--- title: "Netherlands — Global AI Monitor" canonical: https://artificial-intelligence.gi/jurisdictions/netherlands/ source_html: /jurisdictions/netherlands/index.html description: "Netherlands AI governance record: 7 instruments, 2 obligations and 33 evidenced claims across 12 modules. Research as of 11 Nov 2026." generated_at: 2026-11-12T17:20:02Z content_sha256: e925ff5febc6a180f651db4c20db065eee4cdd50c085c3c3944ae11e58c975f1 generator: "fe-fleet/md-twin@1.0" --- # Netherlands AI Regulation & Governance 12 active modules 0 quiet Last updated 11 Nov 2026 · 12 modules · 7 instruments · 33 claims · 33 sources in the cumulative register Download report (PDF) Collapse all Framework status Artificial Intelligence Act (In force since 2024-08-01). Main regulator Regulator Next milestone No upcoming dated milestone recorded Record status Live · Periodic active record · 33 sources (26 retrieved) · 0 under review · Not yet expert-reviewed ✦ AI-assembled from cited sources Evidence-gated · [How we verify](/methodology/#ai-content-disclosure) · Disclosure Not yet expert-reviewed · Not legal, compliance or investment advice. Facts are machine-assembled from cited public sources. Individual claims have not each been independently verified by a human reviewer. See [methodology](/methodology/). Source tiers: T1 enacted statute, regulation, or binding supervisory order · T2 official regulator guidance, consultation, or registry · T3 international standard-setter or peer-reviewed analysis · T4 practitioner commentary or secondary reporting. Confidence: high = corroborated by retrieved T1/T2 text · medium = single official source or secondary corroboration · low = preliminary or unverified. [Full definitions →](/methodology/#source-tiers) Research checked 11 Nov 2026 · Updated 11 Nov 2026 Record history Research as of 11 Nov 2026 · Record last changed 11 Nov 2026 · Published 11 Nov 2026 · Page built 12 Nov 2026 7 Instruments 7 Current instruments 2 Binding, in force +3 more binding, in-force date not recorded 2 Obligations 33 Claims 0 Upcoming milestones 33 Sources Jump to module (12) ### 01AI Framework LawActive▾# Artificial Intelligence Act (In force since 2024-08-01). 4 instruments (4 current) · 0 obligations · 5 claims · 0 milestones The EU Artificial Intelligence Act, Regulation (EU) 2024/1689, is a directly applicable regulation that entered into force on 1 August 2024, taking direct effect in the Netherlands as an EU Member State, with staged application through 2 August 2026. The Digital Omnibus on AI, Regulation (EU) 2026/1744, entered into force on 27 July 2026, following publication in the Official Journal on 24 July 2026, and amends the AI Act's application timetable. Under that amendment, the AI Act's Annex III high-risk-system obligations are deferred to 2 December 2027 and its Annex I obligations to 2 August 2028. Reporting on the restructuring indicates that the AI Act's application is now phased by chapter, keyed to those Annex III and Annex I dates. Implementing the Regulation domestically, the Dutch Uitvoeringswet AI-verordening was opened for public internet consultation on 20 April 2026 and remains at the advisory stage before the Raad van State, not yet introduced to the Tweede Kamer. Instruments (4) - Artificial Intelligence Act In force since 2024-08-01Binding - Digital Omnibus on AI In force since 2026-07-27Binding - Digital Omnibus on AI (amending EU AI Act) Valid from 2026-07-27Binding - Uitvoeringswet AI-verordening Draft, no legal force Claims and evidence (5) - The EU AI Act (Regulation (EU) 2024/1689) is a directly applicable regulation entered into force 1 August 2024, with staged application through 2 August 2026.Confidence: Probable · As of 12 Jul 2024 · EvidencedEvidence and sources[Official Journal of the European Union / EUR-Lex](https://eur-lex.europa.eu/eli/reg/2024/1689/oj/eng) T1 · Surfaced · retrieved 4 Nov 2026This Regulation should apply from 2 August 2026. - The AI Act's application is phased by chapter, as restructured by the Digital Omnibus, with high-risk system duties applying from 2 December 2027 (Annex III) or 2 August 2028 (Annex I).Confidence: Probable (capped: best source is T3) · As of 24 Jul 2026 · EvidencedEvidence and sources[ai-act-law.eu](https://ai-act-law.eu/article/113/) T3 · Retrieved · retrieved 4 Nov 2026(a)Chapters I and II shall apply from 2 February 2025, with the exception of Article 5(1), first subparagraph, points (ba) and (bb), and Article 5(1a) and (1b) which shall apply from 2 December 2026 - The Digital Omnibus on AI, Regulation (EU) 2026/1744, entered into force on 27 July 2026 after publication in the Official Journal on 24 July 2026.Confidence: Probable (capped: best source is T3) · As of 27 Jul 2026 · EvidencedEvidence and sources[White & Case](https://www.whitecase.com/insight-alert/eu-ai-omnibus-enters-force-amending-ai-act) T3 · Surfaced · retrieved 4 Nov 2026On 27 July 2026, the Digital Omnibus on AI (the "AI Omnibus") entered into force, following publication in the Official Journal of the EU on 24 July 2026 as Regulation (EU) 2026/1744. - The Dutch Uitvoeringswet AI-verordening, implementing the EU AI Act, was opened for public internet consultation on 20 April 2026 and remains at the advisory stage before the Council of State, not yet introduced to Parliament.Confidence: Probable · As of 20 Apr 2026 · EvidencedEvidence and sources[Autoriteit Persoonsgegevens](https://autoriteitpersoonsgegevens.nl/actueel/toezicht-op-ai-wordt-concreet-sleutelrol-voor-de-ap-en-de-rdi) T1 · Retrieved · retrieved 4 Nov 2026Staatssecretaris Aerdts (Digitale Economie en Soevereiniteit) heeft de Tweede Kamer hierover geïnformeerd en de uitvoeringswet AI-verordening maandag 20 april 2026 in internetconsultatie gebracht. - The AI Omnibus (Regulation (EU) 2026/1744) entered into force on 27 July 2026 and defers the AI Act's Annex III high-risk obligations to 2 December 2027 and Annex I obligations to 2 August 2028.Confidence: Confirmed · As of 27 Jul 2026 · EvidencedEvidence and sources[European Commission](https://digital-strategy.ec.europa.eu/en/news/ai-omnibus-enters-force) T1 · Retrieved · retrieved 10 Nov 2026On 27 July 2026, the AI Omnibus enters into force across the EU ### 02Prohibited PracticesActive▾# Artificial Intelligence Act (In force since 2024-08-01). 2 instruments (2 current) · 1 obligation · 5 claims · 0 milestones Article 5(1) of Regulation (EU) 2024/1689, in force since 2 February 2025, prohibits a defined list of AI practices, including subliminal manipulation, social scoring, and real-time remote biometric identification in public spaces. Breach of this prohibition carries a maximum administrative fine of EUR 35,000,000 or 7% of worldwide annual turnover, whichever is higher (CLM-NL-e1f2a311; CLM-NL-f00c208f). The Digital Omnibus on AI, Regulation (EU) 2026/1744, adds new prohibitions covering the generation of non-consensual intimate imagery and CSAM-category material, applying from 2 December 2026. Under the draft Dutch Uitvoeringswet AI-verordening, article 2.2(1)(b) would designate the Autoriteit Persoonsgegevens, the Autoriteit Financiële Markten and De Nederlandsche Bank as market-surveillance authorities for AI Act Chapter II, covering prohibited practices, though this designation is not yet in force. Instruments (2) - Artificial Intelligence Act In force since 2024-08-01Binding - Digital Omnibus on AI In force since 2026-07-27Binding Obligations - Art 5(1)Prohibits manipulative, exploitative, social-scoring and biometric surveillance AI practices.Prohibition · Applies to: Provider · Artificial Intelligence Act Claims and evidence (5) - Draft article 2.2(1)(b) of the Dutch implementing bill would designate the AP, AFM and DNB as market-surveillance authorities for AI Act Chapter II (prohibited practices).Confidence: Probable · As of 8 Jul 2026 · EvidencedEvidence and sources[Raad van State (Council of State, NL)](https://www.raadvanstate.nl/publicaties/consultaties/wetsvoorstel-uitvoeringswet-ai/) T1 · Retrieved · retrieved 4 Nov 2026In article 2.2, first paragraph, under b, of the draft bill the Dutch Data Protection Authority, the Netherlands Authority for the Financial Markets and De Nederlandsche Bank are designated as market surveillance authorities for Chapter II of the AI Regulation: prohibited AI practices. - Article 5(1) of the AI Act prohibits a defined list of AI practices including subliminal manipulation, social scoring, and real-time remote biometric identification in public spaces, in force since 2 February 2025.Confidence: Probable · As of 2 Feb 2025 · EvidencedEvidence and sources[Bundesnetzagentur](https://www.bundesnetzagentur.de/EN/Areas/Digitalisation/AI/08_ProhibitedPractices/start.html) T1 · Retrieved · retrieved 4 Nov 2026Article 5 of the AI Act prohibits the placing on the market, putting into service or use of certain AI systems for manipulative, exploitative and social control or surveillance practices that inherently violate fundamental rights and Union values. - The Digital Omnibus on AI adds new prohibitions on generating non-consensual intimate imagery and CSAM-category material, applying from 2 December 2026.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[complylayer.com](https://complylayer.com/guides/eu-ai-act-prohibited-practices-article-5) T3 · Retrieved · retrieved 4 Nov 2026The Digital Omnibus adds a ninth ban from 2 December 2026 on AI that generates non-consensual intimate imagery or child sexual abuse material. - Breach of the Article 5 prohibited-practices prohibition carries fines of up to EUR 35,000,000 or 7% of global turnover, whichever is higher.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[solidwaretools.com (AICheck)](https://solidwaretools.com/aicheck/ai-act-penalties-fines-35-million-7-percent.html) T3 · Surfaced · retrieved 4 Nov 2026Non-compliance with the prohibition of the AI practices referred to in Article 5 shall be subject to administrative fines of up to €35,000,000 or, if the offender is an undertaking, up to 7% of total worldwide annual turnover for the preceding financial year — whichever is higher. - Breach of the EU AI Act's Article 5 prohibited practices carries a maximum administrative fine of EUR 35,000,000 or 7% of worldwide annual turnover, whichever is higher.Confidence: Probable (capped: best source is T3) · As of 1 Jan 2026 · EvidencedEvidence and sources[euai.app](https://euai.app/article/99) T3 · Retrieved · retrieved 10 Nov 2026Non-compliance with the prohibition of the AI practices referred to in Article 5 shall be subject to administrative fines ### 03High-Risk SystemsActive▾# Artificial Intelligence Act (In force since 2024-08-01). 2 instruments (2 current) · 0 obligations · 3 claims · 0 milestones Providers of high-risk AI systems under Regulation (EU) 2024/1689 must complete conformity assessment, maintain technical documentation and logging, issue a declaration of conformity, affix CE marking, and register the system before placing it on the market. Following the Digital Omnibus's deferral of the AI Act's timetable, AI systems within the Annex III use-case areas become presumptively high-risk from 2 December 2027, subject to the Article 6(3) derogation for systems performing narrow, procedural tasks that do not materially influence the outcome of decision-making. The Autoriteit Persoonsgegevens is proposed, though not yet formally designated, as the lead market-surveillance authority for most Annex III high-risk systems, pending adoption of the draft Uitvoeringswet AI-verordening. Instruments (2) - Artificial Intelligence Act In force since 2024-08-01Binding - Digital Omnibus on AI In force since 2026-07-27Binding Claims and evidence (3) - AI systems within Annex III use-case areas are presumptively high-risk from 2 December 2027, subject to the Article 6(3) derogation for narrow, non-decision-influencing tasks.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[Common Lawyer (Substack)](https://commonlawyer.substack.com/p/an-ai-act-article-a-day-6-the-high) T3 · Surfaced · retrieved 4 Nov 2026By derogation from paragraph 2, an AI system referred to in Annex III shall not be considered to be high-risk where it does not pose a significant risk of harm to the health, safety or fundamental rights of natural persons, including by not materially influencing the outcome of decision making. - Providers of high-risk AI systems under the AI Act must complete conformity assessment, documentation, logging, declaration of conformity, CE marking and registration before placing the system on the market.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[activeMind.legal](https://www.activemind.legal/legislation/ai-act/article-16/) T3 · Retrieved · retrieved 4 Nov 2026ensure that the high-risk AI system undergoes the relevant conformity assessment procedure as referred to in Article 43, prior to its being placed on the market or put into service - The Netherlands' Autoriteit Persoonsgegevens is proposed as the lead market surveillance authority for AI Act prohibited practices and most Annex III high-risk systems, pending the draft Uitvoeringswet AI-verordening.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[Loyens & Loeff](https://www.loyensloeff.com/insights/news--events/news/dutch-implementation-of-the-ai-act-decentralised-ai-supervision/) T3 · Retrieved · retrieved 10 Nov 2026The AP is designated as the market surveillance authority for prohibited AI practices ### 04General-Purpose AIActive▾# Artificial Intelligence Act (In force since 2024-08-01). 1 instrument (1 current) · 1 obligation · 2 claims · 0 milestones Under Article 53(1)(a)-(d) of Regulation (EU) 2024/1689, providers of general-purpose AI models must maintain technical documentation, supply information to downstream providers, operate a copyright-compliance policy, and publish a summary of training content; this obligation has applied since 2 August 2025. A general-purpose AI model is presumed, under the rebuttable presumption in Article 51, to carry systemic risk where its cumulative training compute exceeds 10^25 floating-point operations. Instruments (1) - Artificial Intelligence Act In force since 2024-08-01Binding Obligations - Art 53(1)(a)-(d)GPAI providers must maintain technical documentation, supply downstream info, operate a copyright policy, and publish a training-content summary.Transparency disclosure · Applies to: Provider · Artificial Intelligence Act Claims and evidence (2) - Providers of general-purpose AI models must maintain technical documentation, supply information to downstream providers, operate a copyright-compliance policy, and publish a training-content summary, in force since 2 August 2025.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[regulatoryai.eu](https://www.regulatoryai.eu/article-53-explained/) T3 · Retrieved · retrieved 4 Nov 2026Every provider of a general-purpose AI model carries four duties under Article 53: keep technical documentation, hand downstream developers the information they need, run a copyright policy that honours the opt-out, and publish a public training-content summary. - A GPAI model is presumed to carry systemic risk where cumulative training compute exceeds 10^25 FLOPs, a rebuttable presumption under Article 51.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[regulation-ai.eu](https://www.regulation-ai.eu/en/articles/article-51/) T3 · Retrieved · retrieved 4 Nov 2026Any provider whose model reaches or exceeds the 10^25 FLOPs training-compute threshold must treat that model as presumptively carrying systemic risk and begin preparing for compliance with the Article 55 obligation regime, unless it successfully rebuts the presumption with the Commission. ### 05Transparency & Synthetic ContentActive▾# Artificial Intelligence Act (In force since 2024-08-01). 1 instrument (1 current) · 0 obligations · 1 claim · 0 milestones Since 2 August 2026, Regulation (EU) 2024/1689 has required disclosure of AI interaction to natural persons, machine-readable marking of synthetic content, disclosure of the use of emotion-recognition or biometric-categorisation systems, and disclosure of deepfakes and of AI-generated text published on matters of public interest, subject to exceptions for artistic and editorial works. Instruments (1) - Artificial Intelligence Act In force since 2024-08-01Binding Claims and evidence (1) - From 2 August 2026, the AI Act requires disclosure of AI interaction, machine-readable marking of synthetic content, disclosure of emotion-recognition or biometric-categorisation use, and disclosure of deepfakes and AI-generated public-interest text, subject to artistic and editorial exceptions.Confidence: Confirmed · EvidencedEvidence and sources[European Commission AI Office (AI Act Explorer)](https://ai-act-service-desk.ec.europa.eu/en/ai-act/article-50) T1 · Retrieved · retrieved 4 Nov 2026Where the content forms part of an evidently artistic, creative, satirical, fictional or analogous work or programme, the transparency obligations set out in this paragraph are limited to disclosure of the existence of such generated or manipulated content in an appropriate manner that does not hamper the display or enjoyment of the work. ### 06AI & Intellectual PropertyActive▾# Auteurswet (Dutch Copyright Act) (Valid from 2021-06-07). 1 instrument (1 current) · 0 obligations · 1 claim · 0 milestones Under article 15o of the Auteurswet (Dutch Copyright Act), in force since 7 June 2021, a reproduction made for text-and-data mining -- covering the training of AI models -- is not an infringement of copyright where the person carrying out the mining has lawful access to the work and the rightholder has not expressly reserved that right. Instruments (1) - Auteurswet (Dutch Copyright Act) Valid from 2021-06-07Binding Claims and evidence (1) - Under article 15o of the Dutch Copyright Act, a text-and-data-mining reproduction (covering AI model training) is not copyright infringement where the person has lawful access and the rightholder has not expressly reserved the right.Confidence: Probable · As of 7 Jun 2021 · EvidencedEvidence and sources[Boek9.nl](https://www.boek9.nl/wetteksten/auteurswet/artikel-15o) T2 · Retrieved · retrieved 4 Nov 2026Without prejudice to article 15n, a reproduction for text and data mining is not considered copyright infringement provided the person performing the mining has lawful access to the work and the copyright has not been expressly and appropriately reserved by the author or rightholders, such as by machine-readable means for a work made available online. ### 07Sectoral & Public-Sector AIActive▾# Wet op de ondernemingsraden (WOR) (Date not recorded). 1 instrument (1 current) · 0 obligations · 3 claims · 0 milestones Under the Wet op de ondernemingsraden (Dutch Works Councils Act), an employer that deploys an AI system processing employee personal data, or monitoring attendance, behaviour or performance, requires the works council's consent; a decision taken without that consent is voidable within one month of a nullity invocation by the works council. The Dutch national Algoritmeregister requires government organisations to describe impactful algorithms, but as of October 2026 this remains a non-statutory requirement even for the public sector. The Autoriteit Persoonsgegevens is proposed, though not yet formally designated, as the lead market-surveillance authority for AI Act prohibited practices and most Annex III high-risk systems relevant to public-sector deployment, pending the draft Uitvoeringswet AI-verordening. Instruments (1) - Wet op de ondernemingsraden (WOR) Date not recordedBinding Claims and evidence (3) - Under the Dutch Works Councils Act, an employer deploying an AI system that processes employee personal data or monitors attendance, behaviour or performance needs the works council's consent, and an uncontested decision is voidable within one month of a nullity invocation.Confidence: Probable (capped: best source is T3) · As of 14 Oct 2026 · EvidencedEvidence and sources[Law & More](https://lawandmore.nl/hoe-beinvloedt-ai-en-automatisering-het-nederlandse-arbeidsrecht/) T3 · Retrieved · retrieved 4 Nov 2026Voor veel AI-toepassingen heeft de ondernemingsraad instemmingsrecht; zonder instemming is het besluit vernietigbaar als de OR zich daarop binnen een maand beroept (artikel 27 lid 5 WOR). - The Dutch national Algoritmeregister requires government organisations to describe impactful algorithms, but is not yet a statutory requirement even for the public sector as of October 2026.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[Opsio Cloud](https://opsiocloud.com/nl/knowledge-base/ai-verordening-nederland-toezicht/) T3 · Retrieved · retrieved 4 Nov 2026Het Algoritmeregister is bedoeld voor overheidsorganisaties en is per oktober 2026 nog niet wettelijk verplicht. - The Netherlands' Autoriteit Persoonsgegevens is proposed as the lead market surveillance authority for AI Act prohibited practices and most Annex III high-risk systems, pending the draft Uitvoeringswet AI-verordening.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[Loyens & Loeff](https://www.loyensloeff.com/insights/news--events/news/dutch-implementation-of-the-ai-act-decentralised-ai-supervision/) T3 · Retrieved · retrieved 10 Nov 2026The AP is designated as the market surveillance authority for prohibited AI practices ### 08Safety & Incident ReportingActive▾# Artificial Intelligence Act (In force since 2024-08-01). 1 instrument (1 current) · 0 obligations · 3 claims · 0 milestones Providers of high-risk AI systems under Regulation (EU) 2024/1689 must complete conformity assessment, documentation, logging, declaration of conformity, CE marking and registration before placing the system on the market. A provider of a high-risk AI system must report a serious incident to the relevant national market-surveillance authority not later than 15 days after becoming aware of it. Where the serious incident involves a widespread infringement or a disruption of critical infrastructure, the reporting deadline shortens to not later than two days after the provider becomes aware. Instruments (1) - Artificial Intelligence Act In force since 2024-08-01Binding Claims and evidence (3) - Providers of high-risk AI systems under the AI Act must complete conformity assessment, documentation, logging, declaration of conformity, CE marking and registration before placing the system on the market.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[activeMind.legal](https://www.activemind.legal/legislation/ai-act/article-16/) T3 · Retrieved · retrieved 4 Nov 2026ensure that the high-risk AI system undergoes the relevant conformity assessment procedure as referred to in Article 43, prior to its being placed on the market or put into service - A provider of a high-risk AI system must report a serious incident to the relevant national market-surveillance authority not later than 15 days after becoming aware of it.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[govern365.ai](https://govern365.ai/blogs/ai-policies-incident-response/) T3 · Retrieved · retrieved 4 Nov 2026The report “shall be made immediately after the provider has established a causal link between the AI system and the serious incident or the reasonable likelihood of such a link, and, in any event, not later than 15 days after the provider or, where applicable, the deployer, becomes aware of the serious incident”. - For a serious incident involving a widespread infringement or critical-infrastructure disruption, providers must report not later than two days after becoming aware.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[govern365.ai](https://govern365.ai/blogs/ai-policies-incident-response/) T3 · Retrieved · retrieved 4 Nov 2026The report “shall be made immediately after the provider has established a causal link between the AI system and the serious incident or the reasonable likelihood of such a link, and, in any event, not later than 15 days after the provider or, where applicable, the deployer, becomes aware of the serious incident”. ### 09Standards & ConformityActive▾# Artificial Intelligence Act (In force since 2024-08-01). 1 instrument (1 current) · 0 obligations · 2 claims · 0 milestones High-risk AI systems under Regulation (EU) 2024/1689 follow the Annex VI internal-control conformity assessment procedure by default, unless they are product-linked systems eligible for sectoral third-party conformity assessment procedures. Compliance with published harmonised standards gives high-risk AI system providers a presumption of conformity with the requirements that those standards cover. Instruments (1) - Artificial Intelligence Act In force since 2024-08-01Binding Claims and evidence (2) - Compliance with published harmonised standards gives high-risk AI system providers a presumption of conformity with the requirements those standards cover.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[regulation-ai.eu](https://www.regulation-ai.eu/en/academy/ai-act-provider/module-4/) T3 · Retrieved · retrieved 4 Nov 202640 gives a presumption of conformity with the requirements it covers — which is the cheapest compliance route available. - High-risk AI systems follow Annex VI internal-control conformity assessment by default, unless they are product-linked systems eligible for sectoral third-party procedures.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[arXiv preprint](https://arxiv.org/pdf/2607.28023) T3 · Retrieved · retrieved 4 Nov 2026Article 43 of Regulation (EU) 2024/1689 specifies conformity-assessment routes for high-risk systems; Annex VI sets out internal control, while product-linked systems may follow sectoral third-party procedures. ### 10Authorities & EnforcementActive▾# AP directie Toezicht en Coördinatie AI/Algoritmes (TCA) (In force since 2026-10-08). 4 instruments (4 current) · 0 obligations · 12 claims · 0 milestones Breach of the AI Act's Article 5 prohibited-practices provision carries a maximum administrative fine of EUR 35,000,000 or 7% of worldwide annual turnover, whichever is higher (CLM-NL-e1f2a311; CLM-NL-f00c208f). Article 99(6) of the AI Act, as amended by the Digital Omnibus, gives small and medium-sized enterprises, start-ups and small mid-caps a proportionality adjustment that reduces the applicable penalty ceiling relative to their own turnover (CLM-NL-5bae9927; CLM-NL-817d9b19). In an enforcement action dated 12 November 2024, the Autoriteit Persoonsgegevens found that DUO's decade-long risk-profiling algorithm used for student-grant fraud detection indirectly discriminated against students with a migration background. On 8 October 2026 the Autoriteit Persoonsgegevens established a new directorate, Toezicht en Coördinatie AI/Algoritmes (TCA), succeeding its former Directie Coördinatie Algoritmes. The Autoriteit Persoonsgegevens is the intended AI Act market-surveillance authority alongside the Rijksinspectie Digitale Infrastructuur, but it has not yet been formally designated because the Dutch implementing act remains in preparation (CLM-NL-008c752d; CLM-NL-8cf9d0d2). The Dutch Uitvoeringswet AI-verordening, which would complete that designation, was opened for public internet consultation on 20 April 2026 and remains at the advisory stage before the Raad van State, not yet introduced to the Tweede Kamer. The consultation itself closed on 1 June 2026, and the bill has not yet been submitted to the Tweede Kamer. Draft article 2.2(1)(b) of that bill would designate the Autoriteit Persoonsgegevens, the Autoriteit Financiële Markten and De Nederlandsche Bank as market-surveillance authorities for AI Act Chapter II, covering prohibited practices, and the Autoriteit Persoonsgegevens is further proposed as lead market-surveillance authority for most Annex III high-risk systems, pending that same bill. Instruments (4) - AP directie Toezicht en Coördinatie AI/Algoritmes (TCA) In force since 2026-10-08Legal force not established - Artificial Intelligence Act In force since 2024-08-01Binding - Digital Omnibus on AI In force since 2026-07-27Binding - Uitvoeringswet AI-verordening Draft, no legal force Claims and evidence (12) - The Dutch Uitvoeringswet AI-verordening consultation closed on 1 June 2026 and the bill has not yet been submitted to the Tweede Kamer.Confidence: Probable (capped: best source is T3) · As of 27 Oct 2026 · EvidencedEvidence and sources[Praxikon](https://www.praxikon.com/nl/enforcement/nederland) T3 · Retrieved · retrieved 4 Nov 2026The Netherlands missed the 2 August 2025 deadline for formal designation. - The Autoriteit Persoonsgegevens is the intended AI Act market-surveillance authority alongside the RDI but has not yet been formally designated because the Dutch implementing act is still in preparation.Confidence: Probable · As of 27 Oct 2026 · EvidencedEvidence and sources[Autoriteit Persoonsgegevens](https://www.autoriteitpersoonsgegevens.nl/actueel/ap-zet-volgende-stap-in-toezicht-op-ai) T1 · Retrieved · retrieved 4 Nov 2026De AP is beoogd markttoezichthouder op AI, maar nog niet aangewezen - Draft article 2.2(1)(b) of the Dutch implementing bill would designate the AP, AFM and DNB as market-surveillance authorities for AI Act Chapter II (prohibited practices).Confidence: Probable · As of 8 Jul 2026 · EvidencedEvidence and sources[Raad van State (Council of State, NL)](https://www.raadvanstate.nl/publicaties/consultaties/wetsvoorstel-uitvoeringswet-ai/) T1 · Retrieved · retrieved 4 Nov 2026In article 2.2, first paragraph, under b, of the draft bill the Dutch Data Protection Authority, the Netherlands Authority for the Financial Markets and De Nederlandsche Bank are designated as market surveillance authorities for Chapter II of the AI Regulation: prohibited AI practices. - Breach of the Article 5 prohibited-practices prohibition carries fines of up to EUR 35,000,000 or 7% of global turnover, whichever is higher.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[solidwaretools.com (AICheck)](https://solidwaretools.com/aicheck/ai-act-penalties-fines-35-million-7-percent.html) T3 · Surfaced · retrieved 4 Nov 2026Non-compliance with the prohibition of the AI practices referred to in Article 5 shall be subject to administrative fines of up to €35,000,000 or, if the offender is an undertaking, up to 7% of total worldwide annual turnover for the preceding financial year — whichever is higher. - On 12 November 2024 the Autoriteit Persoonsgegevens found that DUO's decade-long risk-profiling algorithm for student-grant fraud detection indirectly discriminated against students with a migration background.Confidence: Probable · As of 12 Nov 2024 · EvidencedEvidence and sources[Computable](https://www.computable.nl/2024/11/12/ap-verwijt-duo-discriminatie-bij-gebruik-algoritme/) T2 · Retrieved · retrieved 4 Nov 2026De manier waarop de Dienst Uitvoering Onderwijs (DUO) een algoritme gebruikte, was discriminerend - SMEs, start-ups and small mid-caps face reduced AI Act penalty ceilings under Article 99(6) as amended by the Digital Omnibus.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[vdf.ai](https://vdf.ai/blog/eu-ai-act-fines-penalties/) T3 · Retrieved · retrieved 4 Nov 2026Small mid-cap (< 750 staff, ≤ €150 m turnover or ≤ €129 m balance sheet) | Higher of €35 m / 7% | Lower of €15 m / 3% | Lower of €7.5 m / 1% - The Autoriteit Persoonsgegevens is the proposed but not yet formally designated Dutch market-surveillance authority for AI Act prohibited practices and most high-risk uses lacking a sector regulator.Confidence: Probable · As of 27 Oct 2026 · EvidencedEvidence and sources[Autoriteit Persoonsgegevens](https://www.autoriteitpersoonsgegevens.nl/actueel/ap-zet-volgende-stap-in-toezicht-op-ai) T1 · Retrieved · retrieved 4 Nov 2026De AP is beoogd markttoezichthouder op AI, maar nog niet aangewezen - On 8 October 2026 the Dutch Data Protection Authority established a new directorate, Toezicht en Coördinatie AI/Algoritmes, succeeding its former Directie Coördinatie Algoritmes.Confidence: Probable · As of 8 Oct 2026 · EvidencedEvidence and sources[Autoriteit Persoonsgegevens](https://www.autoriteitpersoonsgegevens.nl/documenten/toezicht-en-coordinatie-ai-en-algoritmes) T1 · Retrieved · retrieved 4 Nov 2026Per 8 oktober 2026 is binnen de Autoriteit Persoonsgegevens (AP) de directie Toezicht en Coördinatie AI/Algoritmes (TCA) van start gegaan, als opvolging van de directie Coördinatie Algoritmes (DCA). - The Dutch Uitvoeringswet AI-verordening, implementing the EU AI Act, was opened for public internet consultation on 20 April 2026 and remains at the advisory stage before the Council of State, not yet introduced to Parliament.Confidence: Probable · As of 20 Apr 2026 · EvidencedEvidence and sources[Autoriteit Persoonsgegevens](https://autoriteitpersoonsgegevens.nl/actueel/toezicht-op-ai-wordt-concreet-sleutelrol-voor-de-ap-en-de-rdi) T1 · Retrieved · retrieved 4 Nov 2026Staatssecretaris Aerdts (Digitale Economie en Soevereiniteit) heeft de Tweede Kamer hierover geïnformeerd en de uitvoeringswet AI-verordening maandag 20 april 2026 in internetconsultatie gebracht. - Breach of the EU AI Act's Article 5 prohibited practices carries a maximum administrative fine of EUR 35,000,000 or 7% of worldwide annual turnover, whichever is higher.Confidence: Probable (capped: best source is T3) · As of 1 Jan 2026 · EvidencedEvidence and sources[euai.app](https://euai.app/article/99) T3 · Retrieved · retrieved 10 Nov 2026Non-compliance with the prohibition of the AI practices referred to in Article 5 shall be subject to administrative fines - Article 99(6) of the EU AI Act gives SMEs and start-ups a proportionality adjustment on fines, capping the applicable penalty relative to their own turnover.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[Lexara Advisory](https://lexaraadvisory.com/blog/eu-ai-act-penalties-non-compliance.html) T3 · Surfaced · retrieved 10 Nov 2026Article 99(6) provides a proportionality adjustment for small and medium-sized enterprises, including startups - The Netherlands' Autoriteit Persoonsgegevens is proposed as the lead market surveillance authority for AI Act prohibited practices and most Annex III high-risk systems, pending the draft Uitvoeringswet AI-verordening.Confidence: Probable (capped: best source is T3) · EvidencedEvidence and sources[Loyens & Loeff](https://www.loyensloeff.com/insights/news--events/news/dutch-implementation-of-the-ai-act-decentralised-ai-supervision/) T3 · Retrieved · retrieved 10 Nov 2026The AP is designated as the market surveillance authority for prohibited AI practices ### 11Sandboxes & Transitional ReliefActive▾# Digital Omnibus on AI (amending EU AI Act) (Valid from 2026-07-27). 2 instruments (2 current) · 0 obligations · 3 claims · 0 milestones The Digital Omnibus on AI, Regulation (EU) 2026/1744, entered into force on 27 July 2026 and defers the AI Act's Annex III high-risk obligations to 2 December 2027 and its Annex I obligations to 2 August 2028. Separately, the Dutch government has been developing an AI Compute Plan during the first half of 2026 and is considering a national AI regulatory sandbox, neither of which was operational as. The draft Uitvoeringswet AI-verordening would require the Netherlands' market-surveillance authorities, with the Rijksinspectie Digitale Infrastructuur facilitating, to jointly establish an AI regulatory sandbox under Articles 57-63 of the AI Act, though the bill has not yet been enacted. Instruments (2) - Digital Omnibus on AI (amending EU AI Act) Valid from 2026-07-27Binding - Uitvoeringswet AI-verordening Draft, no legal force Claims and evidence (3) - The Dutch government is developing an AI Compute Plan in the first half of 2026 and is considering a national AI regulatory sandbox, neither of which was operational as at this cycle.Confidence: Probable (capped: best source is T3) · As of 7 Jul 2026 · EvidencedEvidence and sources[AIC4NL / National AI Delta Plan](https://aiplan.nl/deltaplan_en.pdf) T3 · Retrieved · retrieved 4 Nov 2026Develop an AI Compute Plan in the first half of 2026. - The draft Dutch Uitvoeringswet AI-verordening would require NL market surveillance authorities, with RDI facilitating, to jointly establish an AI regulatory sandbox under Articles 57-63 of the AI Act.Confidence: Probable · EvidencedEvidence and sources[Internetconsultatie.nl (Dutch government consultation portal)](https://www.internetconsultatie.nl/uaiv/document/15486) T1 · Retrieved · retrieved 4 Nov 2026De markttoezichtautoriteiten dragen gezamenlijk zorg voor het opzetten van een AI-testomgeving voor regelgeving. - The AI Omnibus (Regulation (EU) 2026/1744) entered into force on 27 July 2026 and defers the AI Act's Annex III high-risk obligations to 2 December 2027 and Annex I obligations to 2 August 2028.Confidence: Confirmed · As of 27 Jul 2026 · EvidencedEvidence and sources[European Commission](https://digital-strategy.ec.europa.eu/en/news/ai-omnibus-enters-force) T1 · Retrieved · retrieved 10 Nov 2026On 27 July 2026, the AI Omnibus enters into force across the EU ### 12Commercial ActivityActive▾# ASML announced in September 2025 that it would lead Mistral AI's Series C funding round, investing EUR 1.3 billion. 0 instruments (0 current) · 0 obligations · 1 claim · 0 milestones In September 2025, ASML announced that it would lead Mistral AI's Series C funding round, investing EUR 1.3 billion. Claims and evidence (1) - ASML announced in September 2025 that it would lead Mistral AI's Series C funding round, investing EUR 1.3 billion.Confidence: Probable · As of 9 Sep 2025 · EvidencedEvidence and sources[ASML Holding N.V.](https://www.asml.com/news/press-releases/2025/asml-mistral-ai-enter-strategic-partnership) T1 · Surfaced · retrieved 4 Nov 2026ASML to lead Mistral AI's Series C funding round investing €1.3 billion. No modules match. Filters combine as OR inside a group and AND across groups. Reset all filters ## Authorities Authority Type [Autoriteit Persoonsgegevens](https://www.autoriteitpersoonsgegevens.nl) Data protection authority Rijksinspectie Digitale Infrastructuur Market surveillance ## Enforcement actions No enforcement actions recorded in this research. ## Cases No cases recorded in this research. ## Consultations Consultation Status Opened Closes [Uitvoeringswet AI-verordening internet consultation](https://www.internetconsultatie.nl/uaiv/b1) Closed 20 Apr 2026 1 Jun 2026 What this record does not yet establish is set out on the [transparency register](/gaps/#gap-nl); its dated events are on the [regulatory calendar](/calendar/?jid=NL). Think something on this page is wrong? [Report an error](/legal/#contact). Technical provenance (record schema, run ID & build metadata) Schema version artificial-intelligence-record-v2.12 Research run ID aic-union-NL-2026-11-04 Page model module-card-page-v1 Renderer render_jid_aic_v13 Build date 12 Nov 2026