EU AI Act + Uitvoeringswet verordening artificiële intelligentie (Uvai, draft implementing bill)

Summary

The Netherlands missed the August 2025 deadline to designate AI Act authorities and published its draft implementing act (Uvai) for consultation on April 20, 2026, with responses due by June 1, 2026. The draft adds no substantive rules and spreads supervision across existing regulators. The Autoriteit Persoonsgegevens (AP) supervises prohibited practices, transparency duties and most Annex III high-risk uses; the AP and the Rijksinspectie Digitale Infrastructuur (RDI) jointly coordinate the system, with the RDI as single point of contact; and the AFM and DNB supervise AI used by financial institutions, for example in creditworthiness assessment. Product regulators keep AI in regulated products, and the market surveillance authorities would run one shared regulatory sandbox.

Key dates

1. April 20, 2026Key date
2. October 16, 2026Checked against sources
3. October 21, 2026Checked against sources

Developments are added when the record is reviewed. Next review: January 15, 2027.

Evidence

Each passage is quoted from its source. The quoted passages are re-checked against the live pages every month.

1. On 20 April 2026, the Dutch government published its proposal for the AI Act implementing legislation (the Uitvoeringswet verordening artificiële intelligentie, or “ Uvai ”) for public consultation.

   Supports: Consultation April 20, 2026

   In addition, the RDI acts as the Single Point of Contact under Article 70(2) of the AI Act, and must fulfill this role in close coordination with the AP.

   Supports: RDI single point of contact

   are proposed to be designated as the competent supervisory authorities for AI systems used by financial institutions in areas such as creditworthiness assessment

   Supports: AFM and DNB for financial institutions

   Stakeholders may submit their responses until 1 June 2026.

   Supports: Consultation close

   Dutch government publishes draft AI Act implementing legislation Bird & Bird Reporting or analysis

2. The Netherlands has opted for a hybrid supervisory model involving ten market supervisory authorities, with the Dutch Data Protection Authority playing a central role.

   Supports: Hybrid model; AP central

   The AP will become the market supervisory authority for prohibited AI practices, for transparency obligations, and for a large proportion of high-risk applications

   Supports: AP remit

   Dutch proposal for AI supervision Stibbe Reporting or analysis