Enforcement, Penalties & Remediation

Rules without enforcement are suggestions. As AI regulation matures, the question of what happens when organisations break the rules is becoming central. The EU AI Act sets fines of up to 35 million euros or 7% of global turnover for the most serious violations - figures designed to be meaningful even for the largest technology companies. But enforcement is about more than headline penalties. It includes the capacity of regulators to investigate complaints, the technical expertise to assess complex AI systems, the speed at which enforcement actions proceed, and the remedies available to individuals who've been harmed. Remediation matters as much as punishment: if an AI system wrongly denied your mortgage application, a fine paid to the government doesn't fix your problem. You need a correction, an explanation, and possibly compensation. Many jurisdictions are still building the institutional capacity to enforce AI-specific rules, and there's a real risk that regulation outpaces the ability to police it. For businesses, the enforcement landscape is uneven but tightening. Assuming that AI regulations won't be enforced because they're new is a bet that's becoming less safe by the year.