Netherlands AI Policy 2026: What the EU AI Act Means for the Country

The Netherlands is in the middle of a significant regulatory transition when it comes to artificial intelligence. The EU AI Act, which entered into force in August 2024, is now directly applicable across all member states, and the Dutch government is working to put the national enforcement structure in place. For anyone living or working in the Netherlands, whether as a resident, expat professional, or business owner, understanding how this policy is developing matters more than it might seem.

The EU AI Act is a regulation, not a directive, which means it applies directly in the Netherlands without needing to be converted into national law first. It establishes a risk-based framework for AI systems, dividing them into four tiers: unacceptable risk, high risk, limited risk, and minimal risk. Systems in the unacceptable risk category are banned outright. These include AI tools designed to manipulate human behaviour covertly or to exploit vulnerabilities. High-risk systems, which include AI used in recruitment, education, healthcare, credit decisions, and law enforcement, face the most stringent requirements around transparency, accuracy, documentation, and human oversight.

The timeline that organisations in the Netherlands need to know is as follows. Prohibited AI practices have been banned since February 2025. General-purpose AI models, which includes large language models and similar foundational systems, were required to comply from August 2025. High-risk AI systems face a compliance deadline of August 2026. High-risk AI that is embedded into existing regulated products, such as medical devices or machinery, has until August 2027. AI systems used by public authorities placed on the market before August 2024 have until 2030 to comply.

Rather than creating a single dedicated AI authority, the Netherlands has chosen a decentralised model. On 20 April 2026, the Dutch government published a draft Implementation Act, known as the Uitvoeringswet AI-verordening, for public consultation. The consultation ran until 1 June 2026. The act is expected to be submitted to the House of Representatives later in 2026.

Under the proposed framework, supervision will be distributed across multiple existing regulators, each handling AI within their own sector. The Dutch Data Protection Authority (Autoriteit Persoonsgegevens, or AP) takes on the central coordinating role, and will also serve as the primary authority for prohibited AI practices, transparency obligations, and a wide range of high-risk applications including AI used in recruitment, lending, and government decision-making. The Dutch Authority for Digital Infrastructure (Rijksinspectie Digitale Infrastructuur, or RDI) shares the coordinating function and acts as the central contact point.

Other supervisory bodies designated under the draft act include the Authority for the Financial Markets (AFM) and the Dutch Central Bank (De Nederlandsche Bank, or DNB) for the financial sector, the Health and Youth Care Inspectorate (IGJ) for medical applications, the Netherlands Food and Consumer Product Safety Authority (NVWA), and the Netherlands Labour Authority. In total, the proposed framework names eight to ten market surveillance authorities covering the full range of sectors where AI systems are deployed.

This sector-based approach means that if your organisation uses AI, the regulator you already deal with is likely to be the one enforcing the AI Act for you. A bank will answer to the AFM or DNB. A healthcare provider will answer to the IGJ. For areas where no existing regulator clearly applies, the AP acts as the fallback authority.

For organisations operating in the Netherlands, the main near-term focus should be on identifying which AI systems they use or develop and determining how they are classified under the risk framework. Even organisations that do not build AI themselves, but deploy AI tools developed by others, have obligations under the act as deployers. This includes carrying out a fundamental rights impact assessment before deploying certain high-risk systems.

The Netherlands has also committed to running an AI regulatory sandbox, a supervised environment where organisations can test AI systems before bringing them to market, with priority access for smaller businesses and startups. The AP and RDI published a design for this sandbox in 2025, with a target of having it operational by the August 2026 EU deadline.

The government body Business.gov.nl provides practical guidance in Dutch and English on what the AI Act requires and which steps organisations should take. The national standardisation body NEN is involved in developing the European technical standards that will underpin compliance requirements in the coming years.

The Netherlands is among the more active adopters of AI in Europe. Approximately 22.7 percent of Dutch companies were using AI as of 2026, with the financial services sector leading at 37.4 percent. The National Growth Fund has allocated over one billion euros to AI-related programmes, including the AiNed initiative and various ELSA Labs focused on ethical AI research. The Dutch AI Coalition, a public-private partnership, continues to coordinate research, innovation, and policy development across government, industry, and academia.

What comes next is the passage of the Implementation Act through parliament, which will give the supervisory framework full legal force. Once that is in place, Dutch regulators will have concrete powers to investigate, issue corrective orders, and impose fines. Non-compliance with prohibited AI practices can result in fines of up to 35 million euros or seven percent of global annual revenue, whichever is higher.

If you are an expat professional or business owner in the Netherlands and want to understand how AI rules might affect your work, the AP website and Business.gov.nl are the most authoritative starting points. For broader context on living and working in the Netherlands in a rapidly changing regulatory environment, see our expat guide and our coverage of Dutch tech companies shaping the European landscape.