EU AI Act fines calculator: what is your maximum exposure?

The EU AI Act uses the GDPR playbook: fines defined as the higher of a fixed amount or a percentage of total worldwide annual turnover. The tiers live in Article 99 of Regulation (EU) 2024/1689. Enter your turnover to see the statutory ceiling for each breach type.

The three fine tiers of Article 99

• €35,000,000 or 7% of worldwide turnover — prohibited practices under Article 5 (social scoring, exploitative manipulation, banned biometric uses). Article 99(3).
• €15,000,000 or 3% of worldwide turnover — non-compliance with most operator obligations, explicitly including the Article 50 transparency obligations for providers and deployers. Article 99(4)(g).
• €7,500,000 or 1% of worldwide turnover — supplying incorrect, incomplete or misleading information to notified bodies or authorities. Article 99(5).

For SMEs and startups, each tier flips to the lower of the two amounts (Article 99(6)) — meaningful relief, but still existential money for most small companies.

How real fines get set

The ceilings are not the expected fine. Article 99(7) requires authorities to weigh: the nature, gravity and duration of the infringement; whether it was intentional or negligent; remedial action taken; prior infringements; market share and turnover; cooperation with authorities; and whether the operator self-reported. In practice — as with GDPR — first-wave enforcement against small companies tends to start with orders to comply, followed by fines for those who ignore them.

Who enforces, and from when

National market surveillance authorities enforce Article 50 against providers and deployers; penalties apply from 2 August 2026 (Article 113). There is no grace period after that date — and unlike much of the high-risk regime, the transparency obligations were never part of the delay debate.

The cheap insurance

Article 50 compliance is disclosure UX plus documentation — days of work, not quarters. Run the free 3-minute gap check, put wording from the chatbot disclosure examples in front of your users, mark generated media with C2PA credentials, and write it down using the $49 policy template pack. For the fine structure in full detail, see the penalties guide.