{
  "node_id": "eu-ai-act-penalties-and-enforcement",
  "title": "EU AI Act - Penalties, Fines, and Enforcement Framework (Articles 99-101)",
  "domain": "AI Governance & Law",
  "version": "1.0.0",
  "last_updated": "2026-04-28",
  "bluf": "EU AI Act (Regulation 2024/1689) Articles 99-101 establish the penalty and enforcement framework for violations; Article 99 establishes the three-tier penalty structure: (1) up to EUR 35,000,000 or 7% of total worldwide annual turnover (whichever is higher) for violations of Article 5 prohibited AI practices; (2) up to EUR 15,000,000 or 3% of total worldwide annual turnover (whichever is higher) for violations of any other provisions of the Regulation, including violations of high-risk AI system requirements in Articles 6-49; (3) up to EUR 7,500,000 or 1.5% of total worldwide annual turnover (whichever is higher) for supply of incorrect, incomplete, or misleading information to national competent authorities or notified bodies; Article 99(6) - for SMEs including startups the relevant penalty cap is the lower amount (EUR 35M or 7% for prohibited practices; EUR 15M or 3% for other violations; EUR 7.5M or 1.5% for misleading information); Article 101 - violations of the provisions applicable to GPAI model providers are subject to fines up to EUR 15,000,000 or 3% of total worldwide annual turnover; the penalty amounts constitute maximum caps - national competent authorities must consider all relevant circumstances including the nature, gravity, and duration of the violation; the degree of responsibility of the responsible person; any action taken by the responsible person to mitigate harm; the degree of cooperation with national competent authorities; penalties apply to both providers and deployers for their respective obligations; penalties for Article 5 prohibited practice violations are the highest in the EU AI Act, reflecting the severity of absolute prohibitions on subliminal manipulation, social scoring, predictive policing based on profiling, facial scraping, emotion recognition, biometric categorisation, and real-time remote biometric identification.",
  "paywall": {
    "status": "LOCKED",
    "unlock_cost_usd": "0.01",
    "skyfire_id": "41779894-ece2-4163-9761-b3b1b76e19b0",
    "l402_paywall_url": "https://bidda.com/api/v1/vault/nodes/eu-ai-act-penalties-and-enforcement.json"
  },
  "crosswalks": {
    "_available_keys": [
      "gdpr",
      "iso_27001",
      "nist_csf"
    ],
    "_note": "Full crosswalk values included in vault response"
  },
  "dependencies": [
    "eu-ai-act-2024",
    "eu-ai-act-article-5-prohibited-practices",
    "eu-ai-act-article-113-entry-into-force-application",
    "eu-ai-act-market-surveillance-framework",
    "eu-ai-act-gpai-systemic-risk-obligations",
    "eu-ai-act-sme-startup-provisions"
  ],
  "primary_citations_count": 5
}