Jargon Busted: Market Surveillance Authority
The regulator that actually shows up
TL;DR - The Market Surveillance Authority is the regulator that actually shows up. The AI Act sets the rules, and your member state decides how hard they bite.
If you’ve read that the EU AI Act “becomes enforceable” on August 2 and quietly wondered who exactly does the enforcing, here’s your ten-second decryption.
A Market Surveillance Authority (MSA) is the national regulator each EU member state appoints to police AI inside its own borders. Think of it as the AI version of the agency that pulls unsafe toys off shelves. It can demand your documentation, run its own tests, order a system withdrawn from the market, and issue fines. Brussels writes the rules. Your local MSA knocks on the door.
So why does that matter four days from now?
MSAs hold the fine book. Up to €35M or 7% of global turnover for prohibited practices, €15M or 3% for high-risk and transparency failures. The AI Office in Brussels handles general-purpose models. Almost everything else is national.
27 countries, 27 personalities. Some states gave the job to their data protection regulator, others to a product safety body or a brand-new agency. Same law, very different appetite for using it.
They can ask first and decide later. An MSA can request your technical documentation with little warning. If you can’t produce it fast, that slowness becomes its own finding.
👀 Watch which member states still haven’t properly staffed their MSA by August 2, because enforcement gaps get noticed quickly.