Skip to main content

Free public instrument from GAGE

The EU AI Act Enforcement Tracker

No. As of August 2026, no fine has been issued under the EU AI Act, whose enforcement powers began on 2 August 2026. This tracker records 18 verified AI enforcement actions in Europe: 80.91 million euro in confirmed fines, 5 million euro under appeal, 15 million euro annulled by a court, across 6 jurisdictions. Every entry is dated and sourced.

18
Actions on record

3 open investigations

€80.9M
Confirmed fines

€5M under appeal, €15M annulled

0
Fines under the AI Act

Enforcement powers live since 2 August 2026

6
Jurisdictions

12 organisations, 7 authorities

As of August 2026, the GAGE EU AI Act Enforcement Tracker records 18 enforcement actions against AI systems in Europe, 80.91 million euro in confirmed fines, 5 million euro under appeal, and 0 fines issued under the AI Act itself. Counts are a floor, not a ceiling: authorities publish on their own timetable and some decisions are never announced.

Confirmed AI enforcement fines in Europe, by year

Bars are fines confirmed in that year. The gold line is the running total. Amounts annulled by a court are excluded from both, which is why the line never counts the 15 million euro the Court of Rome struck down in March 2026.

0€25M€50M€75M€100M20222 actions20233 actions20247 actions20253 actions20263 actions€80.9M totalFINES ISSUED UNDER THE AI ACT ITSELF: 0

The closest thing to an AI Act action so far

Garante warns Myndoor over workplace emotion inference, citing AI Act Article 5(1)(f)

First published decision by a European authority that expressly invokes a prohibition in Article 5 of the AI Act. It is a warning, not a penalty, and the authority that issued it is a data protection authority rather than a designated market surveillance authority. The count of fines under the AI Act is still 0.

The ledger

Every enforcement action, newest first

18 records from 2022 to 2026. Each row opens a page carrying the full decision, the provisions it rests on, its timeline including any appeal, and the sources it was verified against. Filtering narrows what you see; it never changes what is here.

Showing all 18 records.

Every recorded AI enforcement action in Europe, with date, authority, target, action type, regime, amount and status.
DateAuthorityTargetActionRegimeAmountStatus
2026-07-03GaranteItalyCharacter Technologies, Inc.Character.AI companion chatbot platformFineGDPR€158KConfirmed
2026-05-14GaranteItalyMyndoor S.r.l.Slack and Microsoft Teams plug in inferring employee stress from message contentWarningGDPR, AI ActConfirmed
2026-01-26CommissionEuropean UnionX (Twitter International Unlimited Company)Grok, deployed inside the X platform and as its recommender systemInvestigationDSAConfirmed
2025-04-11Irish DPCIrelandX Internet Unlimited CompanyGrok large language modelsInvestigationGDPRConfirmed
2025-04-10GaranteItalyLuka Inc.Replika AI companionFineGDPR€5MUnder appeal
2025-01-30GaranteItalyHangzhou DeepSeek Artificial Intelligence Co. Ltd and Beijing DeepSeek Artificial Intelligence Co. LtdDeepSeek assistantBanGDPRConfirmed
2024-11-02GaranteItalyOpenAI, L.L.C.ChatGPTFineGDPR€15MAnnulled
2024-10-24GaranteItalyFoodinho S.r.l. (Glovo group)Rider scoring, assignment and identity verification systemsFineGDPR€5MConfirmed
2024-09-12Irish DPCIrelandGoogle Ireland LimitedPathways Language Model 2 (PaLM 2)InvestigationGDPRConfirmed
2024-09-04Irish DPCIrelandTwitter International Unlimited CompanyGrok large language models, trained on public posts from XInterim measureGDPRConfirmed
2024-05-23EDPBEuropean UnionOpenAI, L.L.C.ChatGPTOtherGDPRConfirmed
2024-05-16Dutch DPANetherlandsClearview AI Inc.Clearview AI facial recognition search engineFineGDPR€30.5MConfirmed
2024-04-29Austrian DSBAustriaOpenAI, L.L.C.ChatGPTComplaintGDPRConfirmed
2023-12-11GaranteItalyComune di TrentoMarvel, Protector and Precrisis research projects: AI analysis of street camera and microphone feedsFineGDPR€50KConfirmed
2023-04-13CNILFranceClearview AI Inc.Clearview AI facial recognition search engineCorrective orderGDPR€5.2MConfirmed
2023-03-30GaranteItalyOpenAI, L.L.C.ChatGPTInterim measureGDPRConfirmed
2022-10-17CNILFranceClearview AI Inc.Clearview AI facial recognition search engineFineGDPR€20MConfirmed
2022-02-10GaranteItalyClearview AI Inc.Clearview AI facial recognition search engineFineGDPR€20MConfirmed

Answers

What people ask about EU AI Act enforcement

Has anyone been fined under the EU AI Act?

No. As of August 2026, no fine has been issued under the EU AI Act, whose enforcement powers began on 2 August 2026. This tracker records 18 verified AI enforcement actions in Europe: 80.91 million euro in confirmed fines, 5 million euro under appeal, 15 million euro annulled by a court, across 6 jurisdictions. Every entry is dated and sourced.

How many EU AI Act enforcement actions have there been?

1 under the AI Act itself. This tracker records 18 AI enforcement actions in Europe as of August 2026, of which 1 expressly invoke a provision of the AI Act and the rest are actions under the GDPR or the Digital Services Act against AI systems. 3 investigations are open. Treat the count as a floor, not a ceiling: authorities publish on their own timetable.

What is the largest AI fine in Europe?

30.5 million euro, imposed by the Dutch data protection authority on Clearview AI Inc. and announced on 3 September 2024. It is a GDPR fine, not an AI Act fine. The largest fine ever announced against a generative AI provider in Europe was 15 million euro against OpenAI in December 2024, and the Court of Rome annulled it in full on 18 March 2026.

What are the fines under the EU AI Act?

Three national tiers under Article 99: up to 35 million euro or 7 percent of worldwide turnover for prohibited practices under Article 5, up to 15 million euro or 3 percent for other operator obligations including the Article 50 transparency duties, and up to 7.5 million euro or 1 percent for supplying incorrect or misleading information to authorities. Providers of general purpose AI models face a separate Commission tier under Article 101, capped at 15 million euro or 3 percent. The 7 percent ceiling does not apply to model providers, which is the single most repeated error about the Act.

Who enforces the EU AI Act?

Three layers. The European Commission, through the AI Office, has exclusive competence over providers of general purpose AI models under Article 88 and can fine them under Article 101. National market surveillance authorities designated under Article 70 enforce everything else, including the Article 5 prohibitions and the Article 50 transparency duties. The European Data Protection Supervisor enforces against the Union's own institutions under Article 100. Data protection authorities act in parallel under the GDPR, and they are the authorities that have actually taken every AI enforcement action in Europe so far: 7 authorities appear on this tracker.

When did EU AI Act enforcement start?

Enforcement began in stages. The Article 5 prohibitions and the Article 4 AI literacy duty have applied since 2 February 2025. General purpose model obligations and the national penalty regime in Chapter XII applied from 2 August 2025, except Article 101. On 2 August 2026 the Article 50 transparency duties, the Commission's Article 101 fining power and the AI Office's full toolkit under Articles 88 to 94 all became applicable. The Digital Omnibus, Regulation (EU) 2026/1744, moved the high risk dates to 2 December 2027 and 2 August 2028.

Which countries have designated AI Act authorities?

15 of the 27 member states have designated a market surveillance authority in national law as of August 2026, according to the register on this tracker. Designation and notification are different steps: the European Parliamentary Research Service recorded eight of 27 member states as having notified a single point of contact as of March 2026. The deadline in Article 70 was 2 August 2025. Every country's status, authority and legal basis has its own page here.

Every surface

Cut the record the way you need it

By provision of the AI Act

By authority

By jurisdiction where the action was taken

By sector

Every member state, designation status and authority

Every record page

The corrected timeline

When each part of the AI Act starts to bind

The Digital Omnibus is no longer a proposal. It is Regulation (EU) 2026/1744, published in the Official Journal on 24 July 2026 and in force since 27 July 2026, and it moved the high risk dates. Any timeline still showing Annex III high risk systems binding in August 2026 is out of date.

  1. In force

    Entry into force

    Regulation (EU) 2024/1689 enters into force.

  2. In force

    Prohibitions bind

    Article 5 prohibited practices and the Article 4 AI literacy duty apply.

  3. In force

    Models and penalties

    General purpose model obligations, governance, and the Chapter XII penalties apply, except Article 101. Member states were due to designate their market surveillance authorities.

  4. In force

    Enforcement era begins

    Article 50 transparency applies, the Commission's Article 101 fining power over model providers becomes active, and the AI Office's full toolkit under Articles 88 to 94 switches on.

  5. Future

    New prohibitions

    Two further Article 5 prohibitions apply, covering AI generated non consensual intimate imagery and child sexual abuse material. The Article 50(2) marking grace period ends for pre existing generative systems.

  6. Future

    Annex III high risk

    Standalone high risk systems under Annex III start to bind, deferred from 2 August 2026 by the Digital Omnibus.

  7. Future

    Annex I high risk

    High risk systems embedded in regulated products under Annex I start to bind, deferred from 2 August 2027.

  8. Future

    Legacy public systems

    High risk systems already in use by public authorities must be brought into compliance.

Take the data

The whole dataset, free, in three formats

Licensed CC BY 4.0. Use it in an article, a paper, a slide or a product. The only condition is attribution, and the citation page gives you the line to paste.

How the tracker is built, what counts as an action, and what the counts do not claim: the method page. Every change we have made, dated: the changelog. Something missing or wrong is a bug, and we want to hear about it.

Cite this page

Free to reuse under CC BY 4.0, with attribution.

In a sentence
According to the GAGE EU AI Act Enforcement Tracker (as of 20 August 2026), eu ai act enforcement tracker.
APA
GAGE (Global Academy of Generative-AI Education). (2026). EU AI Act Enforcement Tracker. EU AI Act Enforcement Tracker. Retrieved 20 August 2026, from https://www.gage.academy/tools/eu-ai-act-enforcement-tracker
MLA
"EU AI Act Enforcement Tracker." EU AI Act Enforcement Tracker, GAGE (Global Academy of Generative-AI Education), 20 August 2026, https://www.gage.academy/tools/eu-ai-act-enforcement-tracker.
Chicago
GAGE (Global Academy of Generative-AI Education). "EU AI Act Enforcement Tracker." EU AI Act Enforcement Tracker. Last modified 20 August 2026. https://www.gage.academy/tools/eu-ai-act-enforcement-tracker.
Permalink
https://www.gage.academy/tools/eu-ai-act-enforcement-tracker

Last updated . Every record re verified . The tracker is checked every Monday, and the same day for any action under the AI Act.

Powered by GAGE, free EU AI Act tools from the Global Academy of Generative-AI Education