Record STMT-W3BB3ADLegally binding

Towards trustworthy AI in the EU public administration: The EDPS Compass for its new role under the AI Act 2026–2027

Strategy State lawEuropean Unionin force

This document outlines the European Data Protection Supervisor (EDPS) strategic compass for 2026–2027 in its new role as a market surveillance authority and notified body for AI systems used by European Union institutions, bodies, offices, and agencies under the EU AI Act. It details a cooperative, four-pillar approach covering supervision, regulatory coordination, institutional empowerment, and international engagement. The strategy aims to ensure that EUIs deploy trustworthy, human-centric AI solutions while balancing innovation and fundamental rights protection.

Summary and content fields are drawn from the document text and are pending editorial review.

Who issued it

European Data Protection SupervisorRegulator

Lead issuer

Legal forceLegally binding

Under whose authorityState law

Judged fromfull text

Who it governs

Public sector bodiesRegulatorsAI developers and providersAI deployers and usersResearchers and academics

This document is for EU institutions, bodies, agencies, and stakeholders seeking to understand how the EDPS will enforce and supervise compliance with the EU AI Act.

Sectors

Public administration · EU public administration

What the document contains

What's covered

The document addresses the strategic priorities, operational mechanisms, and regulatory responsibilities of the EDPS as a market surveillance authority and notified body under the EU AI Act for the years 2026–2027. It covers supervision procedures for high-risk AI systems in EU institutions, interinstitutional knowledge exchange, and international cooperation.

What's missing

The text does not contain detailed technical specifications for specific AI models, nor does it provide exhaustive sector-specific guidance for private commercial entities operating outside the EU public administration.

Key takeaways

The EDPS is designated as a market surveillance authority and notified body for AI systems used by EU institutions, bodies, offices, and agencies.
The 2026–2027 EDPS Compass is structured around four strategic pillars: supervision, regulatory coordination, institutional empowerment, and international engagement.
The EDPS adopts a collaborative and pro-innovation approach, featuring initiatives such as the AI Act Correspondents Network and a regulatory sandbox pilot.
A dedicated Trustworthy AI Centre of Excellence will be established to build internal technical expertise and monitoring capabilities.
The strategy emphasizes balancing technological innovation with strict adherence to fundamental rights, safety, and EU values.

Principles it states

ImpartialityIntegrityTransparencyPragmatism

Outline

· Foreword
· 1. The EDPS expanded mandate under the AI Act: vision and core values
· 2. Current context and state of AI technology in the EU public administration
· 3. The four pillars of the EDPS Compass for its new role under the AI Act
· 4. Conclusion

Issued17 March 2026

Length5,981 words · 18 pages

FormatNot recorded

Scoperegional

How it scores

Pending review

Each score is backed by a quote verified against the document text. Editorial review has not yet confirmed them.

Accountability

4/5

Clear responsibility for AI outcomes

develop operational procedures for the conformity assessment activities , also establishing a transparent procedure for decision -making and appeals, to ensure accountability and transparency of certification activities;

3.1.1. Ex ante supervision – notified (conformity assessment) body

screening score · 2026-10-24

Fairness

1/5

Non-discrimination and equitable treatment

Notified bodies must operate in a competent, non-discriminatory, transparent, neutral, independent and impartial manner.

3.1.1. Ex ante supervision – notified (conformity assessment) body

screening score · 2026-10-24

Human Dignity

3/5

Respect for the inherent worth of persons

Acknowledging that these systems can have harmful effects and an adverse impact on fundamental rights, the EU has adopted the AI Act with the objective to: “improve the functioning of the internal market and promote the uptake of human-centric and trustworthy artificial intelligence (AI), while ensuring a high level of protection of health, safety, fundamental rights enshrined in the Charter, including democracy, the rule of law and environmental protection, against the harmful effects of AI systems in the Union and supporting innovation”.

1. The EDPS expanded mandate under the AI Act: vision and core values

screening score · 2026-10-24

Human Oversight

1/5

Humans remain in control of consequential decisions

The EDPS will serve as an independent guardian of trustworthy AI in the EU p ublic administration, enabling European institutions, bodies, offices and agencies to develop and use compliant and human-centric AI solutions in line with the AI Act.

1.1. Our vision

screening score · 2026-10-24

Privacy

3/5

Protection of personal data and private life

The EDPS, in its role as data protection authority, has stood for the last 20 years at the forefront of ensuring the protection of personal data and privacy within the around 80 European Union institutions, bodies, offices and agencies (EUIs).

1. The EDPS expanded mandate under the AI Act: vision and core values

screening score · 2026-10-24

Transparency

4/5

Openness about how AI systems work and are used

The AI Act introduced a prohibition of certain unacceptable AI practices, established specific requirements for high -risk AI systems and put in place transparency obligations for certain AI systems.

1. The EDPS expanded mandate under the AI Act: vision and core values

screening score · 2026-10-24

Enforcement

4/5

Consequences and compliance mechanisms with real force

According to the Market Surveillance Regulation, MSAs are conferred a broad range of investigatory and enforcement powers, such as: the power to request relevant documents and data, to carry out unannounced on -site inspections and physical checks, to enter premises, to start investigations in order to identify non -compliance, to prohibit or restrict the making available of AI systems on the market or to order the withdrawal or recall of AI systems, to impose penalties.

3.1.2. Ex post supervision – market surveillance authority

screening score · 2026-10-24

Impact Assessment

4/5

Required assessment of an AI system's risks/impacts before or during use

the Council of Europe, including on the development of the methodology for the risk and impact assessment of artificial intelligence systems from the point of view of Human Rights, Democracy and the Rule of Law (HUDERIA methodology);

3.4. International engagement and exchange of best practices

screening score · 2026-10-24

Topics

ai_act market_surveillance public_administration regulatory_compliance trustworthy_ai