Free tool

    EU AI Act fine calculator

    See the maximum fine a regulator could set for your company. Based on Article 99, updated for 2026.

    Company size

    Under 250 staff, turnover up to €50m

    Type of breach

    Art. 26 deployer duties, Art. 50 transparency

    Previous financial year, whole group

    Maximum fine

    €150,000

    Fixed amount

    €15,000,000

    3% of turnover

    €150,000

    Applies

    The lower of €15,000,000 and 3% of turnover (€150,000) applies, under Article 99(6). This is a ceiling. Regulators set the actual amount case by case.

    Free 2-minute check

    The three fine tiers

    €35 million

    7% of turnover

    Prohibited AI practices (Art. 5)

    €15 million

    3% of turnover

    Other obligations, incl. deployers (Art. 26) and transparency (Art. 50)

    €7.5 million

    1% of turnover

    Incorrect or misleading information to authorities

    How it works

    How the regulator decides the actual amount

    The figure above is the maximum. Article 99(7) lists what a regulator must weigh before setting a fine, and most of it is in your control:

    • The nature, gravity and duration of the breach, and how many people were affected
    • Whether it was intentional or negligent
    • What you did to limit the harm, and how well you cooperated
    • The technical and organisational measures you had in place
    • Whether you reported the problem yourself
    • The size, turnover and market share of your company
    What changed in 2026

    The Digital Omnibus (Regulation (EU) 2026/1744, in force since 27 July 2026) added a category between SMEs and large companies: the small mid-cap. SMCs now get the lower of the two figures for ordinary breaches and misleading information. For prohibited practices they still face the higher one.

    SMEs and start-ups keep the lower of the two figures for every type of breach. Member States must also take the economic viability of SMEs and SMCs into account when they set penalties.

    What this calculator does not cover
    • AI literacy (Article 4): Article 99 sets no fixed fine for it. Since the Omnibus it is a duty to support literacy, not to guarantee a level. National rules may still penalise breaches.
    • Providers of general-purpose AI models: their fines (Article 101) are set by the European Commission, not national regulators.
    • GDPR: fines for the personal data side of an AI system come on top, under a separate regime.
    Sources
    1. Regulation (EU) 2024/1689, the AI Act, Article 99 (EUR-Lex)
    2. Regulation (EU) 2026/1744, the Digital Omnibus on AI (EUR-Lex)
    3. European Commission: SME definition

    This tool gives general information, not legal advice. Last checked against the regulation text on 18 October 2026.