementing regulations, issue guidance, receive and investigate complaints, conduct audits, impose sanctions, and coordinate with other regulators. It reports to the Legislative Assembly through defined reporting and budgetary oversight.

The authority empowered to supervise implementation and enforcement of the PDPL (identified in practice as the Saudi Data & AI Authority, SDAIA), which issues implementing regulations, maintains the national register, adjudicates enforcement actions, and issues guidance and transfer instruments. The Competent Authority coordinates with sectoral regulators and oversees registration, monitoring, breach notification and sanctions.

The designated national body (in practice the Electronic Transactions Development Agency and its AI Governance Center) empowered by the draft to supervise implementation, publish technical standards and delegated lists, operate sandboxes, administer registration and conformity assessment, coordinate with sectoral regulators, and enforce compliance.

A competent authority refers to a national public body in an EU Member State, designated by national law, that is responsible for the application and enforcement of the EU AI Act. In France, this role is distributed among existing bodies like the CNIL, ARCOM, and DGCCRF, each overseeing AI systems within their specific areas of expertise. They conduct market surveillance, investigations, and impose penalties for non-compliance.