Slovakia - AI Regulation Overview
Slovakia AI Regulation Overview
Prehľad regulácie AI na Slovensku
Slovakia
RAI-SK-NA-SUMMARY-2026Slovakia is developing a comprehensive AI regulatory framework, blending strategic policies with new legislation to implement the EU AI Act. The focus is on ethical AI, data protection, cybersecurity, and digital skills, with strong alignment to EU digital strategies.
Overview
Slovakia's approach to AI regulation is characterized by a proactive, yet measured, strategy that heavily aligns with European Union frameworks. The country is in a transitional phase, moving from a foundation of strategic policies and guidelines towards the implementation of comprehensive, binding legislation, particularly in response to the EU Artificial Intelligence Act. This approach emphasizes fostering innovation while ensuring ethical considerations, fundamental rights protection, and robust governance mechanisms are in place. The national strategy prioritizes the responsible integration of AI across public administration, education, and key economic sectors, aiming to leverage digital transformation for societal and economic benefit. The Ministry of Investments, Regional Development and Informatization (MIRRI) plays a central coordinating role, driving national digital policies and preparing the country for the complexities of AI governance.
The Slovak Republic's regulatory philosophy is built upon a multi-layered framework that combines high-level strategic documents with detailed action plans and, increasingly, specific legislative proposals. Key institutions like MIRRI are supported by expert advisory bodies such as the Standing Commission for Ethics and Regulation of Artificial Intelligence (CERAI), which provides crucial input on ethical, societal, and legal implications of AI. This collaborative ecosystem aims to ensure that Slovakia's digital transformation, including its AI development, is secure, inclusive, and aligned with international best practices, particularly those emanating from the European Digital Decade agenda. The nation's commitment to digital skills development, as outlined in the National Strategy for Digital Skills, and robust cybersecurity, detailed in the National Cybersecurity Strategy, also forms a crucial underpinning for its broader AI strategy, creating a supportive environment for responsible technological advancement.
Regulatory Approach
Slovakia employs a hybrid regulatory approach to AI, combining non-binding soft law instruments with forthcoming binding legislation. The current landscape is largely shaped by a series of high-level policies, strategies, and action plans, such as the Strategy of Digital Transformation of Slovakia 2030 and its subsequent Action Plans (2019-2022 and 2023-2026), alongside the National Concept of Informatization of Public Administration (NKIVS) 2021–2026. These documents provide a strategic vision, define priorities, and assign responsibilities across ministries, guiding the overall direction of digital transformation and AI integration without imposing direct legal sanctions. Complementing these are specific guidelines, like the "AI in Education — Guidance for Educators," which offers practical recommendations for responsible AI use in classrooms, focusing on pedagogical principles, roles, and responsibilities for introducing AI tools while protecting learners' rights and safety. The establishment of advisory bodies, such as CERAI and the Government Plenipotentiary for AI, further underscores the reliance on expert advice and ethical considerations to shape policy, ensuring a human-centric approach to AI development.
However, Slovakia is rapidly transitioning towards a more prescriptive and risk-based regulatory framework, primarily driven by its commitment to implement the European Union's Artificial Intelligence Act (EU AI Act). Draft legislation, such as the "Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence" and the "Draft Act on the Management of Selected Categories of Public Sector Data," signal a move towards binding rules for high-risk AI systems, data governance, and market surveillance. These forthcoming laws are designed to establish a clear institutional architecture, define obligations for AI system providers and deployers, and introduce enforcement powers, including administrative sanctions. This dual approach allows for flexibility and innovation through policy guidance while preparing for robust legal oversight, especially for AI applications that pose significant risks to fundamental rights or public safety, ensuring that regulatory burdens are proportionate to the level of risk.
Key AI Legislation
Slovakia's AI regulatory framework is a blend of strategic policies, guidelines, and pending legislative acts, all designed to foster responsible AI development and deployment while aligning with EU standards.
- AI in Education — Guidance for Educators (Usmernenie o AI pre pedagógov) (2025): An official methodological guidance from the Slovak Ministry of Education, providing practical recommendations for primary and secondary school teachers on the safe, ethical, and responsible use of AI in classrooms, covering communication, privacy, human oversight, and pedagogical design, aligned with EU AI regulatory requirements.
- Draft Act on the Management of Selected Categories of Public Sector Data (2025): A national legislative initiative aiming to create a harmonized framework for identifying, managing, and enabling controlled reuse of specific categories of public sector data, aligning with the European Data Governance Act. It focuses on facilitating reuse for scientific research, innovation, and AI training under strict privacy, security, and IP safeguards, defining competent bodies and access conditions.
- Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence (2025) / Draft Act on the Organization of State Administration in the Field of Artificial Intelligence (2025): These draft Acts are national implementing instruments for the EU Artificial Intelligence Act (Regulation (EU) 2024/1689). They aim to institutionalize national AI governance, designate a general national market surveillance authority (MIRRI), establish sectoral supervisory authorities, set mandatory duties for operators and deployers of high-risk AI systems, and create provisions for a national notifying authority and a regulatory sandbox.
- Government Plenipotentiary for Artificial Intelligence (2025): A government decree establishing an advisory office to coordinate national AI policy, interface with EU and international AI governance fora, and promote safe, ethical, and effective AI deployment across public administration, research, industry, and civil society.
- Institutional and Coordination Framework for the Digital Transformation of Slovakia (2024): A non-legislative cross-cutting framework intended to organize and coordinate national-level activity on digital transformation across ministries, responding to the European Union’s recent wave of digital legislation, including the proposed AI Act.
- Action Plan for Digital Transformation of Slovakia 2023–2026 (2022): An operational roadmap translating the Strategy for Digital Transformation 2030 and related national and EU commitments into time-bound measures, including fostering the development and responsible deployment of artificial intelligence and other cutting-edge technologies.
- National Strategy for Digital Skills of the Slovak Republic and Action Plan 2023–2026 (2022): A comprehensive, government-adopted policy document designed to coordinate and accelerate the development of digital competences across public administration, education, the labor market, and civil society, emphasizing AI awareness and digital ethics.
- National Concept of Informatization of Public Administration (NKIVS) 2021–2026 (2021): A government-approved strategic framework for digital transformation of public administration, laying out objectives for user-oriented services, data transformation, shared services, cybersecurity, and the establishment and use of AI/RPA for routine tasks.
- National Cybersecurity Strategy 2021–2025 (2021): A national-level policy instrument enhancing the protection of the national cyber space, improving preparedness and incident response, and strengthening international cooperation, which is crucial for the security and resilience of AI systems.
- Research and Innovation Strategy for Smart Specialisation of the Slovak Republic 2021–2027 (SK RIS3 2021+) (2021): The national framework that aligns research, development, and innovation investments and policies with EU cohesion policy, identifying "Digital Transformation of Slovakia" as a key priority domain that includes AI.
- Strategy and Action Plan to Improve Slovakia's Position in the DESI Index to 2025 (2021): A national policy document prepared by MIRRI to improve Slovakia's digital competitiveness, organizing measures against the five DESI dimensions, including the integration of digital technologies and digital public services.
- Standing Commission for Ethics and Regulation of Artificial Intelligence (CERAI) (2020): An independent expert and advisory body created by MIRRI to evaluate ethical, socio-societal, and legal implications of AI research, development, deployment, and use in Slovakia, informing governmental policy-making and contributing to national alignment with international standards.
- Strategy of Digital Transformation of Slovakia 2030 (2019): A governmental, cross-departmental policy framework defining a national vision for Slovakia's digital transition, identifying core pillars such as human capital, infrastructure, regulatory frameworks, and research & innovation, with a focus on fostering AI and HPC capacity.
Governance & Enforcement Bodies
The governance of AI in Slovakia is a multi-faceted endeavor, primarily coordinated by the Ministry of Investments, Regional Development and Informatization (MIRRI). MIRRI is designated as the national coordinator for digital transformation and is expected to serve as the general national market surveillance authority and single contact point for EU-level cooperation under the forthcoming AI Act implementation. Its mandate extends to policy coordination, publication of annual reports on AI usage in the public sector, maintenance of national registries for AI systems, and overseeing regulatory sandbox programs to support innovation. This central role ensures a coherent and coordinated approach to AI policy across various governmental sectors and in alignment with EU directives.
Supporting MIRRI in its coordinating role is the Government Plenipotentiary for Artificial Intelligence, an advisory organ established in 2025, tasked with supporting national AI policy, coordinating expert input for EU and international AI work, and promoting the development of national support and supervisory bodies. This plenipotentiary also systematically collects and analyzes information on AI use in Slovakia and presents an annual report to the government on AI deployment and the state of the ecosystem. Further institutional support comes from the Standing Commission for Ethics and Regulation of Artificial Intelligence (CERAI), an independent expert and advisory body established in 2020 under MIRRI's auspices. CERAI's mandate involves evaluating the ethical, societal, and legal implications of AI, preparing expert opinions on national legislation, advising on responsible AI practices in the public sector, and producing guidance materials. While CERAI does not have direct enforcement powers, its outputs inform governmental policy-making and contribute to national alignment with international standards. The implementation of the EU AI Act will also establish sectoral supervisory authorities with defined competences, including the Office for Personal Data Protection (Úrad na ochranu osobných údajov) for privacy compliance, the National Security Authority (NBÚ) for cybersecurity, and the Slovak Trade Inspection (SOI) for consumer and product market supervision. These bodies will be crucial for domain-specific oversight and enforcement, working in cooperation with the general market surveillance authority.
Penalties & Enforcement
The current framework for penalties and enforcement in Slovakia regarding AI is largely prospective, with significant mechanisms anticipated through the implementation of the EU AI Act. The "Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence" proposes to establish enforcement powers and administrative sanctions for non-compliance with obligations related to high-risk AI systems. These sanctions are expected to be aligned with the severity of breaches, reflecting the tiered penalty structure envisioned by the EU AI Act, and may include administrative fines or corrective orders. The draft bill also clarifies liability rings for negligent disclosure or failure to secure re-used datasets, particularly within the context of public sector data reuse under the proposed data governance act. Enforcement will involve supervisory oversight, including reporting and audits, with the possibility of administrative fines or corrective orders for non-compliant public sector bodies or intermediaries.
Beyond the specific AI-focused legislation, existing national laws provide a baseline for enforcement. The General Data Protection Regulation (GDPR) and national data protection law, enforced by the Office for Personal Data Protection, already impose significant fines for privacy breaches, which are highly relevant given AI's reliance on data. Similarly, the National Cybersecurity Strategy 2021–2025 and Act No. 69/2018 Z.z. on cybersecurity establish enforceable obligations for critical infrastructure operators and public sector entities, with penalties for security incidents and non-compliance. The forthcoming AI Act implementation will build upon these existing frameworks, mandating cooperation between the general market surveillance authority (MIRRI) and sectoral supervisors to ensure comprehensive oversight and consistent application of sanctions across different domains. Appeals processes and judicial review channels are also expected to be established to ensure fairness and due process in enforcement actions, allowing affected parties to challenge decisions or penalties.
Data Protection Framework
Slovakia's data protection framework is robustly anchored in the European Union's General Data Protection Regulation (GDPR), which is directly applicable law. This means that any AI system processing personal data within Slovakia must fully comply with GDPR principles, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability. The national supervisory authority for data protection is the Office for Personal Data Protection (Úrad na ochranu osobných údajov), which retains competence for privacy compliance and is expected to cooperate closely with the new AI governance bodies, as outlined in the draft implementing legislation for the EU AI Act. The "AI in Education — Guidance for Educators" specifically emphasizes the importance of privacy and data protection, advising educators to avoid sharing sensitive personal data with third-party AI services and to conduct data protection checks in compliance with GDPR and national requirements, providing practical steps for safeguarding pupil information.
Furthermore, the "Draft Act on the Management of Selected Categories of Public Sector Data" directly addresses data protection in the context of public sector data reuse, which is critical for AI training and research. This draft Act requires mandatory Data Protection Impact Assessments (DPIAs) where personal data are involved, alongside strict criteria and checks for anonymization and pseudonymization to mitigate privacy risks. It also mandates secure remote analysis environments (e.g., data clean rooms) when direct disclosure of sensitive data is not appropriate, ensuring that reuse is "as open as possible, as closed as necessary". This legislative initiative, aligned with the European Data Governance Act, aims to create a harmonized framework for controlled data reuse while layering national implementation details on competent bodies, access conditions, and technical safeguards, all while ensuring that GDPR and national data protection law continue to prevail where personal data are concerned, reinforcing the primacy of privacy rights.
Sector-Specific Rules
While a comprehensive set of sector-specific AI regulations is still evolving, Slovakia has initiated targeted guidance and strategic planning for AI integration in key sectors, with further regulatory developments anticipated through the implementation of the EU AI Act. A notable example is the "AI in Education — Guidance for Educators," published by the Slovak Ministry of Education in 2025. This guideline provides practical recommendations for primary and secondary school teachers on the safe, ethical, and responsible use of AI in classrooms, covering aspects like communication, privacy, human oversight, and pedagogical design. It aims to complement school-level rules and ministry programs, ensuring that AI tools are introduced while protecting learners' rights and safety, and promoting AI literacy and critical thinking among pupils. This demonstrates a proactive approach to managing AI in a sensitive sector, focusing on practical application and ethical considerations.
Beyond education, broader strategic documents like the "Research and Innovation Strategy for Smart Specialisation of the Slovak Republic 2021–2027 (SK RIS3 2021+)" identify "Digital Transformation of Slovakia" as a key domain, which includes fostering AI development and deployment across various economic sectors, such as innovative industry and mobility. The "Action Plan for Digital Transformation of Slovakia 2023–2026" also explicitly mentions funding pilots for AI in healthcare, public administration, and manufacturing, promoting ethical AI practices and responsible data use. While these are policy documents rather than binding regulations, they signal the government's intent to support and guide AI adoption in critical areas. The forthcoming implementation of the EU AI Act will introduce legally binding sector-specific rules for high-risk AI systems deployed in areas such as healthcare, employment, law enforcement, and critical infrastructure, with designated sectoral supervisory authorities like the State Institute for Drug Control for medical AI and the Transport Authority for transport-related AI, ensuring specialized oversight for high-impact applications.
International Alignment
Slovakia's approach to AI regulation is deeply intertwined with its membership in the European Union, demonstrating a strong commitment to international alignment, particularly with the EU AI Act. The "Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence" and the "Draft Act on the Organization of State Administration in the Field of Artificial Intelligence" are explicit national implementing instruments for the EU Artificial Intelligence Act (Regulation (EU) 2024/1689). These bills aim to establish the necessary national institutional architecture for market surveillance, designate competent authorities, and set out obligations for high-risk AI systems, directly translating EU requirements into Slovak law. The Government Plenipotentiary for Artificial Intelligence is also mandated to coordinate expert input and positions for EU-level and international AI legislative and non-legislative work, and to cooperate with EU AI bodies such as the EU AI Office and the European AI Board, ensuring Slovakia's active participation in European AI governance.
Beyond the AI Act, Slovakia's digital transformation strategies consistently reference and align with broader EU digital policy initiatives. The "Institutional and Coordination Framework for the Digital Transformation of Slovakia" directly responds to the EU’s wave of digital legislation, including the Digital Services Act, Digital Markets Act, Data Act, Data Governance Act, and interoperability rules, by establishing a national mechanism to translate these obligations into coherent domestic action. Similarly, the "Draft Act on the Management of Selected Categories of Public Sector Data" explicitly aligns with the European Data Governance Act (Regulation (EU) 2022/868), demonstrating a commitment to harmonized data governance across the EU. Slovakia's policies, such as the "Strategy and Action Plan to Improve Slovakia's Position in the DESI Index to 2025" and the "Action Plan for Digital Transformation of Slovakia 2023–2026," are designed to meet EU Digital Decade targets and DESI index objectives, reinforcing the nation's commitment to a harmonized European digital single market and improved digital competitiveness. The Standing Commission for Ethics and Regulation of Artificial Intelligence (CERAI) also contributes to this alignment by fostering interoperable, ethics-based governance practices and aligning Slovak AI practices with evolving European frameworks, often referencing EU terminology and concepts.
Future Developments
Slovakia's AI regulatory landscape is poised for significant evolution with several key legislative initiatives currently in draft status, primarily driven by the nation's commitment to implement the EU AI Act and enhance data governance. The most impactful future developments revolve around the "Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence" and the "Draft Act on the Organization of State Administration in the Field of Artificial Intelligence". These bills, currently undergoing interdepartmental comment procedures, are set to establish the comprehensive national framework for AI governance, market surveillance, and the regulation of high-risk AI systems in line with the EU AI Act. Their anticipated effective date is January 1, 2026, though final content remains subject to change following consultation and parliamentary procedure. These acts will define national competent authorities, set mandatory duties for AI system operators and deployers, and introduce a national regulatory sandbox to foster innovation under supervised conditions, providing a controlled environment for testing and development.
Another crucial pending development is the "Draft Act on the Management of Selected Categories of Public Sector Data," which was introduced in 2025. This bill aims to create a harmonized framework for the controlled reuse of public sector data, aligning with the European Data Governance Act. It is expected to define categories of reusable data, designate competent national bodies, require metadata and interoperability standards, and establish privacy and security safeguards to ensure responsible data sharing for research, innovation, and AI training. The draft anticipates phased implementation, with prioritized categories for early release (e.g., statistics, anonymized transport and environmental data) and detailed technical guidance to be issued by designated ministries or a national data office. These legislative efforts, combined with ongoing updates to national digital transformation and cybersecurity strategies, indicate a continuous and iterative process of adapting Slovakia's legal and policy framework to the rapid advancements in AI and digital technologies, always with a strong emphasis on alignment with broader EU digital policy objectives and ensuring a future-proof regulatory environment.
Key Regulations
All 16 regulations currently tracked for Slovakia at national level.
Enforcement Bodies
| Agency | Mandate | Key Powers | Website |
|---|---|---|---|
| Ministry of Investments, Regional Development and Informatization (MIRRI) | National coordinator for digital transformation; general national market surveillance authority and single contact point for EU AI Act implementation. | Policy coordination, maintaining national AI registries, overseeing regulatory sandboxes, issuing guidance, inter-ministerial coordination, reporting to government. | https://mirri.gov.sk/en/ |
| Office for Personal Data Protection (Úrad na ochranu osobných údajov) | Supervision over the protection of personal data and participation in the protection of fundamental rights and freedoms of individuals during personal data processing. | Conducting inspections, imposing administrative fines for GDPR violations, issuing opinions and guidelines, cooperating with other supervisory authorities. | https://dataprotection.gov.sk/uoou/en/ |
| National Security Authority (Národný bezpečnostný úrad, NBÚ) | Central state administration body for the protection of classified information, cryptographic services, cybersecurity, and trusted services. | Developing and implementing cybersecurity strategy, incident response coordination (SK-CERT), issuing security standards, overseeing critical information infrastructure. | https://www.nbu.gov.sk/ |
| Slovak Trade Inspection (Slovenská obchodná inšpekcia, SOI) | General market surveillance authority for consumer protection on the internal market. | Conducting inspections of products and services, enforcing consumer protection laws, imposing administrative measures and fines for non-compliance, market surveillance for product safety. | https://www.soi.sk/ |
| State Institute for Drug Control (Štátny ústav pre kontrolu liečiv, ŠÚKL) | Oversight of the safety, efficacy, and quality of medicines and medical devices. | Registration and authorization of medicines, market surveillance of medical products, monitoring adverse effects, issuing guidelines for healthcare AI systems, and acting as a sectoral supervisory body for medical/healthcare AI. | https://www.sukl.sk/ |
| Transport Authority (Dopravný úrad) | State administrative body with nationwide operation in the area of railways and other guided transport, civil aviation, and inland waterway transport. | Regulation and supervision of transport safety and operations, issuing licenses and permits, investigating incidents, and acting as a sectoral supervisory body for AI in transport. | https://www.nsat.sk/ |
Related Regulations
Draft Act on the Organization of State Administration in the Field of Artificial Intelligence (national bill to establish oversight, notifying authority and regulatory sandbox)
Slovakia93% similar
Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence (government bill submitted to interdepartmental comment procedure)
Slovakia92% similar
Estonia AI Regulation Overview
Estonia92% similar
Germany AI Regulation Overview
Germany92% similar
Finland AI Regulation Overview
Finland92% similar
© Regulations.AI — created on 05-Aug-2026 using Gemini 2.5 Flash