A government memorandum, released on March 12, 2026, proposes the nomination of national authorities responsible for enforcing Regulation (EU) 2024/1689 on artificial intelligence, as well as the establishment of a single national contact point. The document is based on the obligation of Member States to designate at least one notifying authority and at least one market surveillance authority, obligations for which the deadline expired on August 2, 2025.

The proposed mechanism focuses on the National Authority for Administration and Regulation in Communications, which would be designated both as the market supervisory authority and as the single point of contact for the AI Regulation. For the financial sector, the Government proposes a sector-specific solution: the Financial Supervisory Authority and the National Bank of Romania—market surveillance authorities for high-risk AI systems used by regulated financial institutions.

In sensitive areas related to biometrics, law enforcement, migration, asylum, border control, justice, and democratic processes, the document recommends that the National Supervisory Authority for Personal Data Processing be named as the market surveillance authority. In parallel, the Romanian Digitalization Authority is proposed as the notifying authority, responsible for the assessment, designation, notification, and monitoring of conformity assessment bodies.

The memorandum also includes an attachment with the proposed authorities responsible for market surveillance of high-risk AI systems related to the products specified in the Regulation. As follows:

• The Labor Inspectorate is proposed to be responsible for technical equipment, protective equipment and systems intended for use in potentially explosive atmospheres, and personal protective equipment;
• The National Agency for Medicines and Medical Devices would be responsible for medical devices and in vitro diagnostic medical devices;
• The State Inspection for the Control of Boilers, Pressure Vessels, and Lifting Equipment is designated for gas-fired appliances, cableway installations, pressure equipment, as well as for elevators and safety components for elevators;
• The National Authority for Consumer Protection is proposed for toy safety;
• ANCOM and ANPC would jointly exercise jurisdiction over the supervision of radio equipment;
• The Romanian Naval Authority is designated for recreational craft and personal watercraft.

At the same time, the memorandum stipulates that the work of the supervisory authorities would be supported by the National Cyber Security Directorate in areas related to cyber security, confidentiality, integrity, availability, and resilience.

Overall, the memorandum is intended to lay the groundwork for the future national legislation implementing the AI Act, through a hybrid model: a central coordinating authority, specialized sectoral authorities, and a separate notification authority. All these proposals outline Romania’s first institutional framework for the supervision of artificial intelligence.

Authors:
Ioana Chiper Zah
Tatiana Țapu