What happened
The Commissioner of Communications put the draft law "Ο περί της Τεχνητής Νοημοσύνης Νόμος του 2026" (the Artificial Intelligence Law of 2026) to public consultation on 16 August 2026, with comments due by 16 September 2026. On 1 November 2026 the government's e-consultation platform lists it as under review.
Under the consultation text, the Commissioner of Communications becomes the market surveillance authority and single point of contact for the AI Act, through a new AI Regulation Directorate. The Commissioner for Personal Data Protection and the Central Bank of Cyprus supervise certain high-risk systems in their fields.
For breaches of the Article 50 transparency duties, such as telling people that a chatbot is AI, the draft sets fines of up to €15 million or 3% of worldwide annual turnover, and for SMEs the lower of the two applies. It also creates a national AI regulatory sandbox with priority access for SMEs, plus awareness and training actions aimed at them.
What it means for an office in Cyprus
If your office uses a chatbot on its website or WhatsApp, or AI tools that write texts for clients, there will be a named authority that checks and fines. The duties themselves already apply under the EU Regulation: AI literacy for staff since 2 February 2025, and chatbot transparency since 2 August 2026.
For most offices the practical side is simple: the chatbot says it is AI in its first message, staff are trained, and there is a short AI use policy. Stricter rules cover AI used in high-risk areas such as hiring.
What to do
- Make sure every chatbot you run says it is AI in its first message
- List the AI tools your office uses and what each one is used for
- Train staff in the safe use of AI and keep an attendance record
- If you use AI in hiring, client scoring or health, take legal advice on the high-risk rules
- Follow the bill on the e-consultation platform