Type something to search...
to navigateto selectESC to close

DMA Penalties

Penalties under the Digital Markets Act (DMA) are financial sanctions the European Commission can impose on gatekeepers that fail to comply with DMA obligations. These fines can reach up to 10% of the company's total worldwide turnover for infringements, and up to 20% for repeated infringements, making them among the most severe penalties in EU digital regulation.

Legal Basis

"The Commission may by decision impose on gatekeepers fines not exceeding 10 % of its total worldwide turnover in the preceding financial year where it finds that a gatekeeper, intentionally or negligently:

(a) infringes Article 5, 6 or 7;
(b) fails to comply with a measure imposed pursuant to Article 8(2);
(c) fails to comply with remedies or measures imposed pursuant to Article 18; or
(d) fails to comply with commitments made binding pursuant to Article 25."

— Article 30(1), Regulation (EU) 2022/1925 (Digital Markets Act)

"Where the Commission finds that a gatekeeper has committed an infringement referred to in paragraph 1 of this Article, it may by decision impose on that gatekeeper fines not exceeding 20 % of its total worldwide turnover in the preceding financial year where the gatekeeper has committed the same or a similar infringement of an obligation laid down in this Regulation in relation to the same core platform service."

— Article 30(2), Regulation (EU) 2022/1925

Why It Matters

DMA penalties represent one of the strongest enforcement tools available to ensure large digital platforms operate fairly and maintain contestable markets. For designated gatekeepers—typically very large tech companies—these penalties pose a significant financial risk that can amount to billions of euros, making compliance a business priority rather than an optional consideration.

The penalty structure is designed to be proportionate to the company's size while remaining genuinely dissuasive. Because fines are calculated as a percentage of global turnover rather than a fixed amount, they scale appropriately whether the gatekeeper is a mid-sized platform or one of the world's largest technology companies. The doubling of maximum fines for repeat offenders sends a clear message that persistent non-compliance will face escalating consequences.

For businesses operating in the digital ecosystem, understanding DMA penalties helps contextualize why gatekeepers may change their practices. When a gatekeeper modifies how it ranks products, shares data, or allows interoperability, these changes often reflect the substantial financial incentive to avoid Commission enforcement action. The penalties also provide assurance to business users and consumers that the rules have teeth and will be enforced.

Key Points

  • Maximum fine of 10% of worldwide annual turnover for first-time violations of DMA obligations, including breaches of Articles 5, 6, and 7
  • Doubled to 20% for repeated infringements of the same or similar obligations relating to the same core platform service
  • Periodic penalty payments of up to 5% of average daily turnover can be imposed to compel compliance with Commission decisions
  • Intentional or negligent conduct both qualify for penalties; companies cannot avoid sanctions by claiming lack of awareness
  • Turnover-based calculation ensures penalties remain proportionate and dissuasive regardless of company size
  • Commission enforcement authority is exclusive for gatekeepers; national authorities cannot impose DMA penalties

DMA Penalties vs. GDPR Fines

While both DMA penalties and GDPR fines can reach significant amounts, they differ in scope and calculation. GDPR fines apply to data protection violations and are capped at the higher of €20 million or 4% of annual worldwide turnover. DMA penalties specifically target anti-competitive gatekeeper conduct and can reach 10% (or 20% for repeat offenses) of worldwide turnover—substantially higher potential amounts.

GDPR enforcement is carried out by national data protection authorities coordinated through the one-stop-shop mechanism, while DMA enforcement for gatekeepers is exclusively in the hands of the European Commission. GDPR violations often involve improper handling of personal data, whereas DMA violations concern platform practices like self-preferencing, data combination restrictions, and interoperability obligations.

Aspect DMA Penalties GDPR Fines
Maximum amount 10% (20% repeat) of worldwide turnover €20M or 4% of worldwide turnover
Enforced by European Commission National data protection authorities
Scope Gatekeeper anti-competitive conduct Data protection violations
Applies to Designated gatekeepers All data controllers/processors

Related Terms

  • Gatekeeper
  • Digital Markets Act (DMA)
  • Core platform service
  • DSA penalties
  • GDPR fines
  • Digital Services Coordinator
  • European Commission enforcement
  • Contestability
  • Self-preferencing
  • Anti-competitive practices

DMA penalties: Core Facts

Status
Active Definition
Verified
2026-03-07

Related

Very transparent. Every political ad will be labelled, linked to a transparency notice with detailed information, and online ads will be searchable in a central European repository.
The Network coordinates election-related cooperation between member states. National contact points for TTPA enforcement should be members of this network where possible.
Election campaigns will need to ensure all paid advertising includes proper labels and transparency notices. Sponsors must be prepared to provide required information to all service providers.
Several major platforms currently do not allow paid political advertising, including some large social networks. This limits where political actors can place paid online advertisements.
The TTPA applies from 10 October 2025. Member States had until 10 April 2025 to designate competent authorities, and the Commission must provide label templates by 10 July 2025.
Publishers must ensure completeness and accuracy of certain information but are not required to verify all sponsor claims. They must correct manifestly erroneous information when they become aware of it.
Yes. When a hosting provider and a website both display an ad, both are considered publishers with responsibility for their specific services. Contracts should clarify how they share compliance duties.
If a publisher removes or disables access to a political ad due to illegality or terms violations, they must still provide access to the transparency information for the full seven-year retention period.