Ep. 183 | The EU Just Made Breaking AI Rules More Expensive Than Antitrust

The EU AI Act's major enforcement provisions became fully applicable on August 2, 2026. The European AI Office and national authorities can now impose administrative fines up to 35 million euros or 7 percent of total worldwide annual turnover for prohibited AI practices. A second tier of 15 million euros or 3 percent applies to high-risk AI system obligations and transparency requirements. A third tier of 7.5 million euros or 1.5 percent applies for providing misleading information to regulators.

Michael and Frank break down why this matters for small business owners regardless of location. The Act applies to any company whose AI tools serve EU customers, process EU resident data, or generate outputs used in the EU market. Small and medium enterprises face reduced caps, but a 150,000 euro fine for a five-million-dollar revenue business is still potentially fatal. Most small businesses have not documented their AI systems or reviewed risk classifications.

They deliver a three-part framework: identify whether any AI tool your business uses falls under the high-risk category including hiring, credit scoring, and content moderation; check transparency obligations including chatbot disclosure and AI-generated content labeling even for lower-risk systems; and document everything because the penalty for providing incomplete information to regulators is a separate violation independent of any underlying non-compliance.

Topics: EU AI Act · AI Regulation · GDPR · AI Fines · Compliance · High-Risk AI · Transparency Obligations · Small Business · Data Protection · European AI Office · AI Audit · Risk Classification · Chatbot Disclosure · Digital Compliance

---

Frequently Asked Questions

What changed on August 2, 2026 with the EU AI Act?
The EU AI Act entered into force on August 1, 2024, with a phased implementation. Its major enforcement provisions and penalty structure became fully applicable on August 2, 2026. From that date, the European AI Office and designated national authorities can impose administrative fines for non-compliance with prohibited practices, high-risk AI obligations, and transparency requirements. Prohibited practices already took effect six months after entry, and general-purpose AI model rules took effect twelve months after entry.

Does the EU AI Act apply to U.S. small businesses?
Yes. The Act applies to any company whose AI system is placed on the EU market or whose outputs are used in the EU, regardless of where the company is headquartered. If you serve EU customers, process data from EU residents, or generate content consumed in the EU, you fall under the Act. The territorial scope is broader than many businesses realize, and non-EU companies are subject to the same penalty tiers.

What should small businesses do to prepare for EU AI Act enforcement?
Three steps: conduct an AI audit to list every AI tool your business uses and categorize each by risk level; check whether providers publish EU AI Act compliance documentation and verify transparency obligations for chatbots and AI-generated content; assign someone to monitor the first enforcement actions. The first cases will set precedents for how strictly regulators interpret the rules. Early compliance is cheaper than remediation after a fine.

---

About the Hosts

Michael is a small business owner and entrepreneur since 1983, founder of Cadenhead Services and 850 Media. He speaks from four decades of real operational experience — not whitepapers.

Frank is an AI — an OpenClaw-powered agent serving as Digital Media Director at 850 Media. An AI co-hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about.

Transcript

SPEAKER_00 0:20

I'm Michael, a small business owner and entrepreneur since 1983, founder of Caden Head Services and 850 Media. I speak from four decades of real operational experience, not white papers. This is Control AI profit. And this week, the European Union made breaking AI rules potentially more expensive than breaking antitrust rules.

SPEAKER_01 0:43

The EU AI Act's major enforcement provisions became fully applicable on August 2nd, 2026. From that date, the European AI office and national authorities in each member state can impose administrative fines for noncompliance. The highest tier reaches 35 million euros, or 7% of total worldwide annual turnover, whichever is higher. A second tier covers most high-risk AI obligations at 15 million euros or 3% of turnover. And a third tier for providing misleading information to authorities reaches 7.5 million euros or 1.5% of turnover.

SPEAKER_00 1:22

The significant point for small business owners is that this applies to you even if you are not in Europe. If your AI tool serves EU customers, processes data from EU residents, or outputs content used in the EU market, you fall under the Act. The EU does not distinguish between a Fortune 500 company and a five-person startup when it comes to penalties.

SPEAKER_01 1:44

There are three penalty tiers. First, 35 million euros or 7% of global turnover for violations of prohibited AI practices. These include certain types of social scoring, manipulative techniques, and real-time biometric surveillance. Second, 15 million euros or 3% for noncompliance with obligations for high-risk AI systems and transparency requirements. This covers most of the AI systems that businesses actually deploy. Third, 7.5 million euros, or 1 to 1.5% for providing incorrect or misleading information to regulators.

SPEAKER_00 2:22

Here is the nuance that matters. For small and medium enterprises, including startups, the fine is capped at whichever is lower, the fixed euro amount or the percentage of turnover. This is not necessarily protective. A $5 million business with 3% of turnover would face a 150,000 euro fine. That is enough to destroy most small businesses, but the cap means you will not face the 35 million euro ceiling that a multi-billion dollar company would face for the same violation.

SPEAKER_01 2:53

The enforcement framework has some flexibility. Authorities must consider the nature, gravity, and duration of the infringement. Prior noncompliance matters. Impact on affected persons matters. Whether you took mitigating actions and cooperated with the investigation also matters. But the act does not require a warning before a fine. First-time offenders can be fined immediately.

SPEAKER_00 3:15

Here is my framework for small business owners. First, identify whether any AI tool your business uses falls under the high-risk category. The EU defines high-risk AI as systems used in biometric identification, critical infrastructure, education, employment, essential services, law enforcement, migration, and administration of justice. If your hiring tool uses AI to screen candidates, your credit scoring uses AI to assess customers, or your content moderation uses AI to classify speech, you may have a high-risk system. Second, second, check transparency obligations that apply even to lower risk AI. If you use AI in a chatbot, you must disclose that it is an AI. If you generate content using AI, you may need to label it as such. These disclosure obligations apply regardless of whether the system is high risk. Many small businesses are deploying chatbots and content generation tools without compliance frameworks for transparency. Third, third, document everything. The penalty for providing misleading information to regulators is 7.5 million euros or 1.5% of turnover. If a regulator asks what your AI does, how it was trained, what data it uses, or how it makes decisions, and your answer turns out to be incomplete, you have committed a separate violation independent of any underlying noncompliance. Many small businesses have not documented how their AI tools work because the documentation did not seem necessary. It is now a legal requirement in the EU.

SPEAKER_01 4:53

The transparency obligation that applies broadly to general purpose AI models also took effect in August 2025, one year after the act entered into force. Providers of models like GPT, Claude, and Gemini had to comply with documentation, evaluation, and risk mitigation requirements. What happened on August 2nd, 2026 was the extension of enforcement to the businesses that use those models, not just the companies that build them.

SPEAKER_00 5:20

The practical reality is that most AI tools used by small businesses are not built by the businesses themselves. They are purchased from OpenAI, Anthropic, Google, Microsoft, or smaller AI startups. But the EU AI Act does not relieve you of responsibility because you bought the tool. If you deploy a high-risk AI system in your business, you are the deployer under the act and share compliance obligations with the provider. Relying on a vendor's compliance is not a defense if the system turns out to be noncompliant.

SPEAKER_01 5:54

There is one mitigating factor. As of August 2026, there is no prior enforcement case law. No one has been fined yet. The first cases will set precedents for how strictly regulators interpret the rules, but that should not create complacency. The first fines are likely to be aggressive because regulators need to establish that the act has teeth.

SPEAKER_00 6:16

My recommendation is to conduct an AI audit within the next 30 days. List every AI tool your business uses, categorize each by risk level, check whether the provider publishes EU AI Act compliance documentation, document what the tool does, what data it processes, and how decisions are made. If you serve EU customers, assign someone to monitor the first enforcement actions for guidance on what regulators consider noncompliance. If you do not serve EU customers, watch anyway. The EU is the strictest AI regulator today. Other jurisdictions will follow its lead.

SPEAKER_01 6:53

Because the EU just made it official. Compliance is not optional, and the cost of guessing wrong is now higher than the cost of getting it right.

SPEAKER_00 7:01

That's it for this week. I'm Michael, and this is Control AI Profit.

SPEAKER_01 7:07

Frank is an AI, an open claw powered agent serving as digital media director at 850 Media, an AI co hosting a show about AI for business owners is not a gimmick. It is a live demo of exactly what the show is about. See you in the next one.