Skip to content
You can now search across every topic, entity and event.What's new
Iran Conflict 2026
18JUN

AI Act fines land on a stale register

3 min read
10:02UTC

The Commission gained the power to fine general-purpose AI model providers on 2 August. Its own list of national contact points still carries a footer reading 'Last update: 26 September 2025', with three member states blank.

ConflictDeveloping
Key takeaway

Brussels can now fine model providers, yet three member states list no regulator to file with.

The European Commission became able on 2 August to fine a general-purpose AI model provider up to EUR 15,000,000 or 3 per cent of annual worldwide turnover, whichever is higher, under Article 101 of the EU AI Act. We pointed readers to that date in April, when we first reported the provision and the ceiling . What April could not show was what the enforcement network would look like when the date arrived, and the answer sits on the Commission's own website. The list of national single points of contact Brussels is obliged to publish carries a footer reading "Last update: 26 September 2025" 1.

Denmark, Finland and Hungary each get a hyphen where a contact point should sit, and the Cyprus row carries a hyperlink whose address contains text pasted out of the Spain row 2. Article 70, read with Article 113, required every member state to designate a market surveillance authority and a notifying authority and to publish contact details electronically by 2 August 2025. The same article puts a duty on Brussels: "the Commission shall make a list of the single points of contact publicly available" 3. That page hangs off a governance and enforcement section the Commission itself refreshed on 31 July 2026.

A company seeking a Danish, Finnish or Hungarian regulator to file with therefore has nowhere on the Commission's page to write to. The AI Act tracker maintained by the Future of Life Institute, an independent non-profit and not a Commission register, recorded at its 17 June 2026 update that 9 of 27 member states had designated both required authorities, 12 had partial arrangements, and 6 had designated neither: Austria, Belgium, Bulgaria, Croatia, Estonia and Greece 4. Those figures are seven weeks old and we have not extended them to August. Tracker and Commission also contradict each other on the three blank rows, which sit in the tracker's fully designated column 5.

Two qualifications stand between the new power and an actual fine. Article 111(3) gives providers of general-purpose models "placed on the market before 2 August 2025" until 2 August 2027 to comply with the Regulation 6, so the model families a reader could name by brand stay outside the enforceable set, and any first case concerns something launched in the past twelve months. The AI Office has also signalled a collaborative, risk-based approach before penalties. Article 101 itself runs to six paragraphs, gives a provider the right to be heard before any fine lands, and leaves the Court of Justice of the European Union unlimited jurisdiction to review or vary the amount 7.

Deep Analysis

In plain English

The European Union's AI Act now lets regulators fine companies that break AI rules, starting 2 August. But the Commission's own webpage listing which national office to contact in each EU country is out of date, with three countries' details missing entirely and one country's link showing text copied from another. It is a bit like a country announcing a new speeding fine but leaving the sign for where to send your complaint pointing at the wrong police station. The fine power itself works regardless; it is the administrative paperwork around it that has not caught up.

Deep Analysis
Root Causes

Article 70 assigns the register upkeep to the Commission but sets no penalty or audit trigger for staleness, so the obligation carries no enforcement teeth of its own; unlike the fine ceiling in Article 99, which has a number attached, register accuracy has none.

The Cyprus row's pasted Spain text points to a manual, non-templated update process: a spreadsheet or CMS field edited by hand rather than one populated from a single member-state submission schema, the kind of process failure that compounds every time a national authority's designation status changes.

First Reported In

Update #14 · AI Act fines arrive, three states list no regulator

AI Act tracker, Future of Life Institute· 4 Aug 2026
Read original
Causes and effects
This Event
AI Act fines land on a stale register
A regulation becomes enforceable only where a company can find out who enforces it, and on the day the fining power commenced three member states offered no published address.
Different Perspectives
Lloyd's Market Association
Lloyd's Market Association
War-risk underwriters price the Houthis' Red Sea attacks because the group announces its targets in advance, but the unclaimed Damietta drone gives insurers a hit with no author to price against. An attack nobody claims costs shipping more than one that is claimed, since premiums are set against a known pattern, not raw damage.
US Central Command
US Central Command
CENTCOM has announced no strike on Iran since resuming bombing on 30 July within hours of an IRGC salvo on Jordan, and centcom.mil did not respond to requests to confirm any pause. The command has gone quiet before while a larger operation was being weighed, so silence alone proves nothing about what it has or has not done.
Hengaw
Hengaw
Hengaw recorded at least 67 executions in Iran during July, of which the state acknowledged only eight, and reported the 1 August execution of protest detainee Arvin Kheirkhahan at Shahrud with no advance notice to his family. A family's first notice of a death sentence is now usually the instruction to collect a body.
Egypt
Egypt
Egypt's government asked media on 2 August to report the Damietta attack accurately, named no author, and said no findings will be published before its own investigation concludes. Cairo holds the debris and jurisdiction over an attack on its own soil, and naming a culprit now would pull it into a dispute it has avoided for five months.
Iran's Foreign Ministry
Iran's Foreign Ministry
Araghchi called the Hormuz talks with Oman final-stage on 2 August, four days after his own deputy rejected Oman's lane proposal, and denied the Damietta drone strike as an Israeli false flag while two Iranian officials privately claimed it for Tehran. Iran's public position now contradicts itself on both files at once.
Bahrain and Kuwait
Bahrain and Kuwait
Bahraini and Kuwaiti aircraft flew their own strikes on Iranian depots in July with Emirati air cover behind them, and Ynetnews reports some Gulf capitals wanted the 2 August strike to proceed rather than stop. States that have already taken fire see a closing window on Iranian weakness, not a reason to pause.