We identify the band
Depending on the type of infringement, art. 99.3, 99.4 or 99.5 sets a different fixed amount in euros and a different percentage of turnover: not all infringements weigh the same.
Herramienta · Reglamento (UE) 2024/1689, art. 99
AI Act fine calculator: the amounts in art. 99
Enter the type of infringement, your worldwide annual turnover and whether your company is an SME. We return the maximum fine under art. 99 of Regulation (EU) 2024/1689, as worded after Regulation (EU) 2026/1744. Watch the next step: in Spain, the law designating the market surveillance authority and setting out the sanctioning procedure has not been passed yet.
2 August 2026 is the general date of application of Regulation (EU) 2024/1689; the Chapter III requirements for Annex III high-risk systems are deferred to 2 December 2027, and those of Annex I to 2 August 2028, by Regulation (EU) 2026/1744 (Digital Omnibus on AI), in force since 27 July 2026.
What it does: based on the type of art. 99 infringement (prohibition under art. 5, breach of the operational obligations of arts. 16, 22 to 26, 31, 33, 34 or 50, or misleading information to a notified body or competent authority), your worldwide annual turnover and whether your company is an SME or a start-up, it works out the maximum fine that Regulation (EU) 2024/1689 allows, applying the criterion of art. 99.6, which for SMEs and start-ups allows the fine to be by the percentage or by the amount, whichever is lower —paragraph 6 says «may be»: it is a power of the authority, not an automatic right—, while for all other companies the HIGHER amount governs.
Who it is for:finance directors, legal directors and management who need to size the real economic risk of an AI Act breach before deciding how much to invest in their compliance plan.
What changed on 27 July 2026: the Reglamento (UE) 2026/1744(Digital Omnibus on AI)does not touch the amountsin paragraphs 3, 4 and 5 of art. 99, but it does reform the article on three points worth keeping in mind. One: theparagraph 1, replaced, expressly incorporatesadvertencias y otras medidas no pecuniariasalongside administrative fines, and requires Member States to take into account the interests of SMEs, start-ups andsmall mid-cap companies, as well as their economic viability — that is, a fine is not the only possible response. Two: theparagraph 4gains aletra d bis), which adds to that band the breach of the obligations of providers and operators under art. 25, paragraphs 2 and 4. Three: a newparagraph 6 bisextends to small mid-cap companies the lower-amount criterion, butonly in paragraphs 4 and 5, not in paragraph 3: for the prohibited practices of art. 5 there is no reduction by company size.
This tool is indicative and does not constitute professional advice.It works out the LEGAL CAP of the fine under art. 99, not the amount the authority would actually impose: art. 99.7 requires weighing the nature, gravity and duration of the infringement, cooperation with the authorities, the technical and organisational measures adopted, intent, and mitigation actions — factors that can substantially reduce the real amount within that maximum. Check your situation with the Cumplimiento AI Act service from Summum Consultoría or with a professional before acting.
How the calculationworks.
Method · four steps, in cascadeWe compare fixed amount and percentage
We work out the result of applying that percentage to your worldwide turnover and compare it with the fixed amount in euros of the same band.
We apply the SME criterion
Art. 99.6 allows that, for SMEs and start-ups, the fine may be by the percentage or by the amount, whichever is lower: its wording is «may be», that is, a power of the authority and not an automatic right to the lower figure. All other companies get the HIGHER one. Regulation (EU) 2026/1744 added aparagraph 6 biswith the same criterion forsmall mid-cap companies, but only as regards paragraphs 4 and 5 — not paragraph 3.
We flag the nuances
Art. 99.7 weighs cooperation, technical and organisational measures, intent and mitigation: what we work out is the legal cap, not necessarily the final amount.
Fuentes
- Regulation (EU) 2024/1689, art. 99, para. 3 (prohibited practices under art. 5: up to €35,000,000 or 7% of worldwide turnover) — EUR-Lex (consultado 17-07-2026)
- Regulation (EU) 2024/1689, art. 99, para. 4 (other obligations: up to €15,000,000 or 3%) — EUR-Lex (consultado 17-07-2026)
- Regulation (EU) 2024/1689, art. 99, para. 5 (incorrect, incomplete or misleading information: up to €7,500,000 or 1%) — EUR-Lex (consultado 17-07-2026)
- Regulation (EU) 2024/1689, art. 99, para. 6 (reduced regime for SMEs and start-ups: the fine «may be» by the lower amount) — EUR-Lex (consultado 17-07-2026)
- Regulation (EU) 2024/1689, art. 99, para. 7 (grading criteria: nature, gravity and duration; cooperation; technical and organisational measures; intent; mitigation) — EUR-Lex (consultado 17-07-2026)
- Royal Decree 729/2023, of 22 August, approving the Statute of the Spanish Agency for the Supervision of Artificial Intelligence (AESIA) — BOE-A-2023-18911 (BOE, 2-sep-2023, consultado 17-07-2026)
- Resolution of 25 August 2025, of AESIA, on delegation of powers — BOE-A-2025-18640 (consultado 17-07-2026)
- Draft Organic Law on the good use and governance of artificial intelligence, file 121/000096 — Spanish Congress of Deputies(BOCG, Series A, no. 97-1, of 12 June 2026; at the amendments stage, deadline extended to 2 September 2026. It carries the same three amounts of art. 99 and adds a fourth category of minor infringements, up to €500,000 or 0.5%, not provided for in the European Regulation. Accessed 30 July 2026)
- Regulation (EU) 2026/1744 of the European Parliament and of the Council, of 8 July 2026, Digital Omnibus on AI — EUR-Lex(OJ L, 2026/1744, of 24 July 2026; in force since 27 July 2026. Its art. 1, point 38, replaces art. 99, paragraph 1, adds point (d bis) to paragraph 4 and adds paragraph 6 bis. Accessed 30 July 2026)
- Summum Consultoría — AI Act compliance (legal angle: diagnosis, risk classification and compliance plan)
- Summum IA — technical AI Act (the technical controls that keep you away from the fine)
- Summum Calidad — Implementing ISO 42001 (the diligence and organisational measures argument under art. 99.7)
- AI Act classifier: your role and your obligations, with dates (companion tool)
Verification note: the content of each paragraph of art. 99 was checked on 30 July 2026 against the official text published in the Official Journal of the European Union, downloaded from EUR-Lex, of the two applicable rules: Regulation (EU) 2024/1689 and Regulation (EU) 2026/1744, which amends its art. 99 (paragraph 1 replaced, new point (d bis) in paragraph 4 and new paragraph 6 bis). The amounts in paragraphs 3, 4 and 5 are not modified by the Digital Omnibus. The status of the Spanish draft Organic Law on AI was checked the same day against the record of file 121/000096 in the Congress of Deputies, and the AESIA data against its Statute (BOE-A-2023-18911).
Preguntas frecuentes sobre AI Act fines.
How are AI Act fines calculated (art. 99)?
Art. 99 sets, for each type of infringement, a fixed amount in euros and a percentage of worldwide annual turnover: up to €35,000,000 or 7% for the prohibited practices of art. 5 (art. 99.3); up to €15,000,000 or 3% for the remaining obligations (arts. 16, 22 to 26, 31, 33, 34 or 50, art. 99.4); and up to €7,500,000 or 1% for supplying incorrect, incomplete or misleading information to a notified body or competent authority (art. 99.5). The applicable amount is the one that results from comparing the fixed figure with the percentage of your turnover. Regulation (EU) 2026/1744 added to paragraph 4 aletra d bis), which adds to that band the breach of the obligations of providers and operators under art. 25, paragraphs 2 and 4.
What is the difference between the three fine bands of art. 99?
The art. 99.3 band (prohibited practices under art. 5) is the most serious and admits no compliance plan. The art. 99.4 band covers the breach of the operational obligations of the provider, importer, distributor or deployer, and of the transparency duties of art. 50. The art. 99.5 band is the mildest of the three and specifically punishes giving incorrect, incomplete or misleading information to a notified body or to a competent national authority that requested it.
How does being an SME affect the amount of the fine?
Art. 99, paragraph 6, is discretionary: its literal wording is that «each of the fines referred to in this article may be by the percentage or the amount referred to in paragraphs 3, 4 and 5, whichever is lower». For SMEs and start-ups, therefore, paragraph 6 allows the fine to be by the percentage or by the amount, whichever is lower: it is a power of the authority, not an automatic right to the lower figure. All other companies get the HIGHER of the two.
Can the real amount of the fine be reduced within that maximum?
Yes. What this tool works out is the legal cap, not the amount the authority would finally impose. Art. 99.7 requires weighing, among other factors, the nature, gravity and duration of the infringement, the degree of cooperation with the authorities, the degree of responsibility of the operator taking into account the technical and organisational measures adopted, whether there was intent or negligence, and the actions taken to mitigate the harm. A certified AI management system (ISO/IEC 42001) is direct evidence of those organisational measures.
Is AESIA the body that imposes these fines in Spain?
Todavía no, y conviene decirlo con precisión: a 30 de julio de 2026 no existe ninguna ley ni real decreto español en vigor que designe formalmente a la autoridad de vigilancia del mercado del art. 70 del AI Act ni que concrete el procedimiento sancionador nacional. La AESIA (Agencia Española de Supervisión de Inteligencia Artificial) existe —su creación la autorizan la Ley 22/2021 y la Ley 28/2022, el Real Decreto 729/2023, de 22 de agosto, aprueba su Estatuto y tiene su sede en A Coruña—, pero su designación como autoridad de vigilancia del mercado del AI Act aún no es Derecho vigente. Lo que existe es el Proyecto de Ley Orgánica para el buen uso y la gobernanza de la inteligencia artificial (expediente 121/000096, XV Legislatura), publicado en el BOCG del Congreso, Serie A, núm. 97-1, de 12 de junio de 2026 y, a 30 de julio de 2026, en fase de enmiendas en la Comisión de Economía, Comercio y Transformación Digital con el plazo ampliado hasta el 2 de septiembre de 2026: no está publicado en el BOE, no tiene fuerza de ley y su texto puede cambiar. Ese proyecto recoge los mismos tres importes del art. 99 europeo y añade una cuarta categoría de infracciones leves (hasta 500.000 € o el 0,5% del volumen de negocios mundial total, si esta cuantía fuese superior) que el Reglamento no contempla. Y no designa a la AESIA como autoridad única: reparte la vigilancia del mercado entre la AESIA y otros supervisores —entre ellos la AEPD, el Consejo General del Poder Judicial, el Banco de España y la Dirección General de Seguros y Fondos de Pensiones— según el tipo de sistema. El reparto competencial definitivo depende de que esa ley se apruebe.
Does this calculator replace legal advice?
No. It works out the legal cap from the data you enter, but it does not analyse your technical documentation, your real degree of cooperation with the authorities or the mitigating circumstances of your specific case. Check your situation with the AI Act Compliance service from Summum Consultoría before acting.
Shall we avoid
the fine juntos?
Diagnosis, risk classification and compliance plan for the European AI Regulation, coordinated with the technical layer of Summum IA and the AIMS of Summum Calidad.