§ EU AI Act · Article 100
AI Act Article 100: Obligations, Deadlines & Penalties
At a glance
Article 100 of the AI Act imposes 9 obligations on European Data Protection Supervisor, Union institutions, bodies and 1 other entity type(s). At least one obligation carries an explicit compliance deadline. Non-compliance may result in administrative fines or other penalties.
§ Obligations
All obligations under Article 100
Obligation 1
The European Data Protection Supervisor may impose administrative fines on Union institutions, bodies, offices and agencies falling within the scope of this Regulation, taking into account relevant circumstances such as the nature, gravity, and duration of the infringement.
Regulation (EU) 2024/1689, Article 100, Article 100
- Obligated entity
-
European Data Protection Supervisor
- Action required
-
impose
- Deadline
-
—
- Penalty
-
—
Obligation 2
Non-compliance with the prohibition of the AI practices referred to in Article 5 shall be subject to administrative fines of up to EUR 1 500 000.
Regulation (EU) 2024/1689, Article 100, Article 100
- Obligated entity
-
Union institutions, bodies, offices and agencies
- Action required
-
pay
- Deadline
-
—
- Penalty
-
up to EUR 1 500 000
Obligation 3
Non-compliance of the AI system with any requirements or obligations under this Regulation, other than those laid down in Articles 5, shall be subject to administrative fines of up to EUR 750 000.
Regulation (EU) 2024/1689, Article 100, Article 100
- Obligated entity
-
Union institutions, bodies, offices and agencies
- Action required
-
pay
- Deadline
-
—
- Penalty
-
up to EUR 750 000
Obligation 4
Before taking decisions pursuant to this Article, the European Data Protection Supervisor shall give the Union institution, body, office or agency which is the subject of the proceedings the opportunity of being heard on the matter regarding the possible infringement.
Regulation (EU) 2024/1689, Article 100, Article 100
- Obligated entity
-
European Data Protection Supervisor
- Action required
-
hear
- Deadline
-
—
- Penalty
-
—
Obligation 5
The European Data Protection Supervisor shall base his or her decisions only on elements and circumstances on which the parties concerned have been able to comment.
Regulation (EU) 2024/1689, Article 100, Article 100
- Obligated entity
-
European Data Protection Supervisor
- Action required
-
base
- Deadline
-
—
- Penalty
-
—
Obligation 6
Complainants, if any, shall be associated closely with the proceedings.
Regulation (EU) 2024/1689, Article 100, Article 100
- Obligated entity
-
European Data Protection Supervisor
- Action required
-
associate
- Deadline
-
—
- Penalty
-
—
Obligation 7
The rights of defence of the parties concerned shall be fully respected in the proceedings, including entitlement to access the European Data Protection Supervisor’s file, subject to legitimate interests in protection of personal data or business secrets.
Regulation (EU) 2024/1689, Article 100, Article 100
- Obligated entity
-
European Data Protection Supervisor
- Action required
-
respect
- Deadline
-
—
- Penalty
-
—
Obligation 8
Funds collected by imposition of fines in this Article shall contribute to the general budget of the Union.
Regulation (EU) 2024/1689, Article 100, Article 100
- Obligated entity
-
European Data Protection Supervisor
- Action required
-
contribute
- Deadline
-
—
- Penalty
-
—
Obligation 9
The European Data Protection Supervisor shall, on an annual basis, notify the Commission of the administrative fines it has imposed pursuant to this Article and of any litigation or judicial proceedings it has initiated.
Regulation (EU) 2024/1689, Article 100, Article 100
- Obligated entity
-
European Data Protection Supervisor
- Action required
-
notify
- Deadline
-
annual basis
- Penalty
-
—
§ Deadlines
EU AI Act compliance deadlines
-
2025-02-02
Article 5 prohibitions (unacceptable risk)
in_force
-
2025-02-02
Article 4 AI literacy
in_force
-
2025-08-02
GPAI model obligations (Articles 51 to 56)
in_force
-
2026-07-27
Regulation (EU) 2026/1744 (Digital Omnibus on AI) enters into force — AI Act applies as amended
in_force
-
2026-08-02
AI Act general date of application (Art 113) — governance, penalties and remaining provisions without a different date
in_force
-
2026-08-02
Article 50 transparency obligations (AI-interaction disclosure, labelling of deepfakes and AI-generated text, emotion-recognition notices)
in_force
-
2026-12-02
Article 50(2) machine-readable marking of AI-generated content — transition for generative AI systems placed on the market before 2 August 2026
scheduled
-
2026-12-02
NEW Article 5 prohibition: AI generation of non-consensual intimate imagery (NCII) and CSAM
scheduled
-
2027-08-02
National AI regulatory sandboxes: at least one operational per Member State (Art 57(1))
scheduled
-
2027-12-02
Annex III stand-alone high-risk obligations
scheduled
-
2028-08-02
Annex I embedded (regulated-product) high-risk obligations
scheduled
§ Frequently asked
Questions about Article 100
Who must comply with Article 100 of the AI Act?
+
European Data Protection Supervisor, Union institutions, bodies, offices and agencies.
What does Article 100 of the AI Act require?
+
impose pay hear
What is the compliance deadline for AI Act Article 100?
+
annual basis
What are the penalties for non-compliance with AI Act Article 100?
+
up to EUR 1 500 000; up to EUR 750 000