AI disclosure requirements in Poland: what applies since 2 August 2026
The EU AI Act's transparency obligations are a Union-wide regulation, so the substance is the same in Poland as everywhere in the EU: from 2 August 2026, AI systems that interact with people must disclose they're AI, synthetic media must carry machine-readable marking, and deepfakes and certain AI-generated public-interest text must be labeled. What differs country by country is who enforces it, in what language your users encounter it, and how quickly complaints turn into questions.
Enforcement in Poland
Poland's Act on artificial intelligence systems passed the Sejm on 11 June 2026 and moved to the Senate at the time of review. It creates a brand-new, single market surveillance authority, the Commission for the Development and Safety of Artificial Intelligence (KRiBSI), one of only two single-authority models in the EU, with permanent members drawn from the competition office (UOKiK), the financial supervisor (KNF), the communications office (UKE) and the broadcasting council (KRRiT), and operational support housed in the Ministry of Digital Affairs. Until the act is enacted the framework is near-final rather than final; Article 50 itself applies from 2 August 2026 with the EU penalty ceiling of €15M or 3% of worldwide turnover.
The four duties, as they show up on your site
- Article 50(1): chatbot disclosure
- Any AI system interacting with visitors must make that clear no later than the first interaction, in a clear and distinguishable way.A line in your terms doesn't satisfy it.
- Article 50(2): machine-readable marking
- AI-generated audio, images, video, and text must be marked in a machine-readable, detectable format.For generative systems already on the market before 2 Aug 2026, this specific duty has a transition until 2 Dec 2026; the rest does not.
- Article 50(3): emotion recognition & biometric categorisation
- People exposed must be informed the system is operating.
- Article 50(4): deepfake and AI-text labels
- Visible disclosure for deepfakes, and for AI-generated or manipulated text published to inform the public on matters of public interest.
Poland-specific practicalities
- Poland chose one front door: when KRiBSI stands up, chatbot-disclosure and AI-labelling complaints all route to the same new commission rather than a sector maze
- The draft adds business-friendly instruments beyond the EU baseline, including binding individual opinions for upfront legal certainty, worth watching if you want a pre-launch read on your disclosure setup
- UOKiK (consumer protection) sits inside KRiBSI's permanent membership; undisclosed AI in consumer-facing flows is squarely the kind of case that lens surfaces
- Keep the Polish-language first-interaction screenshot in your evidence file, a notice your Polish users can't read is a weak notice
Disclosure language should match your user-facing language. For a site serving Poland in Polish, a first-message line such as "Rozmawiasz z asystentem AI" (you're chatting with an AI assistant) is the pattern to aim for, at first interaction, not in the regulamin.
Common questions
Is Poland's AI act in force?
At the time of review it had passed the Sejm (11 June 2026) and was before the Senate, close to the finish line but not enacted. Article 50 of the EU regulation applies directly from 2 August 2026 regardless; the Polish act decides who supervises (the new KRiBSI commission), not whether the duties exist.
What makes Poland's setup different from other member states?
Concentration. Most member states spread AI Act supervision across many sector regulators; Poland (like Lithuania) is designating a single market surveillance authority, and it is the only member state building an entirely new institution, KRiBSI, for the job, with the big sector regulators represented inside it.