Meet someone near you.
Live video chat with people nearby. One tap, free to start.
Brussels has had the power to fine AI companies for more than two months now. A second deadline is approaching that will pull far more systems under its reach. EU AI Act enforcement over general-purpose AI model providers formally began on August 2, 2026. That is when the European Commission’s AI Office became entitled to investigate and penalize non-compliant companies. A December 2 deadline for AI transparency labeling is next on the calendar.
How EU AI Act Enforcement Actually Works
The European AI Office sits inside the European Commission. It can now request information and documentation from AI companies. It can demand access to models for evaluation, and order corrective or risk-mitigation measures, according to a client alert from law firm Wilson Sonsini. In serious cases, it can order a company to restrict, withdraw or recall a model from the EU market entirely. Fines can reach the higher of €15 million or 3% of a provider’s worldwide annual turnover. For the largest AI companies, that ceiling could run into the billions.
Which Companies and Systems Are Covered
The enforcement powers apply to providers of general-purpose AI models placed on the EU market on or after August 2, 2025. Models already on the market before that date generally get until August 2, 2027 to comply. That gives incumbent providers a longer runway than newer entrants. Companies whose models carry “systemic risk” face extra obligations. Those cover model evaluation, mitigating systemic risks, reporting serious incidents, and cybersecurity. This tier is aimed squarely at the handful of AI labs whose models are large or widely deployed enough to matter at a societal scale.
The Transparency Deadline Still to Come
Separately, Article 50 of the EU AI Act set transparency obligations that also took effect on August 2, 2026. These cover chatbots, systems that generate synthetic content, deepfakes, emotion-recognition tools and biometric-categorization systems. Providers and deployers must disclose that users are interacting with AI or that content was AI-generated. For systems already on the market before August 2, 2026, the machine-readable marking requirement under Article 50(2) doesn’t bite until December 2, 2026. That deadline gives companies running older AI tools only a few more weeks to add the disclosure.
How the AI Act’s Risk Tiers Work
The AI Act organizes obligations around several risk tiers rather than treating every AI system the same way. Systems judged to pose unacceptable risk, such as government social scoring, are banned outright. High-risk systems, including many used in hiring, credit scoring and law enforcement, face the law’s strictest requirements around testing, documentation and human oversight. General-purpose AI models sit in their own tier. That’s the category now subject to AI Office enforcement, since a single model can be built into many different downstream products. Limited-risk systems, mainly the chatbots and content generators covered by the transparency rules, face lighter disclosure-only obligations. Everything else falls into a minimal-risk category with no specific obligations at all. The enforcement actions now beginning target only the general-purpose and high-risk tiers. That is why most ordinary AI-powered apps and features are not yet facing scrutiny from the AI Office. Compliance teams at major AI labs have spent much of 2026 mapping their own products against these tiers. Misclassifying a system risks the wrong set of obligations entirely.
Why This Matters Beyond Europe
The EU AI Act’s extraterritorial reach means any AI company whose models reach EU users can fall under these rules. That holds regardless of where the company is based. The AI Office’s enforcement posture has become a reference point for regulators elsewhere weighing their own AI rules, even as some companies have lobbied for a slower rollout. For now, the practical question for most providers is less about headline fines. It is more about whether their existing disclosure practices will satisfy the December marking deadline.
What Happens as More Deadlines Arrive
The AI Office hasn’t yet announced its first enforcement action under these new powers. The law firm alert notes the office’s investigative tools — document requests, model access, corrective orders — are designed to be used well before a fine is ever on the table. The real test of EU AI Act enforcement will come once the December marking deadline passes. Regulators will then start checking which companies actually complied.
Related Coverage on Tamara News
For more on how AI companies are navigating regulatory and legal pressure, see our coverage of OpenAI’s policy shift on training its models on live internet data and the court ruling in Apple’s trade secrets case against OpenAI.
EU AI Act Enforcement: Reader Questions
When did EU AI Act enforcement begin?
August 2, 2026, when the European Commission’s AI Office gained formal power to investigate and penalize providers of general-purpose AI models.
How large are the potential fines?
Up to the higher of €15 million or 3% of a provider’s worldwide annual turnover.
Which companies does this apply to?
Providers of general-purpose AI models placed on the EU market on or after August 2, 2025; older models have until August 2, 2027 to comply.
What’s the December 2026 deadline about?
Systems placed on the market before August 2, 2026 must meet a machine-readable AI-content marking requirement by December 2, 2026.
What powers does the AI Office have short of a fine?
It can request information, demand access to models for evaluation, and order corrective or risk-mitigation measures.
Can the AI Office force a model off the market?
Yes, in serious cases it can order a model restricted, withdrawn or recalled from the EU market.
Verification your users actually receive.
Send one-time passcodes over WhatsApp with a single API call. Replio can generate, hash and verify the code for you.
