🇸🇰Slovakia

Overview

Slovakia's approach to AI regulation is characterized by a proactive, yet measured, strategy that heavily aligns with European Union frameworks. The country is in a transitional phase, moving from a foundation of strategic policies and guidelines towards the implementation of comprehensive, binding legislation, particularly in response to the EU Artificial Intelligence Act. This approach emphasizes fostering innovation while ensuring ethical considerations, fundamental rights protection, and robust governance mechanisms are in place. The national strategy prioritizes the responsible integration of AI across public administration, education, and key economic sectors, aiming to leverage digital transformation for societal and economic benefit. The Ministry of Investments, Regional Development and Informatization (MIRRI) plays a central coordinating role, driving national digital policies and preparing the country for the complexities of AI governance. The Slovak Republic's regulatory philosophy is built upon a multi-layered framework that combines high-level strategic documents with detailed action plans and, increasingly, specific legislative proposals. Key institutions like MIRRI are supported by expert advisory bodies such as the Standing Commission for Ethics and Regulation of Artificial Intelligence (CERAI), which provides crucial input on ethical, societal, and legal implications of AI. This collaborative ecosystem aims to ensure that Slovakia's digital transformation, including its AI development, is secure, inclusive, and aligned with international best practices, particularly those emanating from the European Digital Decade agenda. The nation's commitment to digital skills development, as outlined in the National Strategy for Digital Skills, and robust cybersecurity, detailed in the National Cybersecurity Strategy, also forms a crucial underpinning for its broader AI strategy, creating a supportive environment for responsible technological advancement.

Regulatory approach

Slovakia employs a hybrid regulatory approach to AI, combining non-binding soft law instruments with forthcoming binding legislation. The current landscape is largely shaped by a series of high-level policies, strategies, and action plans, such as the Strategy of Digital Transformation of Slovakia 2030 and its subsequent Action Plans (2019-2022 and 2023-2026), alongside the National Concept of Informatization of Public Administration (NKIVS) 2021–2026. These documents provide a strategic vision, define priorities, and assign responsibilities across ministries, guiding the overall direction of digital transformation and AI integration without imposing direct legal sanctions. Complementing these are specific guidelines, like the "AI in Education — Guidance for Educators," which offers practical recommendations for responsible AI use in classrooms, focusing on pedagogical principles, roles, and responsibilities for introducing AI tools while protecting learners' rights and safety. The establishment of advisory bodies, such as CERAI and the Government Plenipotentiary for AI, further underscores the reliance on expert advice and ethical considerations to shape policy, ensuring a human-centric approach to AI development. However, Slovakia is rapidly transitioning towards a more prescriptive and risk-based regulatory framework, primarily driven by its commitment to implement the European Union's Artificial Intelligence Act (EU AI Act). Draft legislation, such as the "Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence" and the "Draft Act on the Management of Selected Categories of Public Sector Data," signal a move towards binding rules for high-risk AI systems, data governance, and market surveillance. These forthcoming laws are designed to establish a clear institutional architecture, define obligations for AI system providers and deployers, and introduce enforcement powers, including administrative sanctions. This dual approach allows for flexibility and innovation through policy guidance while preparing for robust legal oversight, especially for AI applications that pose significant risks to fundamental rights or public safety, ensuring that regulatory burdens are proportionate to the level of risk. The governance of AI in Slovakia is a multi-faceted endeavor, primarily coordinated by the Ministry of Investments, Regional Development and Informatization (MIRRI). MIRRI is designated as the national coordinator for digital transformation and is expected to serve as the general national market surveillance authority and single contact point for EU-level cooperation under the forthcoming AI Act implementation. Its mandate extends to policy coordination, publication of annual reports on AI usage in the public sector, maintenance of national registries for AI systems, and overseeing regulatory sandbox programs to support innovation. This central role ensures a coherent and coordinated approach to AI policy across various governmental sectors and in alignment with EU directives. Supporting MIRRI in its coordinating role is the Government Plenipotentiary for Artificial Intelligence, an advisory organ established in 2025, tasked with supporting national AI policy, coordinating expert input for EU and international AI work, and promoting the development of national support and supervisory bodies. This plenipotentiary also systematically collects and analyzes information on AI use in Slovakia and presents an annual report to the government on AI deployment and the state of the ecosystem. Further institutional support comes from the Standing Commission for Ethics and Regulation of Artificial Intelligence (CERAI), an independent expert and advisory body established in 2020 under MIRRI's auspices. CERAI's mandate involves evaluating the ethical, societal, and legal implications of AI, preparing expert opinions on national legislation, advising on responsible AI practices in the public sector, and producing guidance materials. While CERAI does not have direct enforcement powers, its outputs inform governmental policy-making and contribute to national alignment with international standards. The implementation of the EU AI Act will also establish sectoral supervisory authorities with defined competences, including the Office for Personal Data Protection (Úrad na ochranu osobných údajov) for privacy compliance, the National Security Authority (NBÚ) for cybersecurity, and the Slovak Trade Inspection (SOI) for consumer and product market supervision. These bodies will be crucial for domain-specific oversight and enforcement, working in cooperation with the general market surveillance authority.

Enforcement & penalties

The current framework for penalties and enforcement in Slovakia regarding AI is largely prospective, with significant mechanisms anticipated through the implementation of the EU AI Act. The "Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence" proposes to establish enforcement powers and administrative sanctions for non-compliance with obligations related to high-risk AI systems. These sanctions are expected to be aligned with the severity of breaches, reflecting the tiered penalty structure envisioned by the EU AI Act, and may include administrative fines or corrective orders. The draft bill also clarifies liability rings for negligent disclosure or failure to secure re-used datasets, particularly within the context of public sector data reuse under the proposed data governance act. Enforcement will involve supervisory oversight, including reporting and audits, with the possibility of administrative fines or corrective orders for non-compliant public sector bodies or intermediaries. Beyond the specific AI-focused legislation, existing national laws provide a baseline for enforcement. The General Data Protection Regulation (GDPR) and national data protection law, enforced by the Office for Personal Data Protection, already impose significant fines for privacy breaches, which are highly relevant given AI's reliance on data. Similarly, the National Cybersecurity Strategy 2021–2025 and Act No. 69/2018 Z.z. on cybersecurity establish enforceable obligations for critical infrastructure operators and public sector entities, with penalties for security incidents and non-compliance. The forthcoming AI Act implementation will build upon these existing frameworks, mandating cooperation between the general market surveillance authority (MIRRI) and sectoral supervisors to ensure comprehensive oversight and consistent application of sanctions across different domains. Appeals processes and judicial review channels are also expected to be established to ensure fairness and due process in enforcement actions, allowing affected parties to challenge decisions or penalties.

Data protection

Slovakia's data protection framework is robustly anchored in the European Union's General Data Protection Regulation (GDPR), which is directly applicable law. This means that any AI system processing personal data within Slovakia must fully comply with GDPR principles, including lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality, and accountability. The national supervisory authority for data protection is the Office for Personal Data Protection (Úrad na ochranu osobných údajov), which retains competence for privacy compliance and is expected to cooperate closely with the new AI governance bodies, as outlined in the draft implementing legislation for the EU AI Act. The "AI in Education — Guidance for Educators" specifically emphasizes the importance of privacy and data protection, advising educators to avoid sharing sensitive personal data with third-party AI services and to conduct data protection checks in compliance with GDPR and national requirements, providing practical steps for safeguarding pupil information. Furthermore, the "Draft Act on the Management of Selected Categories of Public Sector Data" directly addresses data protection in the context of public sector data reuse, which is critical for AI training and research. This draft Act requires mandatory Data Protection Impact Assessments (DPIAs) where personal data are involved, alongside strict criteria and checks for anonymization and pseudonymization to mitigate privacy risks. It also mandates secure remote analysis environments (e.g., data clean rooms) when direct disclosure of sensitive data is not appropriate, ensuring that reuse is "as open as possible, as closed as necessary". This legislative initiative, aligned with the European Data Governance Act, aims to create a harmonized framework for controlled data reuse while layering national implementation details on competent bodies, access conditions, and technical safeguards, all while ensuring that GDPR and national data protection law continue to prevail where personal data are concerned, reinforcing the primacy of privacy rights.

Sector-specific rules

While a comprehensive set of sector-specific AI regulations is still evolving, Slovakia has initiated targeted guidance and strategic planning for AI integration in key sectors, with further regulatory developments anticipated through the implementation of the EU AI Act. A notable example is the "AI in Education — Guidance for Educators," published by the Slovak Ministry of Education in 2025. This guideline provides practical recommendations for primary and secondary school teachers on the safe, ethical, and responsible use of AI in classrooms, covering aspects like communication, privacy, human oversight, and pedagogical design. It aims to complement school-level rules and ministry programs, ensuring that AI tools are introduced while protecting learners' rights and safety, and promoting AI literacy and critical thinking among pupils. This demonstrates a proactive approach to managing AI in a sensitive sector, focusing on practical application and ethical considerations. Beyond education, broader strategic documents like the "Research and Innovation Strategy for Smart Specialisation of the Slovak Republic 2021–2027 (SK RIS3 2021+)" identify "Digital Transformation of Slovakia" as a key domain, which includes fostering AI development and deployment across various economic sectors, such as innovative industry and mobility. The "Action Plan for Digital Transformation of Slovakia 2023–2026" also explicitly mentions funding pilots for AI in healthcare, public administration, and manufacturing, promoting ethical AI practices and responsible data use. While these are policy documents rather than binding regulations, they signal the government's intent to support and guide AI adoption in critical areas. The forthcoming implementation of the EU AI Act will introduce legally binding sector-specific rules for high-risk AI systems deployed in areas such as healthcare, employment, law enforcement, and critical infrastructure, with designated sectoral supervisory authorities like the State Institute for Drug Control for medical AI and the Transport Authority for transport-related AI, ensuring specialized oversight for high-impact applications.

International alignment

Slovakia's approach to AI regulation is deeply intertwined with its membership in the European Union, demonstrating a strong commitment to international alignment, particularly with the EU AI Act. The "Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence" and the "Draft Act on the Organization of State Administration in the Field of Artificial Intelligence" are explicit national implementing instruments for the EU Artificial Intelligence Act (Regulation (EU) 2024/1689). These bills aim to establish the necessary national institutional architecture for market surveillance, designate competent authorities, and set out obligations for high-risk AI systems, directly translating EU requirements into Slovak law. The Government Plenipotentiary for Artificial Intelligence is also mandated to coordinate expert input and positions for EU-level and international AI legislative and non-legislative work, and to cooperate with EU AI bodies such as the EU AI Office and the European AI Board, ensuring Slovakia's active participation in European AI governance. Beyond the AI Act, Slovakia's digital transformation strategies consistently reference and align with broader EU digital policy initiatives. The "Institutional and Coordination Framework for the Digital Transformation of Slovakia" directly responds to the EU’s wave of digital legislation, including the Digital Services Act, Digital Markets Act, Data Act, Data Governance Act, and interoperability rules, by establishing a national mechanism to translate these obligations into coherent domestic action. Similarly, the "Draft Act on the Management of Selected Categories of Public Sector Data" explicitly aligns with the European Data Governance Act (Regulation (EU) 2022/868), demonstrating a commitment to harmonized data governance across the EU. Slovakia's policies, such as the "Strategy and Action Plan to Improve Slovakia's Position in the DESI Index to 2025" and the "Action Plan for Digital Transformation of Slovakia 2023–2026," are designed to meet EU Digital Decade targets and DESI index objectives, reinforcing the nation's commitment to a harmonized European digital single market and improved digital competitiveness. The Standing Commission for Ethics and Regulation of Artificial Intelligence (CERAI) also contributes to this alignment by fostering interoperable, ethics-based governance practices and aligning Slovak AI practices with evolving European frameworks, often referencing EU terminology and concepts.

What's next

Slovakia's AI regulatory landscape is poised for significant evolution with several key legislative initiatives currently in draft status, primarily driven by the nation's commitment to implement the EU AI Act and enhance data governance. The most impactful future developments revolve around the "Draft Act on the Organization of Public Administration in the Field of Artificial Intelligence" and the "Draft Act on the Organization of State Administration in the Field of Artificial Intelligence". These bills, currently undergoing interdepartmental comment procedures, are set to establish the comprehensive national framework for AI governance, market surveillance, and the regulation of high-risk AI systems in line with the EU AI Act. Their anticipated effective date is January 1, 2026, though final content remains subject to change following consultation and parliamentary procedure. These acts will define national competent authorities, set mandatory duties for AI system operators and deployers, and introduce a national regulatory sandbox to foster innovation under supervised conditions, providing a controlled environment for testing and development. Another crucial pending development is the "Draft Act on the Management of Selected Categories of Public Sector Data," which was introduced in 2025. This bill aims to create a harmonized framework for the controlled reuse of public sector data, aligning with the European Data Governance Act. It is expected to define categories of reusable data, designate competent national bodies, require metadata and interoperability standards, and establish privacy and security safeguards to ensure responsible data sharing for research, innovation, and AI training. The draft anticipates phased implementation, with prioritized categories for early release (e.g., statistics, anonymized transport and environmental data) and detailed technical guidance to be issued by designated ministries or a national data office. These legislative efforts, combined with ongoing updates to national digital transformation and cybersecurity strategies, indicate a continuous and iterative process of adapting Slovakia's legal and policy framework to the rapid advancements in AI and digital technologies, always with a strong emphasis on alignment with broader EU digital policy objectives and ensuring a future-proof regulatory environment.