Skip to main content

    AI by country · Central and Eastern Europe

    AI in Poland: the rules, the readiness and where to start

    Last checked: 29 October 2026

    What should a company in Poland know before starting with AI?

    Poland applies the EU GDPR, its own Act of 10 May 2018 on personal data protection, and the EU AI Act. The Act of 3 July 2026 on artificial intelligence systems sets up a new national supervisor, KRiBSI, and parts of it apply from 28 October 2026. A company should map where its AI makes decisions about people, check whether any system is high-risk under the AI Act, and note the new national contact point.

    At a glance

    Poland at a glance

    Key facts about Poland
    Data protection lawEU GDPR (applies since 25 May 2018) and the Act of 10 May 2018 on personal data protection, in force
    RegulatorPresident of the Personal Data Protection Office (UODO) for data; KRiBSI for the AI Act
    AI policyEU AI Act plus the Act of 3 July 2026 on AI systems. A new AI policy to 2030 is a draft as of 29 October 2026
    Time zoneCET, UTC+1 in winter and UTC+2 in summer (India is 4.5 or 3.5 hours ahead)
    CurrencyPLN (Polish zloty)
    Business languagePolish, with English common in technology firms

    Why now

    Why Poland is worth watching

    Each point links to the document it comes from.

    • Eurostat reports that 8.36% of Polish enterprises with 10 or more staff used AI in 2025, against an EU average of 19.95%.[1]

    • The Act of 3 July 2026 on artificial intelligence systems was published as Dz.U. 2026 item 1003 and entered into force on 11 August 2026, with key parts applying from 28 October 2026.[7]

    • From 28 October 2026 a business can ask KRiBSI for a binding individual opinion on how the AI Act applies to it. The fee is PLN 150 and the answer is due within 30 days, or 60 in complex cases.[7]

    • The same act sets up AI regulatory sandboxes, and participation is at no charge for micro, small and medium-sized firms.[7]

    • The Ministry of Digital Affairs published a draft AI development policy to 2030 in April 2026. It aims to place Poland among the 10 to 20 most advanced AI countries in international rankings.[9]

    • PLLuM, a family of Polish language models built by Polish researchers with public funding, is open to public bodies, researchers and businesses.[10]

    The rules

    The rules that matter for AI

    What each law or policy means when you build or buy an AI system.

    General Data Protection Regulation (EU) 2016/679 and the Act of 10 May 2018 on personal data protection

    In force2018People have a right not to be subject to a decision based solely on automated processing that has legal or similarly significant effects, with exceptions for contracts, law and explicit consent (Article 22). High-risk processing with new technology needs a data protection impact assessment first (Article 35), and breaches go to the UODO within 72 hours where feasible (Article 33). Fines can reach EUR 20 million or 4% of worldwide turnover.[2]

    EU Artificial Intelligence Act, Regulation (EU) 2024/1689, as amended by Regulation (EU) 2026/1744

    Phased2024Bans on certain AI practices have applied since 2 February 2025 and rules for general-purpose AI models since 2 August 2025. Most other rules, including transparency duties, apply from 2 August 2026. The Digital Omnibus on AI, adopted and in force since 27 July 2026, moved high-risk rules to 2 December 2027 for Annex III uses such as hiring and credit, and to 2 August 2028 for AI in regulated products.[4]

    Act of 3 July 2026 on artificial intelligence systems (Dz.U. 2026 item 1003)

    Phased2026It names the Commission for the Development and Security of Artificial Intelligence (KRiBSI) as the market surveillance authority and single point of contact under the AI Act. The act entered into force on 11 August 2026, and the articles on individual opinions and several chapters apply from 28 October 2026. KRiBSI members include people nominated by the competition office, the financial supervisor, the broadcasting council and the telecoms regulator.[7]

    Where AI fits first

    Where AI fits first

    Banking and insurance

    Document checks, fraud alerts and customer service in Polish, with staff reviewing any refusal.

    Credit scoring is an Annex III high-risk use, with rules from 2 December 2027. The financial supervisor (KNF) nominates a member of KRiBSI.[7]

    Public administration

    Drafting replies and summarising case files in Polish.

    The Ministry of Digital Affairs is piloting the PLLuM models in local government, starting with Czestochowa in August 2025.[10]

    Manufacturing

    Visual quality inspection and predictive maintenance on production lines.

    AI built into products covered by EU product law, such as machinery, falls under high-risk rules from 2 August 2028.[4]

    Recruitment and HR

    Sorting applications and drafting job adverts, with a person making each hiring decision.

    AI used to recruit or select people is an Annex III high-risk use, with rules from 2 December 2027. GDPR Article 22 already applies today.[4]

    Your first steps

    Your first steps

    1. List every AI tool in use and note which ones make or shape decisions about people.
    2. Check each use against the AI Act bans and the Annex III high-risk list, and record the 2 December 2027 and 2 August 2028 dates in your plans.
    3. Run a data protection impact assessment before AI touches credit, hiring, health or monitoring of staff.
    4. Give staff basic AI training; the amended AI Act asks providers and deployers to support AI literacy.
    5. Label chatbots and AI-generated content where the AI Act transparency rules require it.
    6. If a rule is unclear, consider asking KRiBSI for an individual opinion, which is binding on public bodies for the facts you describe.
    7. Keep a breach process that can reach the UODO within 72 hours.

    AI services for Poland

    AI consulting and development for teams in Poland

    We work remotely with companies in Poland, in your time zone, and keep your data under the rules described above.

    AI agents and automation

    Agents that finish multi-step work across your tools, with people approving what matters.
    Learn more

    Document Q&A (RAG)

    Answers from your own documents, with the source shown for every answer.
    Learn more

    AI governance and data protection

    Policies, review steps and audit trails that fit your local data law.
    Learn more

    Software and cloud engineering

    Web apps, integrations and cloud platforms built around your AI use case.
    Learn more

    How we work with you

    How we work with you

    We work remotely with clients worldwide, in the client's time zone. Indian hours of 9:30 to 18:30 at UTC+5:30 are 04:00 to 13:00 UTC. In winter Poland is on UTC+1, so a 9:00 to 17:00 Polish day overlaps from 09:00 to 14:00, about 5 hours; in summer, on UTC+2, the overlap is 09:00 to 15:00, about 6 hours.

    Questions

    Common questions about AI in Poland

    Does Poland have its own AI law?

    Yes. The Act of 3 July 2026 on artificial intelligence systems supplements the EU AI Act. It entered into force on 11 August 2026, and parts apply from 28 October 2026. It mainly sets up supervision, individual opinions and sandboxes rather than new duties.

    Who supervises AI in Poland?

    KRiBSI, the Commission for the Development and Security of Artificial Intelligence, is the market surveillance authority and single point of contact under the AI Act. The UODO still supervises personal data.

    When do the high-risk AI rules start?

    After the EU Digital Omnibus on AI, they apply from 2 December 2027 for Annex III uses such as hiring, education and credit, and from 2 August 2028 for AI in regulated products. Bans and general-purpose AI rules already apply.

    Can a small company test AI under supervision?

    Yes. The 2026 act lets KRiBSI run regulatory sandboxes lasting 6 to 12 months. Micro, small and medium-sized firms take part at no charge, and others pay a capped fee.

    Complimentary tools

    Try these first

    Three complimentary tools from our AI Toolkit that suit a team starting out.

    AI readiness score

    Answer a few questions and see where your team stands, in about five minutes.
    Open the tool

    AI use case triage

    Test an idea against data, risk and effort before you spend on it.
    Open the tool

    AI project cost estimator

    Get a rough build and run cost range for a first AI project.
    Open the tool

    Read next

    Sources

    Sources

    Facts checked on 29 October 2026. Numbers in square brackets above match this list.
    1. [1] Eurostat, 2026-06-15. Enterprises using artificial intelligence technologies (isoc_eb_ai), 20…(ec.europa.eu)
      Full title and what we used it for

      Enterprises using artificial intelligence technologies (isoc_eb_ai), 2025 data. Primary statistics, queried on 29 October 2026. Used for the 8.36% Polish figure; the EU figure of 19.95% is from the same dataset and the Statistics Explained article 'Use of artificial intelligence in enterprises'.

    2. [2] Official Journal of the European Union, 2016-04-27. Regulation (EU) 2016/679 (General Data Protection Regulation)(publications.europa.eu)
      Full title and what we used it for

      Regulation (EU) 2016/679 (General Data Protection Regulation). Primary text, read via the EU Publications Office because EUR-Lex blocked automated access. Used for Articles 22, 33, 35 and 83.

    3. [3] Official Journal of the European Union, 2024-07-12. Regulation (EU) 2024/1689 (Artificial Intelligence Act)(publications.europa.eu)
      Full title and what we used it for

      Regulation (EU) 2024/1689 (Artificial Intelligence Act). Primary text. Used for Article 113 application dates and Article 99 fines.

    4. [4] Official Journal of the European Union, 2026-07-24. Regulation (EU) 2026/1744 (Digital Omnibus on AI)(publications.europa.eu)
      Full title and what we used it for

      Regulation (EU) 2026/1744 (Digital Omnibus on AI). Primary text, published 24 July 2026. Used for the new high-risk dates of 2 December 2027 and 2 August 2028 and the amended AI literacy article.

    5. [5] European Commission, 2026-10-29. AI Act: regulatory framework for AI(digital-strategy.ec.europa.eu)
      Full title and what we used it for

      AI Act: regulatory framework for AI. Primary. Used for the timeline summary and the entry into force of the AI Omnibus on 27 July 2026.

    6. [6] European Commission, 2026-09-07. Market surveillance authorities under the AI Act(digital-strategy.ec.europa.eu)
      Full title and what we used it for

      Market surveillance authorities under the AI Act. Primary. Lists KRiBSI as Poland's single point of contact with designation marked final.

    7. [7] Sejm of the Republic of Poland (ELI API), 2026-07-27. Ustawa z dnia 3 lipca 2026 r. o systemach sztucznej inteligencji, Dz.U.…(api.sejm.gov.pl)
      Full title and what we used it for

      Ustawa z dnia 3 lipca 2026 r. o systemach sztucznej inteligencji, Dz.U. 2026 poz. 1003. Primary text and metadata. Used for the entry into force (11 August 2026, parts from 28 October 2026), Articles 5, 8 to 13, 19, 91 and 93. Our English renderings are our own.

    8. [8] Sejm of the Republic of Poland (ELI API), 2018-05-24. Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych(api.sejm.gov.pl)
      Full title and what we used it for

      Ustawa z dnia 10 maja 2018 r. o ochronie danych osobowych. Primary metadata. Used for the act's title, in force since 25 May 2018.

    9. [9] Ministry of Digital Affairs (Ministerstwo Cyfryzacji), 2026-04-16. Draft resolution of the Council of Ministers on the AI development poli…(gov.pl)
      Full title and what we used it for

      Draft resolution of the Council of Ministers on the AI development policy in Poland to 2030. Primary. Shows the policy as a draft. The 10 to 20 ranking goal is from the ministry's page 'Polityka AI' (gov.pl/web/cyfryzacja/polityka-ai). We found no adoption as of 29 October 2026.

    10. [10] Ministry of Digital Affairs (Ministerstwo Cyfryzacji), 2025-08-08. Polski model jezykowy PLLuM trafi do samorzadu(gov.pl)
      Full title and what we used it for

      Polski model jezykowy PLLuM trafi do samorzadu. Primary. Used for what PLLuM is, who it is open to, and the Czestochowa pilot.

    This is general information, not legal advice. EU and Polish rules on AI are changing, and secondary acts under the 2026 act may follow. Check with a qualified Polish lawyer before you act. Facts checked on 29 October 2026.

    Other country guides

    Starting with AI in Poland?

    Talk to an engineer. The first call is free, and we start with a readiness assessment before any budget is committed.

    Talk to our team Get your AI score