— Edition 1.247 52 verified trackers
ES EN
Politics · Technology · Digital regulation  ·  where data speaks before headlines
Snapshot data
AML/OFAC enforcement against banks and fintech — 418 penalties documented 418 AML/OFAC penalties documented across 177 countries and 379 regula… Corporate bankruptcy and insolvency (Chapter 11) — 4 major corporate bankrup… Corporate bankruptcies hit decade highs: over 717 in the year per S&P… High-impact litigation risk index — 4 high-impact litigations… The risk index (0-100) aggregates five objective factors —procedural … Merger control: multi-jurisdiction competition … — 9 decisions and jurisdict… Merger control diverges by jurisdiction in 2026: the Trump administra… PEPs and sanctions networks · Ibero-American graph — 40 PEP/company nodes with … Ibero-American PEP→company→sanction graph (core: Mapa del Poder, 424 … Sovereign debt distress and restructurings — 5 distress/restructuring … The IMF's 6th Global Sovereign Debt Roundtable report (April 15, 2026… Forced labor in supply chains: entity lists — 4 forced-labor exposure i… Upstream exposure intelligence densifies: the UFLPA Entity List reach… EU AI Act — designation of national authorities — 3/10/14 / 27 Member States Tracker's first event: 3 states with both authorities / 10 partial / … AI Act · Notified bodies for conformity assessment — 1 body with AI-specific a… Ecosystem 'not ready' as of Mar-2026 (standards unpublished, insuffic… Scandal → conviction gap — — milestones logged +1 mirror case: Uribe — 7 years to convict, 8 weeks to reverse, open-… Technology ↔ regulation gap — 26 regulatory milestones +1: Peru closes the generative-AI gap in ~3 years (DS 115-2025-PCM), … CNMC Spain · the Digital Services Coordinator g… — 6 documented milestones The gap becomes chronic: Congress struck down the CNMC's legal empowe… Corporate data breaches: from incident to response — 11 breaches documented +1: Canvas/Instructure, the largest known education breach (≈275M rec… Migration friction in corporate and event mobility — 3 incidents and policies … The 2026 World Cup works as a live stress test: 39 countries under fu… Power and corruption in the courts in Ibero-Ame… — 29 documented cases Jun-2026 review: Uribe updated — first-instance conviction overturned… Crypto · Licenses and authorizations by jurisdi… — 40+ CASPs with full MiCA au… July 1, 2026 cliff: the transitional regime expires (ESMA, Apr 17) wi… Data breaches · Class-action settlements — 5 settlements and mass ca… 271 million dollars across four settlements approved or with deadline… Digital regulatory risk index by country — 16 countries profiled Jun-2026 review: Brazil updated on two layers (EU adequacy Jan 26, 20… Digital services taxes (DST) by country — 3 tax-map milestones docu… About half of European OECD countries have a DST announced, proposed … Global election risk 2026: democracy and digita… — 32 elections profiled 32 electoral processes of 2026 profiled by political regime and digit… ESG · Greenwashing enforcement — 3 enforcement milestones … The legal floor arrives Sep 27, 2026 (ECGT across the 27; transpositi… EU · Digital & sustainability regulatory deadli… — 6 calendar milestones doc… Next critical deadlines: Jun 23, 2026 closes the high-risk classifica… Export controls · Entity List and advanced chips — 6 regime milestones docum… The 2026 shift: licensing for H200/MI325X and equivalents to China mo… GDPR · International transfers and adequacy dec… — 6 framework milestones do… The EU-US DPF remains in force after surviving its first judicial cha… LATAM · AI bills in legislative process — 150+ bills identified 150+ count re-verified; milestones: Peru only country with a regulate… LATAM · Judicial and regulatory sanctions on pl… — $5,2M USD · fine on X Corp. i… Paradigm shift: the STF declared Art. 19 of the Marco Civil partially… Digital political ad spending 2026 — 6 country-platform observ… AdImpact's revised projection (Jun 11): $11.6bn for the 2026 cycle — … Shadow fleet · Sanctioned vessels and enablers — 632 vessels designated by t… +46 vessels in the 20th package (Reg. 2026/506/509/511) to 632; Art. … Whistleblower awards · SEC, CFTC and equivalent… — 3 program milestones docu… The SEC awarded over $60M to 48 whistleblowers in fiscal year 2025 (2… AI Act · Sanctions regime and its actual enforc… — 0 documented AI Act fines… 0 AI Act penalties issued to date: enforcement of high-risk obligatio… Beneficial ownership transparency (UBO / CTA / … — 4 transparency milestones 4 beneficial-ownership transparency milestones documented; the EU req… Crypto industry: collapses, sanctions and convi… — 13 documented cases 13 cases of collapses, sanctions and convictions in the crypto sector… AI harms in court — litigation, rulings and set… — 103 documented cases 103 AI-related harm and rights lawsuits documented; 2026 milestones: … DMA · designated gatekeepers and real compliance — 9 documented DMA acts 9 DMA compliance actions documented against gatekeepers; 2026 develop… Documented electoral disinformation 2026 — 7 documented campaigns 7 electoral disinformation campaigns or patterns documented with open… GDPR · which national authority really sanctions — 11 authorities profiled 11 GDPR enforcement country profiles and milestones documented; 2026 … LATAM · Internet shutdowns and platform blocks — 8 documented events · 202… 8 internet shutdown and blocking episodes documented in Latin America… Operational resilience & cyber (DORA / NIS2 / SEC) — 4 regulatory milestones 4 operational-resilience milestones documented; 2026 is the first rea… Digital fines actually imposed — 61 sanctions recorded 61 high-value penalties across 18 jurisdictions and 6 continents; cov… Commercial spyware: documented cases worldwide — 23 documented cases 23 spyware and surveillance cases documented across the Ibero-America… Trade compliance & forced labor (UFLPA) — 4 actions documented 4 trade-compliance actions on forced labor documented; under UFLPA ar… US · the state AI regulation patchwork — 10 laws and milestones 10 state AI laws or milestones documented in the U.S.; 2026 developme… Electoral digital integrity 2026 — 13 elections profiled 13 elections profiled by digital integrity; 5 with transparent politi… Climate: the gap between pledge and action — 12 countries assessed 12 countries assessed by the Climate Action Tracker: 10 with insuffic… Content moderation: appeals and reversals — 19 documented decisions 19 appealed and reviewed moderation decisions, with their policy, ori… Public AI spending — global government contracts — 50 documented contracts 50 public AI contracts across 15 jurisdictions on 5 continents (45 wi… Campaign promises → fulfillment — 29 term evaluations 29 terms evaluated across 25 countries on five continents EU · Consolidated DSA enforcement decisions — €120M first DSA fine · X · 5 … 5 Member States referred to CJEU for insufficient DSC implementation LATAM · Digital spending in 2026 electoral camp… — $14.794M COP · highest declared … Only 8 of 13 campaigns had reported in Cuentas Claras by mid-May Ibero-America · documented public contracts wit… — 3 contracts verified with… DC registry kickoff · ongoing monthly manual sweep RSF · Press freedom in Latin America — 144 Peru's rank (the region… AR -11 · PE -14 · SV -8 · EC -31 · USA -7 AML/OFAC enforcement against banks and fintech — 418 penalties documented 418 AML/OFAC penalties documented across 177 countries and 379 regula… Corporate bankruptcy and insolvency (Chapter 11) — 4 major corporate bankrup… Corporate bankruptcies hit decade highs: over 717 in the year per S&P… High-impact litigation risk index — 4 high-impact litigations… The risk index (0-100) aggregates five objective factors —procedural … Merger control: multi-jurisdiction competition … — 9 decisions and jurisdict… Merger control diverges by jurisdiction in 2026: the Trump administra… PEPs and sanctions networks · Ibero-American graph — 40 PEP/company nodes with … Ibero-American PEP→company→sanction graph (core: Mapa del Poder, 424 … Sovereign debt distress and restructurings — 5 distress/restructuring … The IMF's 6th Global Sovereign Debt Roundtable report (April 15, 2026… Forced labor in supply chains: entity lists — 4 forced-labor exposure i… Upstream exposure intelligence densifies: the UFLPA Entity List reach… EU AI Act — designation of national authorities — 3/10/14 / 27 Member States Tracker's first event: 3 states with both authorities / 10 partial / … AI Act · Notified bodies for conformity assessment — 1 body with AI-specific a… Ecosystem 'not ready' as of Mar-2026 (standards unpublished, insuffic… Scandal → conviction gap — — milestones logged +1 mirror case: Uribe — 7 years to convict, 8 weeks to reverse, open-… Technology ↔ regulation gap — 26 regulatory milestones +1: Peru closes the generative-AI gap in ~3 years (DS 115-2025-PCM), … CNMC Spain · the Digital Services Coordinator g… — 6 documented milestones The gap becomes chronic: Congress struck down the CNMC's legal empowe… Corporate data breaches: from incident to response — 11 breaches documented +1: Canvas/Instructure, the largest known education breach (≈275M rec… Migration friction in corporate and event mobility — 3 incidents and policies … The 2026 World Cup works as a live stress test: 39 countries under fu… Power and corruption in the courts in Ibero-Ame… — 29 documented cases Jun-2026 review: Uribe updated — first-instance conviction overturned… Crypto · Licenses and authorizations by jurisdi… — 40+ CASPs with full MiCA au… July 1, 2026 cliff: the transitional regime expires (ESMA, Apr 17) wi… Data breaches · Class-action settlements — 5 settlements and mass ca… 271 million dollars across four settlements approved or with deadline… Digital regulatory risk index by country — 16 countries profiled Jun-2026 review: Brazil updated on two layers (EU adequacy Jan 26, 20… Digital services taxes (DST) by country — 3 tax-map milestones docu… About half of European OECD countries have a DST announced, proposed … Global election risk 2026: democracy and digita… — 32 elections profiled 32 electoral processes of 2026 profiled by political regime and digit… ESG · Greenwashing enforcement — 3 enforcement milestones … The legal floor arrives Sep 27, 2026 (ECGT across the 27; transpositi… EU · Digital & sustainability regulatory deadli… — 6 calendar milestones doc… Next critical deadlines: Jun 23, 2026 closes the high-risk classifica… Export controls · Entity List and advanced chips — 6 regime milestones docum… The 2026 shift: licensing for H200/MI325X and equivalents to China mo… GDPR · International transfers and adequacy dec… — 6 framework milestones do… The EU-US DPF remains in force after surviving its first judicial cha… LATAM · AI bills in legislative process — 150+ bills identified 150+ count re-verified; milestones: Peru only country with a regulate… LATAM · Judicial and regulatory sanctions on pl… — $5,2M USD · fine on X Corp. i… Paradigm shift: the STF declared Art. 19 of the Marco Civil partially… Digital political ad spending 2026 — 6 country-platform observ… AdImpact's revised projection (Jun 11): $11.6bn for the 2026 cycle — … Shadow fleet · Sanctioned vessels and enablers — 632 vessels designated by t… +46 vessels in the 20th package (Reg. 2026/506/509/511) to 632; Art. … Whistleblower awards · SEC, CFTC and equivalent… — 3 program milestones docu… The SEC awarded over $60M to 48 whistleblowers in fiscal year 2025 (2… AI Act · Sanctions regime and its actual enforc… — 0 documented AI Act fines… 0 AI Act penalties issued to date: enforcement of high-risk obligatio… Beneficial ownership transparency (UBO / CTA / … — 4 transparency milestones 4 beneficial-ownership transparency milestones documented; the EU req… Crypto industry: collapses, sanctions and convi… — 13 documented cases 13 cases of collapses, sanctions and convictions in the crypto sector… AI harms in court — litigation, rulings and set… — 103 documented cases 103 AI-related harm and rights lawsuits documented; 2026 milestones: … DMA · designated gatekeepers and real compliance — 9 documented DMA acts 9 DMA compliance actions documented against gatekeepers; 2026 develop… Documented electoral disinformation 2026 — 7 documented campaigns 7 electoral disinformation campaigns or patterns documented with open… GDPR · which national authority really sanctions — 11 authorities profiled 11 GDPR enforcement country profiles and milestones documented; 2026 … LATAM · Internet shutdowns and platform blocks — 8 documented events · 202… 8 internet shutdown and blocking episodes documented in Latin America… Operational resilience & cyber (DORA / NIS2 / SEC) — 4 regulatory milestones 4 operational-resilience milestones documented; 2026 is the first rea… Digital fines actually imposed — 61 sanctions recorded 61 high-value penalties across 18 jurisdictions and 6 continents; cov… Commercial spyware: documented cases worldwide — 23 documented cases 23 spyware and surveillance cases documented across the Ibero-America… Trade compliance & forced labor (UFLPA) — 4 actions documented 4 trade-compliance actions on forced labor documented; under UFLPA ar… US · the state AI regulation patchwork — 10 laws and milestones 10 state AI laws or milestones documented in the U.S.; 2026 developme… Electoral digital integrity 2026 — 13 elections profiled 13 elections profiled by digital integrity; 5 with transparent politi… Climate: the gap between pledge and action — 12 countries assessed 12 countries assessed by the Climate Action Tracker: 10 with insuffic… Content moderation: appeals and reversals — 19 documented decisions 19 appealed and reviewed moderation decisions, with their policy, ori… Public AI spending — global government contracts — 50 documented contracts 50 public AI contracts across 15 jurisdictions on 5 continents (45 wi… Campaign promises → fulfillment — 29 term evaluations 29 terms evaluated across 25 countries on five continents EU · Consolidated DSA enforcement decisions — €120M first DSA fine · X · 5 … 5 Member States referred to CJEU for insufficient DSC implementation LATAM · Digital spending in 2026 electoral camp… — $14.794M COP · highest declared … Only 8 of 13 campaigns had reported in Cuentas Claras by mid-May Ibero-America · documented public contracts wit… — 3 contracts verified with… DC registry kickoff · ongoing monthly manual sweep RSF · Press freedom in Latin America — 144 Peru's rank (the region… AR -11 · PE -14 · SV -8 · EC -31 · USA -7
/ trackers / ai-act-notified-bodies
EU · AI Act · Notified Bodies

AI Act · Notified bodies for conformity assessment

Registry of conformity assessment bodies accredited and notified under Regulation (EU) 2024/1689 (AI Act) for the assessment of Annex III high-risk AI systems, per Chapter IV (Arts. 28-39) and the European Commission's NANDO database. The designation process started on 2 August 2025. As of May 2026 the ecosystem is still being built: very few bodies hold AI-specific accreditation, and formal NANDO notification is a separate step from national accreditation. Diálogo Ciudadano logs each verifiable accreditation and notification, distinguishing accreditation (by national accreditation body) from notification (in NANDO by notifying authority). The tracker measures the gap between certification demand (August 2026 deadline) and the actual supply of bodies able to certify.

Snapshot · June 12, 2026
1
body with AI-specific accreditation (biometrics)
↑ Ecosystem 'not ready' as of Mar-2026 (standards unpublished, insufficient designations) — the deficit behind the Omnibus; product-regime (Annex I) precedence over Annex III clarified; Aug 2, 2026 unmoved while the Omnibus stays unpublished

Evolution

Reading the data

The AI Act requires independent bodies to certify high-risk systems before they reach the market. At the latest cut, only one body had AI-specific accreditation (biometrics): the conformity-assessment ecosystem the rule presupposes is not yet ready.

YV
Yaneth Vickari S. · Digital regulation expert · Madrid
June 3, 2026 · 2 min read

The AI Act rests on a little-visible but critical piece: notified bodies, independent entities that must assess and certify the conformity of high-risk AI systems before they reach the market. This tracker follows how many actually exist, and the provisional answer is almost none: at the latest cut, a single body held AI-specific accreditation, in the field of biometrics.

Without that network of assessors, the certification obligation the rule imposes is in practical suspension: there is no one to certify. The tracker documents the start-up of this ecosystem because its maturity is a necessary condition for the Regulation to work beyond paper.

Methodology note

Bodies with notified accreditation under Articles 28 and 39 and Annex VII of Regulation (EU) 2024/1689 are recorded, with their assessment scope. The ecosystem's status is described based on the available official documentation.

Assessments are attributed to the cited sources, never to this outlet.

Documented events (4)

March 9, 2026 NL confirmed

DEKRA: first body accredited for AI biometric systems under AI Act

DEKRA became the first body officially accredited to assess the conformity of AI biometric systems under the AI Act. The accreditation was granted by the Dutch Accreditation Council (RvA) and covers three Annex III high-risk categories: remote biometric identification, emotion recognition, and biometric categorization. It is an important but bounded milestone: the accreditation covers only biometrics, and accreditation by a national accreditation body is a prior and distinct step from formal NANDO notification. DEKRA is a global TIC body with relevant operational base in the Netherlands.

DEKRA · First Accredited Certification Body for AI Biometric Systems ↗ Biometric Update · DEKRA conformity assessment biometric AI Act ↗
January 28, 2026 EU confirmed

Digital Omnibus acknowledges notified body ecosystem is not ready

The Digital Omnibus, under discussion in the European Parliament and Council, proposes extending effective application deadlines for high-risk obligations (to December 2027 for Annex III, August 2028 for Annex I) as a direct response to the infrastructure not being ready: harmonised standards unpublished, notified bodies not designated in sufficient numbers, and many Member States having not established competent authorities. The Omnibus does not change which systems require a notified body — it only grants more time. As of May 2026 the Omnibus was not yet adopted, so the legally applicable high-risk deadline remained August 2026.

eyreACT · Notified Bodies Under the EU AI Act (Omnibus context) ↗ European Commission · Navigating the AI Act FAQ ↗
March 31, 2026 EU confirmed

The notified-body ecosystem 'not ready' as of March 2026: the deficit that justified the Omnibus and the new precedence rule

The designation process began August 2, 2025, but as of March 2026 the compliance sector's diagnosis is unanimous: the AI Act's notified-body ecosystem is not ready — harmonised standards are unpublished, designated bodies are insufficient and many states have not established their competent authorities (no notifying authority, no possible notified body). That deficit is the declared reason for the Omnibus deferral to December 2027 / August 2028. The agreement also brings a structural clarification for manufacturers: when a high-risk system is subject both to product regulation (Annex I) and an Annex III use case, the product regime's conformity assessment prevails — one assessment covers both framings. The sector's operative warning while the Omnibus remains unpublished: capacity is limited and the August 2026 deadline has not moved; anyone needing a notified body who has not engaged one 'is already late'.

eyreACT — Notified bodies under the EU AI Act: estado a marzo de 2026 ↗ MedEnvoy — The EU AI Act and notified bodies (proceso de designación) ↗
August 2, 2025 EU confirmed

AI Act notified body designation process opens

On 2 August 2025 the process formally opened for Member States to designate and notify conformity assessment bodies under the AI Act. For a body to be notified, the Member State must first have designated its notifying authority (Art. 28), and the body must have completed the Art. 39 assessment and meet Annex VII requirements. As of the process opening date, most Member States had not yet designated a notifying authority, and the harmonised standards that bodies must apply were still unpublished.

eyreACT · Notified Bodies Under the EU AI Act ↗ EU AI Risk · Notified Bodies guide ↗

Methodology

Type
event-log
Construction
DC editorial construction
Cadence
monthly

Sources consulted

  1. European Commission · NANDO database (New Approach Notified and Designated Organisations) ↗ official

    Official notified-bodies database managed by the European Commission. Filterable by legislation (Regulation 2024/1689 for the AI Act) and by country. Authoritative primary source of formal designation.

  2. AI Act · Capítulo IV · Arts. 28-39 (Notified Bodies) ↗ official

    Legal framework for notified bodies. Art. 28 (notifying authorities), Art. 31 (requirements), Art. 35 (identification numbers and public lists), Art. 43 (when third-party assessment is required).

  3. Future of Life Institute · AI Act national implementation plans ↗ civil-society

    Tracking of notifying-authority designation status by member state, a prerequisite for a body to be notified.

  4. DEKRA · primera acreditación AI Biometric Systems bajo AI Act ↗ press

    Official DEKRA statement on its accreditation by the Dutch Accreditation Council (RvA) for biometric AI systems, announced in March 2026.

  5. Biometric Update · cobertura acreditación DEKRA ↗ press

    Independent press coverage of the DEKRA accreditation for high-risk biometrics under the AI Act.

  6. Dutch Accreditation Council (RvA) ↗ official

    Dutch national accreditation body. Accredited DEKRA for biometric AI systems. Accreditation is a prerequisite for notification in NANDO.