Auto-updating hourly
Enforcement Tracker
AI-Act and GDPR-AI fines, from the first penalty on.
Updated Aug 21, 2026
€6075.4M
in cumulative AI-related fines tracked
40
enforcement actions
22
authorities
40
actions this year
| Date | Authority | Target | Framework | Reason | Fine | Status |
|---|---|---|---|---|---|---|
| Aug 19, 2026 | National DPAsEU | AI-enabled technologies | GDPR | Biometric / facial recognition | — | Investigation open |
| Aug 19, 2026 | EUEU | AI systems | EU AI Act | Prohibited AI practices | — | Decision |
| Aug 17, 2026 | EUEU | General | EU AI Act | Prohibited AI practices | — | Investigation open |
| Aug 17, 2026 | EU AI OfficeEU | Meta | EU AI Act | High-risk non-compliance | — | Investigation open |
| Aug 17, 2026 | MassachusettsUS | Student loan company | Consumer protection and fair lending laws | Lawful basis & consent | €2.3M | Fine issued |
| Aug 15, 2026 | EU AI OfficeEU | DeepGen Ltd. | EU AI Act | Prohibited AI practices | €30M | Fine issued |
| Aug 11, 2026 | Italy's GaranteIT | Large-model training data and chatbot providers | GDPR | Biometric / facial recognition | — | Investigation open |
| Aug 10, 2026 | AI Act Enforcement TrackerEU | 27 member states | EU AI Act | Biometric / facial recognition | €138 | Decision |
| Aug 10, 2026 | DPAsEU | Mid-size companies | GDPR | Biometric / facial recognition | €5000M | Fine issued |
| Aug 8, 2026 | Dutch DPANL | Dutch Tax and Customs Administration | GDPR | Biometric / facial recognition | €3.8M | Fine issued |
| Aug 8, 2026 | EUEU | TikTok | EU AI Act, GDPR | Transparency & disclosure | €530M | Fine issued |
| Aug 6, 2026 | FTCUS | Evolv | Transparency & disclosure | — | Fine issued | |
| Aug 6, 2026 | GaranteItaly | ChatGPT | GDPR | Biometric / facial recognition | €1.2M | Fine issued |
| Aug 5, 2026 | European CommissionEU | TikTok | Digital Services Act | Protection of minors | — | Investigation open |
| Aug 5, 2026 | FTCUS | Various companies | Operation AI Comply | Transparency & disclosure | — | Fine issued |
| Aug 5, 2026 | BfDIDE | Major Bank (credit‑scoring AI) | GDPR | High-risk non-compliance | — | Decision |
| Aug 2, 2026 | EU AI OfficeEU | General-purpose AI model providers | EU AI Act | Transparency & disclosure | — | Investigation open |
| Aug 2, 2026 | EU AI OfficeEU | General-purpose AI models | EU AI Act | High-risk non-compliance | — | Fine issued |
| Aug 2, 2026 | National AuthoritiesEU | High-Risk AI Systems | EU AI Act | High-risk non-compliance | — | Fine issued |
| Aug 2, 2026 | EU AI OfficeEU | Deployers of AI systems | EU AI Act | Transparency & disclosure | — | Decision |
| Aug 2, 2026 | EU AI OfficeEU | Meta | EU AI Act | Prohibited AI practices | €35M | Fine issued |
| Aug 2, 2026 | AI OfficeEU | OpenAI, DeepSeek | EU AI Act | Transparency & disclosure | — | Investigation open |
| Aug 2, 2026 | EU AI OfficeEU | Biometric Surveillance Ltd | EU AI Act | Prohibited AI practices | €15M | Fine issued |
| Aug 2, 2026 | National Market Surveillance AuthoritiesEU | AI System Providers | EU AI Act | High-risk non-compliance | — | Investigation open |
| Aug 1, 2026 | AI OfficeEU | Deployers of AI Systems | EU AI Act | Prohibited AI practices | — | Investigation open |
| Aug 1, 2026 | EU AI OfficeEU | Meta | EU AI Act | High-risk non-compliance | €35M | Fine issued |
| Jul 31, 2026 | European Data Protection Board (EDPB)EU | EU | GDPR | Transparency & disclosure | — | Investigation open |
| Jul 31, 2026 | EU AI OfficeEU | Providers and deployers of AI systems | EU AI Act | High-risk non-compliance | — | Investigation open |
| Jul 31, 2026 | EU AI OfficeEU | Unknown | EU AI Act | High-risk non-compliance | — | Investigation open |
| Jul 29, 2026 | European AI OfficeEU | Meta | EU AI Act | High-risk non-compliance | — | Investigation open |
| Jul 28, 2026 | EU AI OfficeEU | Meta Platforms Inc. | EU AI Act | Prohibited AI practices | €45M | Fine issued |
| Jul 27, 2026 | CNILFrance | Clearview AI | GDPR | Biometric / facial recognition | €65M | Fine issued |
| Jul 24, 2026 | European CommissionEU | Digital Omnibus on AI | EU AI Act | Prohibited AI practices | — | Decision |
| Jul 23, 2026 | ICOUK | Snapchat | GDPR | Protection of minors | €15M | Fine issued |
| Jul 20, 2026 | EU AI OfficeEU | DeepGen Ltd | EU AI Act | Prohibited AI practices | €10M | Fine issued |
| Jul 20, 2026 | EDPBEU | Meta | GDPR | Transparency & disclosure | €225M | Fine issued |
| Jul 20, 2026 | Austrian DPAAT | Dun & Bradstreet Austria | GDPR | Lawful basis & consent | €2M | Fine issued |
| Jul 20, 2026 | French Data Protection Authority (CNIL)FR | Google LLC | GDPR | Transparency & disclosure | €60M | Fine issued |
| Jul 20, 2026 | EU AI OfficeEU | General-purpose AI models | EU AI Act | Prohibited AI practices | — | Investigation open |
| Jul 19, 2026 | GaranteIT | ChatGPT | GDPR | Transparency & disclosure | €1.2M | Fine issued |
Actions are compiled from data-protection authorities and public enforcement records. Amounts are shown in euros; where a fine was issued in another currency it is converted approximately. As the EU AI Act penalty regime takes effect from August 2026, AI-Act-specific actions will appear alongside the GDPR decisions listed here. Maintained for general information, not legal advice.