Skip to content
Welcome, thoughtbot's Giant Robots listeners!Start here
Iran Conflict 2026
9JUN

AI Act fines land on a stale register

3 min read
10:36UTC

The Commission gained the power to fine general-purpose AI model providers on 2 August. Its own list of national contact points still carries a footer reading 'Last update: 26 September 2025', with three member states blank.

ConflictDeveloping
Key takeaway

Brussels can now fine model providers, yet three member states list no regulator to file with.

The European Commission became able on 2 August to fine a general-purpose AI model provider up to €15,000,000 or 3 per cent of annual worldwide turnover, whichever is higher, under Article 101 of the EU AI Act. We pointed readers to that date in April, when we first reported the provision and the ceiling. What April could not show was what the enforcement network would look like when the date arrived, and the answer sits on the Commission's own website. The list of national single points of contact Brussels is obliged to publish carries a footer reading "Last update: 26 September 2025"⁠1.

Denmark, Finland and Hungary each get a hyphen where a contact point should sit, and the Cyprus row carries a hyperlink whose address contains text pasted out of the Spain row⁠2. Article 70, read with Article 113, required every member state to designate a market surveillance authority and a notifying authority and to publish contact details electronically by 2 August 2025. The same article puts a duty on Brussels: "the Commission shall make a list of the single points of contact publicly available"⁠3. That page hangs off a governance and enforcement section the Commission itself refreshed on 31 July 2026.

A company seeking a Danish, Finnish or Hungarian regulator to file with therefore has nowhere on the Commission's page to write to. The AI Act tracker maintained by the Future of Life Institute, an independent non-profit and not a Commission register, recorded at its 17 June 2026 update that 9 of 27 member states had designated both required authorities, 12 had partial arrangements, and 6 had designated neither: Austria, Belgium, Bulgaria, Croatia, Estonia and Greece⁠4. Those figures are seven weeks old and we have not extended them to August. Tracker and Commission also contradict each other on the three blank rows, which sit in the tracker's fully designated column⁠5.

Two qualifications stand between the new power and an actual fine. Article 111(3) gives providers of general-purpose models "placed on the market before 2 August 2025" until 2 August 2027 to comply with the Regulation⁠6, so the model families a reader could name by brand stay outside the enforceable set, and any first case concerns something launched in the past twelve months. The AI Office has also signalled a collaborative, risk-based approach before penalties. Article 101 itself runs to six paragraphs, gives a provider the right to be heard before any fine lands, and leaves the Court of Justice of the European Union unlimited jurisdiction to review or vary the amount⁠7.

Deep Analysis

In plain English

The European Union's AI Act now lets regulators fine companies that break AI rules, starting 2 August. But the Commission's own webpage listing which national office to contact in each EU country is out of date, with three countries' details missing entirely and one country's link showing text copied from another. It is a bit like a country announcing a new speeding fine but leaving the sign for where to send your complaint pointing at the wrong police station. The fine power itself works regardless; it is the administrative paperwork around it that has not caught up.

Deep Analysis
Root Causes

Article 70 assigns the register upkeep to the Commission but sets no penalty or audit trigger for staleness, so the obligation carries no enforcement teeth of its own; unlike the fine ceiling in Article 99, which has a number attached, register accuracy has none.

The Cyprus row's pasted Spain text points to a manual, non-templated update process: a spreadsheet or CMS field edited by hand rather than one populated from a single member-state submission schema, the kind of process failure that compounds every time a national authority's designation status changes.

First Reported In

Update #14 · AI Act fines arrive, three states list no regulator

AI Act tracker, Future of Life Institute· 4 Aug 2026
Read original →
Different Perspectives
Wang Yi
Wang Yi
China's foreign minister and Djibouti's issued a joint communique on 21 October saying the war should not reach the Horn of Africa and stressing free navigation through Bab al-Mandeb. The text names neither Iran nor the Houthis, and Djibouti hosts China's only overseas military base, opposite the Yemeni coast.
Ministry of External Affairs
Ministry of External Affairs
India's foreign ministry called the attacks on Saudi civilian and energy sites "unacceptable" on 22 October and said they must stop at once. An Indian died at Dammam, Indians were injured there and at Shaybah, and about 4,000 Umrah pilgrims remain stranded by one MP's count.
Iraq
Iraq
Iraq closed the al-Sheeb crossing with Iran to travellers and trucks from 21 October and said other crossings would close gradually. Unlike September's closure, which ended on a staged timetable, this one has none, and Iran's interior ministry said it received no notice.
Abdel Fattah el-Sisi
Abdel Fattah el-Sisi
Egypt's president said on 21 October that Cairo's support would "defend Saudi territory, and does not include an attack on Yemen". Araghchi warned that Egyptian involvement would further complicate the situation, and Cairo's limit matches the one Ankara set on 8 October against attacking another state's soil.
UK Ministry of Defence
UK Ministry of Defence
The MoD said on 20 October that RAF Typhoons over Saudi Arabia will not strike the Houthis, but extended tanker support to Saudi operations including against Houthi targets in Yemen. The tanker line sets no limit on strikes, so British aircraft may now refuel Saudi jets on bombing runs.
Turkey
Turkey
Ankara sent the Mecca Joint Defence Agreement to parliament around 20 October, and its published text treats an attack on one party as an attack on all. Article 16 brings it into force only on the last ratification, so the 5 October invocation in Riyadh could not yet bind Turkey.

Written with AI from Lowdown's published reporting. Not individually reviewed by an editor. Editorial standards.