Know exactly which EU AI Act and GDPR obligations apply to your business — and get the policies to match.

The AI-literacy duty under Article 4 of Regulation (EU) 2024/1689 has applied since 2 February 2025 — full stop, regardless of company size. Fines for banned AI practices reach €35 million or 7% of global turnover (Article 99(3)); GDPR fines follow the same higher-of-the-two logic, up to €20 million or 4% of turnover (Article 83(5)), enforced by whichever data protection authority sits in your home member state. Eurostat counted roughly 24 million SMEs across the EU in 2022 — almost all of the Act's day-to-day obligations were written with exactly that population in mind.