CLAIM-2026-09-12-07

Article 64(10) provides that microenterprises and small enterprises are not subject to fines for failure to meet the deadlines in Article 14(2)(a) and 14(4)(a), and that open-source software stewards are not subject to administrative fines for infringements of the Regulation.

Why it matters

The carve-out is narrow and specific: it covers the 24-hour early warning only. The 72-hour notification, the final report and every other duty still bind a small enterprise.

Sources

• europeancyb2024penalties
• europeancom2026opensourc