Learn

Article 50 fines: what EUR 15M or 3% really means for a small business

Updated June 11, 2026

Every compliance vendor, us included, quotes the same scary number: fines up to EUR 15 million or 3% of worldwide annual turnover for breaching the EU AI Act's transparency duties. The number is real. It is also doing a lot of marketing work, so here is the honest version.

Where the number comes from

Article 99(4) of the AI Act sets the fine band for breaches of the Article 50 transparency obligations: up to EUR 15 million or, for companies, up to 3% of total worldwide annual turnover, whichever is higher. The penalties chapter has been applicable since August 2025, ahead of the obligations themselves, so the enforcement machinery exists before day one.

The two honest caveats

These are ceilings, not floors. "Up to" means regulators scale fines to the gravity, duration, and intent of the violation. A small business that missed a notice is not facing the same outcome as a platform that deliberately disguised bots as humans at scale.

SMEs get the lower cap. Article 99(6) flips the formula for small and medium-sized enterprises, including start-ups: your maximum is the lower of the two amounts, not the higher. For most SMBs, 3% of turnover is a much smaller number than EUR 15 million, and that becomes your ceiling.

Who actually enforces this

There is no single EU chatbot police. Enforcement is decentralized to national market surveillance authorities in each member state, which report their penalty activity to the Commission annually. That means enforcement intensity will vary by country, and nobody can honestly tell you today how aggressive year one will be.

So why comply at all?

Because the asymmetry is absurd. The realistic downside is not the headline EUR 15 million; it is being the convenient early enforcement example in some member state, or losing an enterprise deal because procurement asked for your AI Act posture and you had nothing to show. The cost of eliminating that entire category of risk is a visible notice on your chatbot and a log proving it was shown. This is one of the cheapest pieces of insurance in your stack, which is exactly why "we will deal with it if it ever comes up" is a bad trade: by the time it comes up, the absence of records is the problem.

If you want to know where you stand right now, the free checker takes about a minute.

Disclosed provides compliance tooling and records; this document is not legal advice. Review it with your counsel before relying on it.