Article 70 Designation of national competent authorities and single points of contact

Each Member State shall establish or designate as national competent authoritiesas defined in Article 46 at least one notifying authority means the national authority responsible for setting up and carrying out the necessary procedures for the assessment, designation and notification of conformity assessment bodies and for their monitoring; and at least one market surveillance authority means a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; for the purposes of this Regulation. Those national competent authoritiesas defined in Article 46 shall exercise their powers independently, impartially and without biasbusiness impact analysis so as to safeguard the objectivity of their activities and tasks, and to ensure the application and implementation of this Regulation. The members of those authorities shall refrain from any action incompatible with their duties. Provided that those principles are observed, such activities and tasks may be performed by one or more designated authorities, in accordance with the organisational needs of the Member State.

Member States shall communicate to the Commission the identity of the notifying authorities means the national authority responsible for setting up and carrying out the necessary procedures for the assessment, designation and notification of conformity assessment bodies and for their monitoring; and the market surveillance authorities means a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; and the tasks of those authorities, as well as any subsequent changes thereto. Member States shall make publicly available information on how competent authoritiesas defined in Article 46 and single points of contact can be contacted, through electronic communication means by 2 August 2025. Member States shall designate a market surveillance authority means a market surveillance authority as defined in Article 3, point (4), of Regulation (EU) 2019/1020; to act as the single point of contact for this Regulation, and shall notify the Commission of the identity of the single point of contact. The Commission shall make a list of the single points of contact publicly available.

Member States shall ensure that their national competent authoritiesas defined in Article 46 are provided with adequate technical, financial and human resources, and with infrastructure to fulfil their tasks effectively under this Regulation. In particular, the national competent authoritiesas defined in Article 46 shall have a sufficient number of personnel permanently available whose competences and expertise shall include an in-depth understanding of AI technologies, data and data computing, personal data means personal data as defined in Article 4, point (1), of Regulation (EU) 2016/679; protection, cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881;, fundamental rights, health and safety risks means the potential for loss or disruption caused by an incident and is to be expressed as a combination of the magnitude of such loss or disruption and the likelihood of occurrence of the incident; and knowledge of existing standards means a standard as defined in Article 2, point (1), of Regulation (EU) No 1025/2012 of the European Parliament and of the Council (^29^); Regulation (EU) No 1025/2012 of the European Parliament and of the Council of 25 October 2012 on European standardisation, amending Council Directives 89/686/EEC and 93/15/EEC and Directives 94/9/EC, 94/25/EC, 95/16/EC, 97/23/EC, 98/34/EC, 2004/22/EC, 2007/23/EC, 2009/23/EC and 2009/105/EC of the European Parliament and of the Council and repealing Council decision 87/95/EEC and Decision No 1673/2006/EC of the European Parliament and of the Council (OJ L 316, 14.11.2012, p. 12). and legal requirements. Member States shall assess and, if necessary, update competence and resource requirements referred to in this paragraph on an annual basis.

National competent authoritiesas defined in Article 46 shall take appropriate measures to ensure an adequate level of cybersecurity means cybersecurity as defined in Article 2, point (1), of Regulation (EU) 2019/881;.

When performing their tasks, the national competent authoritiesas defined in Article 46 shall act in accordance with the confidentiality obligations set out in Article 78.

By 2 August 2025, and once every two years thereafter, Member States shall report to the Commission on the status of the financial and human resources of the national competent authoritiesas defined in Article 46, with an assessment of their adequacy. The Commission shall transmit that information to the Board for discussion and possible recommendations.

The Commission shall facilitate the exchange of experience between national competent authoritiesas defined in Article 46.

National competent authoritiesas defined in Article 46 may provide guidance and advice on the implementation of this Regulation, in particular to SMEs including start-ups, taking into account the guidance and advice of the Board and the Commission, as appropriate. Whenever national competent authoritiesas defined in Article 46 intend to provide guidance and advice with regard to an AI system in areas covered by other Union law, the national competent authoritiesas defined in Article 46 under that Union law shall be consulted, as appropriate.

Where Union institutions, bodies, offices or agencies fall within the scope of this Regulation, the European Data Protection Supervisor shall act as the competent authorityas defined in Article 46 for their supervision.