Part of the AI Regulation News hub.
Ireland's Regulation of Artificial Intelligence Act 2026 was enacted on 21 July and commenced on 31 July, establishing Oifig IS na hEireann and an adjudicator-led route to administrative fines that track the EU AI Act's own ceilings
This page previously tracked a bill. That bill is now law and, unusually for an Irish Act of this size, almost all of it was commenced ten days after enactment. Ireland has a functioning AI Act enforcement structure while most member states are still designating authorities.
Bottom line: The Regulation of Artificial Intelligence Act 2026 is No. 31 of 2026. It was enacted on 21 July 2026 and commenced on 31 July 2026 by S.I. No. 403 of 2026, with one narrow exception. It establishes Oifig IS na hEireann, designates market surveillance and competent authorities, and creates an adjudicator-led route to administrative fines.
Who this affects: Providers and deployers of AI systems with an Irish nexus, the authorities named as market surveillance bodies, regulated financial firms through the Central Bank Part, and public bodies, which face a separate and much lower fine ceiling.
Issue date: Enacted 21 July 2026. Commenced 31 July 2026. Establishment day for Oifig IS na hEireann was also 31 July 2026, appointed by S.I. No. 404 of 2026.
What changed: The status. When this page was first published the instrument was a bill that had not been enacted and had no commencement date. It is now a commenced Act with a statutory office that legally exists.
Analysis: The speed is the story. Ten days from enactment to near-total commencement is not how large Irish regulatory statutes usually arrive, and it is a sharp contrast with the pace of AI Act implementation across the rest of the Union. The single carve-out is revealing too: the two limbs left uncommenced are precisely the ones that would hand roles to the media regulator and the data protection regulator.
Primary sources: Regulation of Artificial Intelligence Act 2026, No. 31 of 2026 · Full enacted text · S.I. No. 403/2026, Commencement Order · S.I. No. 404/2026, Establishment Day Order · Irish Statute Book commencement record
- Instrument
- Regulation of Artificial Intelligence Act 2026
- Citation
- No. 31 of 2026
- Jurisdiction
- Ireland
- Enactment status
- Enacted 21 July 2026. On the Irish Statute Book as the enacted text.
- Commencement status
- Commenced 31 July 2026 by S.I. No. 403 of 2026, for the whole Act other than paragraphs (a) and (e) of the definition of applicable market surveillance authority in section 78. The Statute Book commencement record, updated to 24 August 2026, records sections 1 to 139 as commenced on that date with that single exception.
- Still uncommenced
- Section 78, as it relates to paragraphs (a) and (e) of the definition of applicable market surveillance authority. A further commencement order under section 1(2) is required.
- Structure
- Ten Parts: preliminary; Oifig IS na hEireann; single point of contact, AI register, sandboxes, real world testing and data protection; market surveillance and competent authorities; supervision and enforcement; adjudication and administrative fines; penalties and miscellaneous; application to the Central Bank of Ireland; and two Parts of amendments.
- Bindingness
- Binding. It gives further effect in Irish law to Regulation (EU) 2024/1689.
- Editorial Note
- Informational analysis for working professionals, not legal advice. Confirm how any rule applies to your situation with qualified counsel.
- Primary source
- https://www.irishstatutebook.ie/eli/2026/act/31/enacted/en/print.html
Enacted, and then commenced ten days later
The long title records what the Act is for: to provide for the establishment of a body to be known as Oifig IS na hEireann, and to give further effect to Regulation (EU) 2024/1689.
Section 1(2) uses the standard Irish formula, that the Act comes into operation on such day or days as the Minister may by order appoint, either generally or for particular purposes or provisions, and that different days may be appointed for different provisions. On its own that formula tells a reader nothing about whether anything is in force.
The order was made. Article 2 of S.I. No. 403 of 2026 appoints the 31st day of July 2026 as the day on which the Act, other than paragraphs (a) and (e) of the definition of applicable market surveillance authority in section 78, comes into operation. It was sealed by Peter Burke, Minister for Enterprise, Tourism and Employment, on 31 July 2026.
A separate instrument, S.I. No. 404 of 2026, appointed the same date as the establishment day. Oifig IS na hEireann is therefore not a body the Act merely provides for at some future point. It exists.
What the carve-out actually is
One narrow piece is not in force, and it is worth understanding rather than skipping.
The Statute Book commencement record, updated to 24 August 2026, lists sections 1 to 77 as commenced on 31 July 2026, section 79 to 139 likewise, and section 78 commenced except as it relates to paragraphs (a) and (e) of the definition of applicable market surveillance authority. Those two paragraphs remain not commenced, and require a further order under section 1(2).
The two bodies named in those paragraphs are Coimisiun na Mean and the Data Protection Commission. So the machinery is live, and the definition that would draw the media regulator and the data protection regulator into the applicable market surveillance authority role for the adjudication Part is the piece deliberately held back.
A reader should not over-read that. It is a definitional carve-out within one section, not a suspension of the Act, and no reason is given on the face of the instruments. But anyone mapping which Irish regulator can do what under this Act needs to know that those two limbs are pending.
Fines: Ireland did not invent its own ceilings
Part 6 creates an adjudication route, and section 105 sets the amount of any administrative fine. The drafting choice is to point at the EU Regulation rather than restate figures.
Where a fine is imposed for non-compliance with the prohibition of AI practices in Article 5, section 105(2) says it shall not exceed the limits referred to in Article 99(3). Where it is imposed for non-compliance with the provisions referred to in Article 99(4), section 105(3) applies that paragraph's limits. Where it is imposed for supplying incorrect, incomplete or misleading information to a notified body or national competent authority, section 105(4) applies the Article 99(5) limits.
Then the exception that matters domestically. Section 105(5)(a) provides that where an adjudicator finds a fine should be imposed on a public body, within the meaning of section 10 of the Data Sharing and Governance Act 2019, the amount shall not exceed one million euro. Section 105(5)(b) applies the Article 99(6) amount to an undertaking referred to in that Article.
So the headline percentages are the EU's, carried across by reference, while the Irish addition is a hard cap on the State's own bodies. That asymmetry is the part a compliance reader should note: a public body and a commercial provider committing the same breach do not face the same maximum.
How a fine actually gets imposed
The Act does not let an authority simply issue a penalty. Part 6 routes it through an adjudicator, and the structure is worth knowing before anyone assumes a quick enforcement path.
Adjudicators are nominated and appointed under sections 116 and 117, with provisions on their independence and the terms on which they are engaged, and a register of adjudicators is maintained.
An adjudication does not take effect on its own. Section 114 provides that an adjudication takes effect when confirmed by the High Court, with the application and hearing provisions in the surrounding sections, and section 115 deals with publication.
Appeals run under Chapter 7, with an appeal against adjudication, provisions on the conduct of appeals, and an appeal to the Court of Appeal. For anyone modelling exposure, that is a court-confirmed rather than administratively final penalty, which changes both the timeline and the litigation risk.
The Central Bank Part, and why it is separate
Part 8 applies the Act to the Central Bank of Ireland, with its own definitions, an application provision, amendments to the Central Bank Act 1942 including section 33AK and Schedule 2, and a distinct provision on administrative fines that may be imposed by the Central Bank.
That is a deliberate structural choice rather than a drafting convenience. Financial regulation in Ireland already runs on the Central Bank's own sanctions architecture, and the Act plugs into it instead of routing regulated financial firms through the general adjudicator process.
Part 3 is the other Part worth reading early. It covers the single point of contact, the AI register, sandboxes, real world testing and data protection, which together are the provisions a firm is most likely to touch before it ever encounters an enforcement question.
Part 4 also carries a specific and easily missed obligation. Section 58 concerns market surveillance authorities seeking access, including to source code where the conditions in the relevant Article are fulfilled, and provides that a person who does not provide access where requested is guilty of an offence.
Update your Ireland position. The Regulation of Artificial Intelligence Act 2026 is No. 31 of 2026, enacted on 21 July 2026 and commenced on 31 July 2026 by S.I. No. 403 of 2026, with Oifig IS na hEireann established the same day by S.I. No. 404. Only two limbs of one definition in section 78 remain uncommenced, the paragraphs that would bring Coimisiun na Mean and the Data Protection Commission into the applicable market surveillance authority definition. On fines, Ireland imported the EU ceilings rather than writing its own: section 105 applies the Article 99(3), (4) and (5) limits by reference, and adds a domestic cap of one million euro where the party fined is a public body. Note the process before assuming speed: an adjudication takes effect only when confirmed by the High Court, and appeals run to the Court of Appeal. Financial firms should read Part 8 first, because the Act routes them through the Central Bank's own regime rather than the general adjudicator path.
Source File
https://www.irishstatutebook.ie/eli/2026/act/31/enacted/en/print.html
Open the enacted text and confirm four things: the header Number 31 of 2026, Regulation of Artificial Intelligence Act 2026, with the long title establishing Oifig IS na hEireann and giving further effect to Regulation (EU) 2024/1689; section 1(2), the commencement formula appointing such day or days as the Minister may by order appoint; section 105, and in particular subsection (5)(a) capping a fine on a public body at one million euro; and then S.I. No. 403 of 2026, whose article 2 appoints 31 July 2026 as the commencement day other than paragraphs (a) and (e) of the definition of applicable market surveillance authority in section 78.
The 31st day of July 2026 is appointed as the day on which the Regulation of Artificial Intelligence Act 2026 (No. 31 of 2026), other than paragraphs (a) and (e) of the definition of "applicable market surveillance authority" in section 78, shall come into operation. S.I. No. 403 of 2026, Regulation of Artificial Intelligence Act 2026 (Commencement) Order 2026, article 2
FAQ
Is Ireland's AI Act in force?
Yes, almost entirely. It was commenced on 31 July 2026 by S.I. No. 403 of 2026. The only exception is paragraphs (a) and (e) of the definition of applicable market surveillance authority in section 78, which remain uncommenced and need a further order under section 1(2).
When was it enacted, and is that the same as commencement?
It was enacted on 21 July 2026 as No. 31 of 2026. Enactment and commencement are different things: enactment makes it an Act, commencement brings provisions into operation. Here they are ten days apart.
Does Oifig IS na hEireann actually exist?
Yes. S.I. No. 404 of 2026 appointed 31 July 2026 as the establishment day for the purposes of the Act.
What are the maximum fines?
Section 105 applies the EU AI Act's own ceilings by reference: the Article 99(3) limits for prohibited practices, the Article 99(4) limits for the provisions listed there, and the Article 99(5) limits for supplying incorrect, incomplete or misleading information. Section 105(5)(a) adds an Irish cap of one million euro where the party fined is a public body within the meaning of section 10 of the Data Sharing and Governance Act 2019.
Can a regulator impose a fine directly?
Not on its own. Part 6 routes fines through an adjudicator, and section 114 provides that an adjudication takes effect when confirmed by the High Court. Appeals against adjudication run under Chapter 7, including to the Court of Appeal.
How are financial firms treated?
Separately. Part 8 applies the Act to the Central Bank of Ireland, amends the Central Bank Act 1942 including section 33AK and Schedule 2, and provides for administrative fines that may be imposed by the Central Bank.
Which two bodies are affected by the uncommenced carve-out?
Coimisiun na Mean and the Data Protection Commission. The paragraphs that would bring them within the applicable market surveillance authority definition in section 78 are the pieces held back.
Related briefings
Sponsored Training
Practical AI training for regulated professionals, built around verification, documentation and a defensible process. See the courses.