# Administrative fines on Union institutions, bodies, offices and agencies — AI Act — context bundle > Focused context for a single provision, curated from overview.legal on 2026-08-22. Canonical page: https://overview.legal/laws/ai-act/art-100 > Every item cites its source. Verify against the official text (EUR-Lex / wetten.overheid.nl) before relying on it. ## Provision ### Administrative fines on Union institutions, bodies, offices and agencies — Administrative fines on Union institutions, bodies, offices and agencies *AI Act, aiact-art-100-en — https://overview.legal/laws/ai-act/art-100* 1. The European Data Protection Supervisor may impose administrative fines on Union institutions, bodies, offices and agencies falling within the scope of this Regulation. When deciding whether to impose an administrative fine and when deciding on the amount of the administrative fine in each individual case, all relevant circumstances of the specific situation shall be taken into account and due regard shall be given to the following: a) the nature, gravity and duration of the infringement and of its consequences, taking into account the purpose of the AI system concerned, as well as, where appropriate, the number of affected persons and the level of damage suffered by them; b) the degree of responsibility of the Union institution, body, office or agency, taking into account technical and organisational measures implemented by them; c) any action taken by the Union institution, body, office or agency to mitigate the damage suffered by affected persons; d) the degree of cooperation with the European Data Protection Supervisor in order to remedy the infringement and mitigate the possible adverse effects of the infringement, including compliance with any of the measures previously ordered by the European Data Protection Supervisor against the Union institution, body, office or agency concerned with regard to the same subject matter; e) any similar previous infringements by the Union institution, body, office or agency; f) the manner in which the infringement became known to the European Data Protection Supervisor, in particular whether, and if so to what extent, the Union institution, body, office or agency notified the infringement; g) the annual budget of the Union institution, body, office or agency. 2. Non-compliance with the prohibition of the AI practices referred to in Article 5 shall be subject to administrative fines of up to EUR 1 500 000. 3. The non-compliance of the AI system with any requirements or obligations under this Regulation, other than those laid down in Article 5, shall be subject to administrative fines of up to EUR 750 000. 4. Before taking decisions pursuant to this Article, the European Data Protection Supervisor shall give the Union institution, body, office or agency which is the subject of the proceedings conducted by the European Data Protection Supervisor the opportunity of being heard on the matter regarding the possible infringement. The European Data Protection Supervisor shall base his or her decisions only on elements and circumstances on which the parties concerned have been able to comment. Complainants, if any, shall be associated closely with the proceedings. 5. The rights of defence of the parties concerned shall be fully respected in the proceedings. They shall be entitled to have access to the European Data Protection Supervisor’s file, subject to the legitimate interest of individuals or undertakings in the protection of their personal data or business secrets. 6. Funds collected by imposition of fines in this Article shall contribute to the general budget of the Union. The fines shall not affect the effective operation of the Union institution, body, office or agency fined. 7. The European Data Protection Supervisor shall, on an annual basis, notify the Commission of the administrative fines it has imposed pursuant to this Article and of any litigation or judicial proceedings it has initiated. ## Guidance ### EDPB Work Programme 2026-2027 *EDPB — https://overview.legal/posts/125689* EDPB Work Programme 2026–2027 Adopted on 11 February 2026 EDPB Work Programme 2026-2027 2 The European Data Protection Board The European Data Protection Board (EDPB) is an independent European body established by the General Data Protection Regulation (GDPR). The EDPB has the following main tasks: • Issuing opinions, guidelines, recommendations and best practices to promote a common understanding of the GDPR and the Law Enforcement Directive (LED); • Advising the European Commission on any… ### EDPB-EDPS Joint opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation of harmonised rules on artificial intelligence *EDPB — https://overview.legal/posts/53738* EDPB, EDPB-EDPS Joint opinion 1/2026 on the Proposal for a Regulation as regards the simplification of the implementation of harmonised rules on artificial intelligence (Digital Omnibus on AI) ### Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (‘‘LED’’) under Article 62 LED *EDPB — https://overview.legal/posts/53750* EDPB, Contribution of the EDPB to the European Commission’s evaluation of the Data Protection Law Enforcement Directive (‘‘LED’’) under Article 62 LED ### Art. 29 WP Guidelines on GDPR transparency requirements (WP260 rev.01) *EDPB — https://overview.legal/posts/38076* The Article 29 Data Protection Working Party issued these guidelines (WP260 rev.01), adopted on 29 November 2017 and last revised on 11 April 2018, to provide interpretive and practical guidance on the transparency requirements under the GDPR (Articles 12–14). The document addresses the form, timing, content, and modalities of information provided to data subjects, including issues such as plain language, layered privacy notices, information for children, and exceptions to the obligation to provide information. No fines or enforcement actions are imposed, as this is a guidance document rather than an enforcement decision. ### VERSIEGESCHIEDENIS *EDPB — https://overview.legal/posts/38079* De EDPB heeft op 20 juni 2023 de aanbevelingen 1/2022 inzake bindende bedrijfsvoorschriften voor verwerkingsverantwoordelijken (artikel 47 AVG) vastgesteld, ter vervanging van de eerdere WP 256 rev.01 en WP 264. Het document voorziet in een standaardaanvraagformulier voor goedkeuring van bindende bedrijfsvoorschriften en geeft uitleg bij de vereiste inhoudelijke elementen en beginselen, waaronder de afbakening tussen wat in de bindende bedrijfsvoorschriften zelf en wat in de aanvraag bij de leidende toezichthoudende autoriteit moet worden opgenomen. De aanbevelingen zijn bedoeld om ondernemingen die persoonsgegevens doorgeven aan groepsentiteiten in derde landen zonder passend beschermingsniveau (artikel 45 AVG) te ondersteunen bij het voldoen aan de passende waarborgen van artikel 46 AVG. ## Related topics - **Fines** — https://overview.legal/topics/boetes ## Legal Framework - **Administrative Fines on Union Institutions, Bodies, Offices and Agencies** — https://overview.legal/topics/administrative-fines-union-institutions ## Legal Framework --- Generated by overview.legal · https://overview.legal/laws/ai-act/art-100 · 2026-08-22