A Market Surveillance Authority (MSA) is the national competent authority designated by each EU member state to enforce the EU AI Act and protect public interests. Empowered with investigative and corrective powers, an MSA monitors the market for non-compliant high-risk AI systems, conducts unannounced inspections, and can demand immediate withdrawal or recall of products that pose a serious risk to health, safety, or fundamental rights.
Glossary
Market Surveillance Authority
A national public body designated by an EU member state to enforce the AI Act, possessing the power to investigate non-compliant systems, demand corrective action, and restrict market access.
REGULATORY ENFORCEMENT
What is a Market Surveillance Authority?
A national public body designated by an EU member state to enforce the AI Act, possessing the power to investigate non-compliant systems, demand corrective action, and restrict market access.
MSAs serve as the primary enforcement interface between providers, deployers, and the European Commission. They are responsible for evaluating serious incident reports, verifying CE marking validity, and coordinating cross-border investigations through the European Artificial Intelligence Board. Their authority extends to suspending or restricting the supply of a non-conforming system until the provider implements mandatory corrective actions.
MARKET SURVEILLANCE AUTHORITY
Core Powers and Responsibilities
A national public body designated by an EU member state to enforce the AI Act, possessing the power to investigate non-compliant systems, demand corrective action, and restrict market access.
01
Investigative Powers
The authority can conduct unannounced on-site inspections and request access to source code, datasets, and technical documentation. It may interview personnel and seize evidence to determine if a high-risk AI system violates the AI Act's essential requirements. Providers must grant full access to training, validation, and testing datasets, including business secrets, under strict confidentiality safeguards.
Source Code
Accessible on Request
Unannounced
Inspection Type
02
Corrective Action Mandates
If a system is found non-compliant, the authority issues a mandatory corrective action order with a binding deadline. This can require the provider to bring the system into conformity, address a specific risk, or recall the product entirely. Failure to comply triggers the power to restrict or prohibit market availability and demand immediate withdrawal from service.
Binding
Order Type
Recall
Ultimate Sanction
03
Serious Incident Investigation
The authority is the primary recipient of serious incident reports from providers. Upon notification of a malfunction causing death or serious harm, it launches an immediate investigation to determine root cause. It coordinates with other member states if the incident has cross-border impact and can issue interim restrictive measures before the investigation concludes to prevent further harm.
Immediate
Response Trigger
Cross-Border
Coordination Scope
04
Market Access Control
The authority holds the power to provisionally suspend a system's CE marking and demand its removal from the EU market. For systems presenting an unacceptable risk, it can order the permanent withdrawal and public recall from end-users. This gatekeeping function ensures only compliant, safe AI products circulate within the single market.
CE Marking
Can Suspend
Permanent
Withdrawal Power
05
Cross-Border Cooperation
Market surveillance authorities operate within a network of EU coordination. When a non-compliance issue spans multiple member states, the authority must collaborate with counterparts through the European Artificial Intelligence Board (EAIB). Joint investigations and mutual recognition of findings ensure consistent enforcement across the single market, preventing regulatory arbitrage.
EAIB
Coordination Body
Mutual
Recognition Principle
06
Penalty Imposition
The authority can levy administrative fines for non-compliance, with maximum amounts set as a percentage of global annual turnover or a fixed sum, whichever is higher. Penalties are effective, proportionate, and dissuasive. Specific caps include:
- €35 million or 7% for prohibited practices
- €15 million or 3% for most other infringements
- €7.5 million or 1.5% for supplying incorrect information
€35M / 7%
Maximum Penalty
Dissuasive
Penalty Character
POST-MARKET ENFORCEMENT
How Market Surveillance Authorities Operate
Market surveillance authorities are the national enforcement bodies responsible for ensuring that AI systems placed on the EU market comply with the AI Act, possessing broad investigative and corrective powers.
A Market Surveillance Authority is a national public body designated by an EU member state to enforce the AI Act, possessing the power to investigate non-compliant systems, demand corrective action, and restrict market access. These authorities act as the primary interface between regulation and the physical marketplace, ensuring that only AI systems bearing a valid CE marking and meeting essential requirements are made available to end users.
Upon identifying a non-compliant or dangerous AI system, the authority can issue a formal warning, order a mandatory recall, or immediately prohibit the product's distribution. They coordinate cross-border investigations through the European Artificial Intelligence Board and rely on serious incident reporting from providers to trigger reactive inspections, ensuring a harmonized enforcement posture across the single market.
Enabling Efficiency, Speed & Accuracy
Intelligent Analysis, Decision & Execution
We build AI systems for teams that need search across company data, workflow automation across tools, or AI features inside products and internal software.
Talk to Us
Search across company data
Give teams answers from docs, tickets, runbooks, and product data with sources and permissions.
Useful when people spend too long searching or get different answers from different systems.
Enterprise searchRAGPermissions
Read more
Automate internal workflows
Use AI to route work, draft outputs, trigger actions, and keep approvals and logs in place.
Useful when repetitive work moves across multiple tools and teams.
AI agentsWorkflow automationGovernance
Read more
Add AI to products and internal tools
Build assistants, guided actions, or decision support into the software your team or customers already use.
Useful when AI needs to be part of the product, not a separate tool.
AI integrationDecision supportModel routing
Read moreREGULATORY ENFORCEMENT
Frequently Asked Questions
Clarifying the investigative and corrective powers of national authorities responsible for enforcing the EU AI Act on the ground.
A Market Surveillance Authority (MSA) is a national public body designated by each EU member state to enforce the AI Act, possessing the power to investigate non-compliant systems, demand corrective action, and restrict market access. Unlike a Notified Body, which performs pre-market conformity assessments, the MSA is the active policing force for AI products already on the market. These authorities operate independently to ensure that only AI systems bearing a valid CE Marking and meeting essential requirements are made available to end-users. Their mandate covers both physical products with integrated AI and stand-alone software, granting them the authority to conduct unannounced inspections and mandate immediate product recalls if a system poses a serious risk to health, safety, or fundamental rights.
About the author
Prasad Kumkar
CEO & MD, Inference Systems
Prasad Kumkar is the CEO & MD of Inference Systems and writes about AI systems architecture, LLM infrastructure, model serving, evaluation, and production deployment. Over 5+ years, he has worked across computer vision models, L5 autonomous vehicle systems, and LLM research, with a focus on taking complex AI ideas into real-world engineering systems.
His work and writing cover AI systems, large language models, AI agents, multimodal systems, autonomous systems, inference optimization, RAG, evaluation, and production AI engineering.
LinkedIn
Limited slotsGet a Free AI Consultation
Partnered with leading AI, data, and software stack.
How We Work
Custom AI workflows for your Business
One-fit-all AI don't work for modern businesses. At Inferensys, we aim to understand your business & custom requirements; which we use to define most efficient agentic workflows, the data, and the tools for your business.
01
Review the use case
We understand the task, the users, and where AI can actually help.
Read more02
Pick the right approach
We define what needs search, automation, or product integration.
Read more03
Build the first useful version
We implement the part that proves the value first.
Read more04
Improve from there
We add the checks and visibility needed to keep it useful.
Read moreThe first call is a practical review of your use case and the right next step.
Talk to Us