AI Governance Engineer
GitHub

Who enforces, and the ceilings

Three enforcement tracks (AI Office for GPAI, national authorities for high-risk AI, the California Attorney General under SB 53) and their penalty ceilings.

By Updated First published

Who enforces, and the ceilings Three enforcement tracks: GPAI providers and the AI Office, high-risk systems and national market-surveillance authorities, and US frontier developers under SB 53 and the state Attorney General, each with its penalty ceiling. Duty holder, authority, ceiling GPAI providers since 2 Aug 2026 AI Office (European Commission) Art. 101 fines: up to 3% of worldwide annual turnover or EUR 15M, whichever higher Art. 75a–75d: periodic penalties up to 5% of average daily turnover per day High-risk systems per Member State National market-surveillance authority for example AESIA in Spain Art. 99 fines: ceilings of 7%, 3% and 1% of turnover, depending on the breach US frontier developers SB 53 State Attorney General Up to USD 1M per violation
Who enforces, and the ceilings Who enforces each regime and how high its penalties can go: the AI Office for GPAI providers, national market-surveillance authorities for high-risk systems and the state Attorney General under California's SB 53, as of 2026-09-24. Record for each system which authority asks, so its evidence is ready for that authority. Drawn from chapter 08.

Text alternative

Three enforcement tracks, as of 2026-09-24. GPAI providers answer to the AI Office: Commission enforcement powers have been live since 2 August 2026; under Art. 101 the Commission may fine GPAI providers up to 3% of worldwide annual turnover or EUR 15 million, whichever is higher; and the Omnibus's new Art. 75a to 75d give the AI Office investigation powers backed by periodic penalty payments of up to 5% of average daily turnover per day for a continuing breach, in force since 27 July 2026. High-risk systems answer to national market-surveillance authorities, which each Member State chooses (Spain, for example, set up AESIA); their administrative fines run under Art. 99, with ceilings of 7%, 3% and 1% of turnover depending on the breach. Large frontier developers under California's SB 53 answer to the Attorney General, with penalties of up to USD 1 million per violation.

Download

Every file carries the attribution band "aigovernanceengineer.com · CC BY 4.0 · v0.5.0" inside the image, and the version is in the file name, so a copy always says where it came from and which edition it shows. The SVGs keep the text live: the first follows the viewer's light or dark setting, the other two fix one theme for slides and print. The PNGs are drawn with the site's own typefaces.

Three enforcement tracks (AI Office for GPAI, national authorities for high-risk AI, the California Attorney General under SB 53) and their penalty ceilings.
The PNG, light, 1600 px wide, as it downloads (shown here as a lighter copy).

Reuse and credit

The figure is published under CC BY 4.0: you may copy, share and adapt it, commercially too, provided you give appropriate credit, link to the licence and say if you changed it. Keep the attribution band in the image. A credit line that covers title, author, source and licence:

“Who enforces, and the ceilings” by Jorge García Aibar, aigovernanceengineer.com (https://aigovernanceengineer.com/figures/enforcement-map), v0.5.0. Licensed under CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/).

Embed with HTML

<figure>
  <img src="https://aigovernanceengineer.com/downloads/figures/enforcement-map-v0.5.0-light-1600.png" alt="Three enforcement tracks (AI Office for GPAI, national authorities for high-risk AI, the California Attorney General under SB 53) and their penalty ceilings." width="800" height="929" loading="lazy">
  <figcaption>
    <a href="https://aigovernanceengineer.com/figures/enforcement-map">Who enforces, and the ceilings</a> by Jorge García Aibar,
    aigovernanceengineer.com, v0.5.0.
    Licensed under <a href="https://creativecommons.org/licenses/by/4.0/">CC BY 4.0</a>.
  </figcaption>
</figure>

Embed with Markdown

![Three enforcement tracks (AI Office for GPAI, national authorities for high-risk AI, the California Attorney General under SB 53) and their penalty ceilings.](https://aigovernanceengineer.com/downloads/figures/enforcement-map-v0.5.0-light-1600.png)

*[Who enforces, and the ceilings](https://aigovernanceengineer.com/figures/enforcement-map) by Jorge García Aibar, aigovernanceengineer.com, v0.5.0. Licensed under [CC BY 4.0](https://creativecommons.org/licenses/by/4.0/).*