Market Surveillance Authority (MSA)
National agency responsible for post‑market supervision and enforcement.
How the laws define this
National authorities acting as Market Surveillance Authorities share the fundamental responsibility of carrying out market surveillance, inspections, and enforcement actions to ensure AI systems comply with the EU AI Act and national law. These bodies are uniformly empowered to conduct investigations, mandate corrective or remedial measures, and participate in EU-level or cross-border enforcement networks. The principal divergence among the instruments lies in whether this role is treated as a unified national function or divided across specialized authorities. The Governance Framework in Cyprus and the General Scheme of the Regulation of Artificial Intelligence Bill 2026 both frame the role as a national authority overseeing broad compliance. Conversely, Malta splits these duties between distinct regulations: Legal Notice 226 of 2025 sets the MDIA as the default authority tasked with sampling and coordinating with sectoral regulators, whereas Legal Notice 227 of 2025 explicitly designates the Information and Data Protection Commissioner as the authority for high-risk AI system categories listed in Annex III/Schedule III.
Synthesised from the 4 statutory definitions below. Each one is quoted in full, with its source.
How jurisdictions differ
What is distinctive in each definition, binding law in force first.
| Jurisdiction | Instrument | Status | What is distinctive |
|---|---|---|---|
| Malta | 227 of 2025 - Artificial Intelligence (Designation of the Information and Data Protection Commissioner for the purposes of Regulation (EU) 2024/1689) Regulations, 2025 (Legal Notice) | In Force | Designates the Information and Data Protection Commissioner (IDPC) specifically for high-risk AI system categories listed in Annex III/Schedule III. |
| Ireland | Regulation of Artificial Intelligence Act 2026 | In Force | Provides a plain definition without specifying the authority or detailing specific powers or scope. |
| Cyprus | Governance Framework for the Implementation of Regulation (EU) 2024/1689 on Artificial Intelligence in Cyprus | Adopted | Applies to a non-binding policy framework designating OCECPR as the single point for ex post surveillance. |
| Malta | 226 of 2025 - Artificial Intelligence Regulations, 2025 (Legal Notice) | In Force | Designates MDIA as the default authority for national market surveillance of all AI systems with coordinating role. |
What it triggers
- In Malta under Legal Notice 227 of 2025, the IDPC includes inspections, information requests, investigations, remedial orders, cooperation with national bodies and participation in EU-level mechanisms for high-risk AI systems.source
- In Malta under Legal Notice 226 of 2025, the MDIA is tasked with inspections, sampling, enforcement actions, coordinating with sectoral regulators and the IDPC where competencies overlap, and cooperating in cross-border EU enforcement for AI systems.source
- In Ireland under the Regulation of Artificial Intelligence Act 2026, the authority must carry out market surveillance to ensure AI systems comply with the EU AI Act and national law.source
- In Cyprus, the Governance Framework tasks OCECPR with ex post market surveillance, inspections, enforcement actions, and corrective measures for AI systems.source
Definitions (4)
A national authority tasked with ex post market surveillance, inspections, enforcement actions, and corrective measures to ensure AI systems on the market comply with the AI Act and national implementing rules.
The Legal Notice designates the Information and Data Protection Commissioner (IDPC) as Malta's Market Surveillance Authority for the high‑risk AI system categories listed in Annex III/Schedule III of Regulation (EU) 2024/1689; the MSA role includes inspections, information requests, investigations, remedial orders, cooperation with national bodies and participation in EU-level cooperation mechanisms to ensure compliance with the AI Act.
The authority responsible for national market surveillance of AI systems (MDIA by default under LN 226), tasked with inspections, sampling, enforcement actions, coordinating with sectoral regulators and the IDPC where competencies overlap, and cooperating in cross‑border enforcement with EU networks.
A national authority responsible for carrying out market surveillance and ensuring AI systems comply with the EU AI Act and national law.
Not to be confused with
Specifies AI market surveillance authority as for post-market oversight and enforcement, while MSA definitions detail specific powers like inspections and enforcement actions.
Refers to supervision of market surveillance and enforcement of the AI Act, whereas MSA focuses on the authority carrying out surveillance and enforcement itself.
Questions and answers
Who is the Market Surveillance Authority in Malta for high-risk AI?
Legal Notice 227 of 2025 designates the Information and Data Protection Commissioner (IDPC) as Malta's MSA for high-risk AI systems in Annex III/Schedule III. The IDPC handles inspections, investigations, remedial orders and EU cooperation.
What does the MSA do under Malta's AI Regulations?
Legal Notice 226 of 2025 designates the Malta Digital Innovation Authority (MDIA) as the default MSA for AI systems. It conducts inspections, sampling, enforcement, coordinates with regulators and IDPC, and handles cross-border cooperation.
Which authority oversees AI market surveillance in Ireland?
The Regulation of Artificial Intelligence Act 2026 designates a national authority to carry out market surveillance and ensure compliance with the EU AI Act and national law.
Related Terms
AI market surveillance authority
National authority for post‑market oversight and enforcement....
market control authority
National authority responsible for market surveillance of AI systems....
National Supervisory Authority
Body designated to supervise market surveillance and enforcement of the AI Act....
National Market Surveillance
State processes for monitoring AI systems on the market....
General Market Surveillance Authority
National coordinating authority for AI market surveillance....