Society GUIDE
EU AI Act Penalties and Fines
The AI Act sets maximum administrative-fine tiers and requires Member States to establish effective, proportionate and dissuasive penalties.
On this page3 min read
Overview
The applicable ceiling depends on the infringement and operator; fines are case-specific, with special lower-of rules for SMEs and specified treatment for small mid-cap firms.
Deep Dive
Article 99 requires Member States to establish penalty and enforcement rules for infringements by operators. They may include administrative fines, warnings and non-monetary measures. Penalties must be effective, proportionate and dissuasive; when imposing them, national authorities must take account of the interests and economic viability of SMEs, including startups, and small mid-cap enterprises (SMCs).
The regulation sets maximum tiers. Non-compliance with Article 5 prohibited practices can draw up to EUR 35 million or, for an undertaking, 7% of preceding-year total worldwide annual turnover, whichever is higher. For listed operator and notified-body duties outside Article 5—including specified provider, deployer, representative, importer, distributor and Article 50 transparency obligations—the ceiling is EUR 15 million or 3%, whichever is higher. Incorrect, incomplete or misleading information supplied to a notified body or national competent authority in response to a request has a ceiling of EUR 7.5 million or 1%, whichever is higher. For SMEs, the fine is capped at whichever of the applicable fixed amount or percentage is lower. SMCs receive that lower-of treatment for paragraphs 4 and 5.
These are maximum ceilings, not automatic penalties or predictions of an actual case. Authorities consider circumstances such as nature, gravity, duration, consequences, affected people, operator size, cooperation, responsibility, intent or negligence and harm mitigation. Member States determine rules for fines against public authorities and how fines are imposed within their legal systems. Article 101 separately authorizes Commission fines for GPAI providers of up to EUR 15 million or 3% of worldwide turnover, whichever is higher, in specified intentional or negligent circumstances. That separate power is not interchangeable with the general national tiers.
Strategic Impact
Risk and safety
Catastrophic and everyday AI harms both depend on who understands the risks and who can act.
Clearer decisions
Public and professional literacy shapes whether strong safety policy is politically possible.
Cutting through hype
Clear explanations reduce capture by hype, lab PR, and vague ethics theater.
The Future of EU AI Act Penalties and Fines
The enforcement framework includes Commission guidance, national penalty rules and a distinct AI Office role for GPAI models. Regulation 2026/1744 amended wording on penalty treatment and SMCs, so older summaries may show an incomplete SME-only account. Fine ceilings remain maxima; Member State rules and case facts shape actual decisions. Operators should monitor both national penalty rules and Commission enforcement guidance. The consolidated act and the authority’s procedural notices determine the applicable route; a maximum figure alone cannot predict the result of a case.
Real-World Implementation
A provider assessing exposure distinguishes a prohibited-practice violation from a failure to meet another listed operator duty before estimating the maximum tier.
A small enterprise calculates both the fixed-euro and turnover-based ceilings because the statute applies the lower amount to SMEs.
A market-surveillance authority considers seriousness, duration, affected people, cooperation, responsibility and mitigation before setting an individual fine.
A GPAI provider responds to an AI Office information request, knowing that Commission fines under Article 101 are a separate route.
Risks & Guardrails
Treating existential risk as sci-fi while capability compounds.
Confusing surface product safety with alignment under high autonomy.
Leaving non-English and non-expert audiences with only low-quality sources.
Implementation Roadmap
Separate product harms, misuse, and loss-of-control / misalignment risks.
Ask what evidence would change your view on timelines and severity.
Prefer primary sources and concrete evals over marketing claims.
Identify one action path: career, policy, funding, or skills — not only awareness.
Keep Exploring
Free newsletter
Keep up with AI in 3 minutes a day
One short email each weekday with the three AI stories that actually matter. Free forever, no ads.
One email each weekday. Unsubscribe in one click. We never sell or share your address.
Test yourself
Take the EU AI Act Penalties and Fines quiz
Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.
Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation
Frequently asked questions
What is EU AI Act Penalties and Fines?
The AI Act sets maximum administrative-fine tiers and requires Member States to establish effective, proportionate and dissuasive penalties. The applicable ceiling depends on the infringement and operator; fines are case-specific, with special lower-of rules for SMEs and specified treatment for small mid-cap firms.
Which ceiling applies to an Article 5 prohibited-practice violation?
Article 99(3) sets the highest listed tier for prohibited practices.
Which Article 99 tier generally covers listed operator or notified-body duties outside Article 5?
Article 99(4) uses the EUR 15 million or 3% ceiling for specified obligations.
How is an SME’s fine capped under Article 99(6)?
For SMEs including startups, each applicable fine is up to whichever of the amount or percentage is lower.
What SMC treatment does the amended Article 99 add?
The amendment adds lower-of treatment for SMCs under paragraphs 4 and 5.
Does the largest listed maximum mean an authority automatically imposes that amount?
The figures are ceilings; the authority determines an individual amount considering statutory factors.
Keep learning
Related guides
More guides picked for this topic