EU AI Act enforcement in Belgium for SaaS founders

Belgian competent authorities

APD/GBA (Autorité de Protection des Données / Gegevensbeschermingsautoriteit) is the lead Belgian authority for AI Act elements overlapping with GDPR. The Federal Public Service Economy handles AI in consumer protection. The National Bank of Belgium handles fintech AI. Belgium is establishing a federal AI office to coordinate and act as the European AI Office liaison. Regional digital agencies (Vlaanderen Digitaal, Digital Wallonia, Bruxelles Numérique) play supporting roles.

Belgian enforcement philosophy

APD/GBA has been moderately active in GDPR enforcement, with several high-profile decisions including against IAB Europe (Transparency and Consent Framework). AI Act enforcement is expected to follow the same considered, deliberate pattern. Belgium will likely focus first on transparency failures and HR-tech given strong Belgian labour union representation in enforcement consultation.

Multi-language disclosure requirements

Belgium's three official languages (Dutch, French, German) plus widespread English use create compliance complexity. Article 50 disclosures to Belgian consumers may need to be provided in the relevant region's official language. The Belgian Code of Economic Law already requires consumer information in the region's official language; AI Act disclosures will follow the same standard.

Brussels institutional environment

Brussels hosts the European Commission, European Parliament committees, Council of the EU secretariat, and the European AI Office. This concentration of EU institutions means Belgian enforcement is highly visible and influences EU-wide patterns. For SaaS based in or selling into Brussels, expect particularly active engagement from supervisors.

Belgian public procurement

Belgian federal procurement runs through e-Procurement; regional procurement varies by region. Since early 2026, AI-touching tenders require compliance attestations. EU institution procurement (separate from national procurement) also has AI Act requirements via the European Data Protection Supervisor (EDPS).

Frequently asked questions

Who enforces the AI Act in Belgium?

APD/GBA for GDPR overlap, FPS Economy for consumer protection, National Bank of Belgium for fintech. A federal AI office is being established.

Do I need multi-language Article 50 disclosures?

Yes if you sell into multiple Belgian regions. Wallonia French, Flanders Dutch, German-speaking community German. Brussels is officially bilingual French/Dutch.

Does Brussels enforcement differ from rest of Belgium?

Slightly - Brussels has the EU institutional concentration making enforcement more visible and influential. Federal-level investigations sometimes start there.

What does e-Procurement attestation require?

Standard compliance statement covering Article 5, Annex III, Article 50, Article 10, Article 73. Submitted with bid.

Are EU institution contracts subject to AI Act?

Yes - the EU institutions themselves are bound by the Act in their procurement and operations. EDPS oversees compliance for institutional use.

Sources

• https://www.autoriteprotectiondonnees.be/
• https://economie.fgov.be/