{"slug": "eu-ai-act-fines-35-million-eur-or-7-complete-breakdown", "title": "EU AI Act Fines: 35 Million EUR or 7% — Complete Breakdown", "summary": "The EU AI Act establishes a tiered penalty system under Article 99, with maximum fines of €35 million or 7% of global annual turnover for prohibited practices, €15 million or 3% for high-risk and transparency violations, and €7.5 million or 1% for supplying misleading information to authorities. The European AI Office begins enforcement on August 2, 2026, and has indicated it will pursue a graduated approach, starting with information requests and corrective-action orders before escalating to financial penalties. The AI Act's penalty ceiling exceeds GDPR's €20 million or 4% cap, ranking it among the highest in EU digital regulation.", "body_md": "*This article was drafted with AI assistance and reviewed for factual accuracy. AI-origin labeling applies under Article 50 of the EU AI Act.*\n\n**What Are the EU AI Act Penalty Structures?**\n\nThe EU AI Act establishes a tiered penalty system with maximum fines ranging from 7.5 million EUR to 35 million EUR depending on the violation category and the offending party’s annual turnover (European Commission, 2024). The three operator tiers under Article 99 are 35 million EUR or 7% for prohibited practices, 15 million EUR or 3% for high-risk and transparency obligations, and 7.5 million EUR or 1% for supplying incorrect or misleading information to authorities. For companies, the higher of the fixed amount or a percentage of global annual turnover applies. These penalties rank among the highest in EU digital regulation, comparable to GDPR fine levels.\n\nThe European AI Office begins enforcement on August 2, 2026, and has indicated it will pursue a graduated approach — starting with information requests and corrective action orders before escalating to financial penalties. However, intentional non-compliance or failure to cooperate may trigger direct penalty proceedings (European Commission, 2024).\n\n**Penalty Tiers and Maximum Amounts**\n\nThe following penalty tiers are established under Article 99 of the EU AI Act:\n\nNon-compliance with prohibited practices (Article 5): €35M fixed or 7% of global annual turnover — applies to any organization.\n\nNon-compliance with high-risk system obligations: €15M fixed or 3% of global annual turnover — applies to providers and deployers.\n\nNon-compliance with transparency obligations (Article 50): €15M fixed or 3% of global annual turnover — applies to providers and deployers.\n\nFailure to fulfill operator obligations (Articles 16, 22–26, 31, 33–34; includes cooperation and corrective-action duties): €15M fixed or 3% of global annual turnover — applies to providers, deployers, and other operators.\n\nSupplying incorrect, incomplete or misleading information to authorities (Article 99(5)): €7.5M fixed or 1% of global annual turnover — applies to any organization.\n\n**How Fines Are Calculated**\n\nThe AI Office follows a structured methodology for determining penalty amounts within each tier:\n\n**Base amount determination**\n\nThe starting point is determined by the severity of the violation and the applicable tier maximum. The final amount is set based on the circumstances of the case — including the aggravating and mitigating factors below — with larger organizations generally facing higher absolute penalties (European Commission, 2024).\n\n**Aggravating factors**\n\nThe following factors may increase the penalty above the base (European Commission, 2024):\n\nRepeat violations within the previous 5 years\n\nIntentional or reckless non-compliance\n\nFailure to cooperate with the AI Office during investigation\n\nNon-compliance that results in actual harm to individuals\n\nConcealment or destruction of relevant evidence\n\n**Mitigating factors**\n\nThe following factors may reduce the penalty below the base (European Commission, 2024):\n\nVoluntary disclosure of non-compliance before enforcement action begins\n\nPrompt corrective action within 30 days of notification\n\nEffective cooperation with AI Office investigation\n\nFirst-time violation with no prior enforcement history\n\nImplementation of compliance measures exceeding minimum requirements\n\n**Comparison with Other EU Digital Regulation Penalties**\n\nThe AI Act's penalty framework sits alongside other EU digital regulations:\n\nEU AI Act: €35M fixed or 7% — effective since August 2026 (GPAI).\n\nGDPR: €20M fixed or 4% — effective since May 2018.\n\nDigital Services Act: 6% of global turnover — effective since February 2024.\n\nDigital Markets Act: 10% of global turnover — effective since March 2024.\n\nData Act: set by Member States (Art. 40) — effective since September 2025\n\nThe EU AI Act's penalty ceiling of 35 million EUR or 7% of turnover places it above GDPR in both absolute and relative terms.\n\n**Enforcement Priorities for 2026-2027**\n\nThe AI Office has communicated its enforcement priorities:\n\nQ3-Q4 2026 (GPAI enforcement)\n\nPriority 1: GPAI models with systemic risk (>10^25 FLOPs). Priority 2: GPAI providers that have not engaged with AI Office information requests.\n\nQ1-Q2 2027 (Transition period)\n\nFocus shifts to: prohibited practices investigations, high-risk system classification guidance, and preparatory enforcement actions for the December 2027 high-risk deadline.\n\nQ3-Q4 2027 (Full enforcement)\n\nHigh-risk AI system obligations become enforceable. The first phase of enforcement is expected to prioritize systems in critical infrastructure, law enforcement, and employment domains.\n\n**\n\nFrequently Asked Questions**\n\nWhich turnover figure is used for penalty calculation?\n\nGlobal annual turnover of the preceding financial year. For corporate groups, the turnover of the ultimate parent company is used if the parent exercises control over the subsidiary's AI activities (European Commission, 2024).\n\nCan multiple penalties be imposed for the same incident?\n\nThe AI Act prohibits double jeopardy — an organization cannot be penalized twice for the same violation. However, separate violations arising from the same incident (e.g., both transparency non-compliance and failure to cooperate) can each carry independent penalties (European Commission, 2024).\n\nDo fines apply to non-EU companies?\n\nYes. The EU AI Act applies extraterritorially. Non-EU providers whose AI system outputs are used in the EU are subject to the same penalty framework (European Commission, 2024). The AI Office coordinates with national supervisory authorities and third-country regulators, with mechanisms for cross-border enforcement established under the Act.\n\nWhat is the appeals process for AI Act fines?\n\nOrganizations may appeal penalty decisions to the European AI Board, with further appeal available to the Court of Justice of the European Union (European Commission, 2024). The AI Board has established procedures for handling appeals as part of its implementing acts.\n\nSources\n\nEuropean Commission. (2024). Regulation (EU) 2024/1689 of the European Parliament and of the Council. Official Journal of the European Union. [https://eur-lex.europa.eu/eli/reg/2024/1689](https://eur-lex.europa.eu/eli/reg/2024/1689)", "url": "https://wpnews.pro/news/eu-ai-act-fines-35-million-eur-or-7-complete-breakdown", "canonical_source": "https://dev.to/char-z-ai/eu-ai-act-fines-35-million-eur-or-7-complete-breakdown-3goi", "published_at": "2026-09-10 21:25:59+00:00", "updated_at": "2026-09-10 21:42:10.410351+00:00", "lang": "en", "topics": ["ai-policy", "ai-safety", "artificial-intelligence"], "entities": ["European Commission", "European AI Office", "EU AI Act", "GDPR", "Digital Services Act", "Digital Markets Act", "Data Act"], "alternates": {"html": "https://wpnews.pro/news/eu-ai-act-fines-35-million-eur-or-7-complete-breakdown", "markdown": "https://wpnews.pro/news/eu-ai-act-fines-35-million-eur-or-7-complete-breakdown.md", "text": "https://wpnews.pro/news/eu-ai-act-fines-35-million-eur-or-7-complete-breakdown.txt", "jsonld": "https://wpnews.pro/news/eu-ai-act-fines-35-million-eur-or-7-complete-breakdown.jsonld"}}