Changelog

1. 24 August 2026

   Weekly check, no change to the ledger. Twenty two days after enforcement powers became applicable, there are still zero fines, zero corrective orders, zero warnings and zero formal investigations under the AI Act itself, whether from the Commission AI Office, a national market surveillance authority or the EDPS. The sweep covered the Commission enforcement and AI Office pages, EUR-Lex, EDPS and EDPB, the DSA enforcement page, ten national authorities including AESIA, Bundesnetzagentur, Garante, CNIL, the Dutch AP and the Irish DPC, and the trade press. The Garante warning to Myndoor of 14 May 2026 remains the only published European decision that expressly invokes an AI Act provision, and it was issued under the GDPR. National designations stand at 15 of 27 member states; France is still not finalised, with the DDADUE digital title in first reading at the Assemblee nationale. Open watch items are unchanged: a possible Garante appeal in the OpenAI annulment, the Luka opposition proceeding, the Character.AI compliance report due around November 2026, and the Commission proceedings against X. Counts are a floor, not a ceiling.

2. 20 August 2026

   Tracker published with 18 verified records covering 2022 to 2026: every AI relevant enforcement action taken by a European authority that we could verify to a named source. As of this date there have been zero fines and zero formal investigations under the EU AI Act itself, eighteen days after enforcement powers became applicable on 2 August 2026. Every record on the tracker at launch is therefore an action under the GDPR or the Digital Services Act against an AI system, with one exception: the Garante's May 2026 warning to Myndoor, which is the first published European decision to invoke a prohibition in Article 5 of the AI Act.

3. 14 September 2026

   Weekly check, covering 24 August to 14 September 2026 (the checks of 31 August and 7 September were not run, and this entry says so). Two records added. AIT-2026-0005: the Dutch AP, with the CNIL, fined Uber 824,990,000 euro on 21 August 2026 over fully automated driver suspensions and deactivations, GDPR Article 22, the largest AI adjacent penalty in Europe and the second largest GDPR fine on record. AIT-2026-0004: the Irish DPC's inquiry of 17 February 2026 into sexualised images generated with Grok on X, children included, under GDPR Articles 5, 6, 25 and 35; it had been missing since launch. Forty three days after enforcement powers became applicable there are still zero fines, zero corrective orders, zero warnings and zero formal investigations under the AI Act itself at any primary source; a story circulating on secondary sites about first AI Office fines of 47 million euro has no primary source and is not recorded. On 31 August 2026 the Commission designated ChatGPT a very large online search engine under the DSA, the first AI assistant so designated, with compliance due by January 2027; a designation is supervision rather than enforcement, so it is noted here and not as a record. The Garante's OpenAI fine stays annulled, with the court's reasoning published on 27 March 2026 and no Cassation filing announced. The Replika appeal stays pending. Character.AI's 120 day report to the Garante falls due in November 2026. The sweep covered the Commission enforcement and AI Office pages, the AI Act Service Desk, EUR-Lex, EDPS, EDPB national news, the DSA enforcement and supervision pages, the Garante, CNIL, Dutch AP, Irish DPC and AEPD, and Curia.

   • AIT-2026-0004 X Internet Unlimited Company (XIUC)
   • AIT-2026-0005 Uber B.V. and Uber Technologies, Inc.

Last updated 14 September 2026. Every record re verified 14 September 2026. The tracker is checked every Monday, and the same day for any action under the AI Act.