Auto-updating hourly
Enforcement Tracker
AI-Act and GDPR-AI fines, from the first penalty on.
Updated Jul 27, 2026
€2219.8M
in cumulative AI-related fines tracked
40
enforcement actions
19
authorities
40
actions this year
| Date | Authority | Target | Framework | Reason | Fine | Status |
|---|---|---|---|---|---|---|
| Aug 2, 2026 | EU AI OfficeEU | High-risk AI system providers | EU AI Act | High-risk non-compliance | — | Investigation open |
| Aug 2, 2026 | EU AI OfficeEU | General-purpose AI models | EU AI Act | High-risk non-compliance | — | Investigation open |
| Aug 1, 2026 | EU AI OfficeEU | Meta | EU AI Act | High-risk non-compliance | €35M | Fine issued |
| Jul 27, 2026 | CNILFrance | Clearview AI | GDPR | Biometric / facial recognition | €65M | Fine issued |
| Jul 26, 2026 | DLA PiperEU | Various | EU AI Act | Prohibited AI practices | €7.5M | Fine issued |
| Jul 21, 2026 | Marko MarkovicEU | General AI systems | EU AI Act | High-risk non-compliance | — | Decision |
| Jul 20, 2026 | Irish DPCIE | TikTok | GDPR | Protection of minors | €530M | Fine issued |
| Jul 20, 2026 | EU AI OfficeEU | General-purpose AI models | EU AI Act | Prohibited AI practices | — | Investigation open |
| Jul 19, 2026 | GaranteIT | ChatGPT | GDPR | Transparency & disclosure | €1.2M | Fine issued |
| Jul 19, 2026 | EUEU | GPAI models providers | EU AI Act | High-risk non-compliance | €15M | Fine issued |
| Jul 17, 2026 | CNILFR | Meta | GDPR | Biometric / facial recognition | €150M | Fine issued |
| Jul 17, 2026 | Irish DPCIE | TikTok | GDPR | Transparency & disclosure | €530M | Fine issued |
| Jul 17, 2026 | EU | OpenAI | GDPR | High-risk non-compliance | €15M | Fine issued |
| Jul 17, 2026 | Dutch Data Protection AuthorityNL | Dutch Tax and Customs Administration | GDPR | Biometric / facial recognition | €3.8M | Fine issued |
| Jul 16, 2026 | Swedish DPA (IMY)SE | Clearview AI | GDPR | Biometric / facial recognition | €250K | Fine issued |
| Jul 16, 2026 | ICOUK | Police | UK GDPR | Biometric / facial recognition | — | Investigation open |
| Jul 14, 2026 | EUEU | High-risk AI systems | EU AI Act | High-risk non-compliance | — | Investigation open |
| Jul 13, 2026 | AI OfficeEU | Meta | EU AI Act | Prohibited AI practices | €45M | Fine issued |
| Jul 5, 2026 | EAIBEU | DragonChip Co. | EU AI Act | Prohibited AI practices | — | Investigation open |
| Jul 1, 2026 | Foley & LardnerGlobal | Global AI regulation compliance | EU AI Act, GDPR | High-risk non-compliance | — | Decision |
| Jul 1, 2026 | EU AI OfficeEU | AI System Providers | EU AI Act | High-risk non-compliance | — | Investigation open |
| Jul 1, 2026 | EU AI OfficeEU | Unknown | EU AI Act | Prohibited AI practices | — | Investigation open |
| Jul 1, 2026 | EU AI OfficeEU | AI Deployers | EU AI Act | Transparency & disclosure | — | Investigation open |
| Jul 1, 2026 | EU AI OfficeEU | Meta AI | EU AI Act | High-risk non-compliance | — | Investigation open |
| Jul 1, 2026 | EU AI OfficeEU | Meta | EU AI Act | High-risk non-compliance | — | Investigation open |
| Jul 1, 2026 | OfcomUK | Social media company | OSA | Prohibited AI practices | — | Investigation open |
| Jul 1, 2026 | EU AI OfficeEU | OpenAI | EU AI Act | Prohibited AI practices | — | Investigation open |
| Jul 1, 2026 | Luxembourg CNPDLU | Amazon Europe Core | GDPR | Lawful basis & consent | €746M | Fine issued |
| Jun 25, 2026 | GaranteIT | Italian startup | GDPR | High-risk non-compliance | €0 | Fine issued |
| Jun 20, 2026 | EU AI OfficeEU | DeepVision Ltd. | EU AI Act | Unlawful data scraping | — | Investigation open |
| Jun 15, 2026 | ICOUK | Amazon | GDPR | Biometric / facial recognition | €7M | Fine issued |
| Jun 15, 2026 | ICOUK | Meta Platforms | GDPR | Protection of minors | €5.7M | Fine issued |
| Jun 5, 2026 | ICOUK | Various AI developers | GDPR | Prohibited AI practices | — | Investigation open |
| Jun 1, 2026 | Dutch DPANL | Dutch Tax and Customs Administration | GDPR | Biometric / facial recognition | €3.8M | Fine issued |
| Jun 1, 2026 | European AI OfficeEU | AI system importer | EU AI Act | High-risk non-compliance | €15M | Fine issued |
| May 12, 2026 | EU AI OfficeEU | AI‑driven credit‑scoring platform | EU AI Act | High-risk non-compliance | — | Decision |
| Apr 20, 2026 | GaranteIT | Poste Italiane and Postepay | GDPR | Transparency & disclosure | €12.5M | Fine issued |
| Apr 1, 2026 | GaranteIT | Intesa Sanpaolo | GDPR | Unlawful data scraping | €31.8M | Fine issued |
| Mar 29, 2026 | Italian DPA (Garante)IT | Deliveroo | GDPR | Lawful basis & consent | €250K | Fine issued |
| Mar 19, 2026 | EDPBEU | Multiple EU companies | GDPR | Transparency & disclosure | — | Investigation open |
Actions are compiled from data-protection authorities and public enforcement records. Amounts are shown in euros; where a fine was issued in another currency it is converted approximately. As the EU AI Act penalty regime takes effect from August 2026, AI-Act-specific actions will appear alongside the GDPR decisions listed here. Maintained for general information, not legal advice.