Article 70 AI Act obliges the Member States to ‘establish at least one notifying and at least one market surveillance authority.’ Article 74(8) AI Act provides that ‘Member States shall designate as market surveillance authorities for the purposes of this Regulation either the compete nt data protection supervisory authorities under Regulation (EU) 2016/679 or Directive (EU) 2016/680, or any other authority designated pursuant to the same conditions laid down in Articles 41 to 44 of Directive (EU) 2016/680.’
This comes on top of the designation of the authorising authority, which the Member State will have to establish before it can authorise the use of real-time RBI systems for any of the objectives listed in Article 5(1)(h)(i) to (iii) AI Act.