Penalties
The maximum fine or penalty for every rule RuleGoose checks — pulled straight from the law or the regulator, and linked so you can verify it. Below each is a free 60-second checker so you can see where you actually stand.
Tick the rules that apply to your business and see the combined worst-case statutory ceiling — the most these laws allow on paper, not a prediction. Most incumbents quote one fine; this stacks every rule that lands on you.
Worst-case ceiling assuming one violation of each ticked fixed-dollar rule. EU rules (AI Act, GDPR, GPSR, accessibility, packaging, consumer rights) carry penalties set as a percentage of global turnover or by each member state, and platform/PCI penalties are contractual — these are flagged "variable" and counted separately, never folded into the dollar figure. Statutory maximums, not predictions; small sellers are rarely hit with the cap.
Source: EUR-Lex — Regulation (EU) 2024/1689
Check yours free →Source: EUR-Lex — Regulation (EU) 2023/988
Check yours free →Source: EUR-Lex — Directive (EU) 2019/882
Check yours free →Source: EUR-Lex — Regulation (EU) 2016/679
Check yours free →Source: EUR-Lex — Regulation (EU) 2025/40 (PPWR)
Check yours free →Source: EUR-Lex — Directive 2011/83/EU
Check yours free →Source: EUR-Lex — Directive 98/6/EC (Art. 6a)
Check yours free →Source: ROSCA on Cornell LII (15 U.S.C. 8401)
Check yours free →Source: eCFR — 16 CFR Part 465
Check yours free →Source: California AG — CCPA
Check yours free →Source: eCFR — 16 CFR Part 316 (CAN-SPAM Rule)
Check yours free →Source: TCPA on Cornell LII (47 U.S.C. 227)
Check yours free →Source: ADA.gov — web accessibility guidance
Check yours free →Source: eCFR — 16 CFR Part 312 (COPPA Rule)
Check yours free →Source: Etsy — Creativity Standards
Check yours free →Source: PCI Security Standards Council
Check yours free →up to €15M or 3% of global turnover (AI Act Art. 99) (LabelProof). Source: EUR-Lex — Regulation (EU) 2024/1689. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
listing removal + account suspension (Etsy Compliance). Source: Etsy — Creativity Standards. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
FTC fines up to $53,088/violation + state penalties (RenewProof). Source: ROSCA on Cornell LII (15 U.S.C. 8401). This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
recalls, EU sales bans + member-state fines (GPSR Ready). Source: EUR-Lex — Regulation (EU) 2023/988. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
up to $53,088 per violation (FTC) (ReviewProof). Source: eCFR — 16 CFR Part 465. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
market withdrawal + member-state fines (AccessProof). Source: EUR-Lex — Directive (EU) 2019/882. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
up to €20M or 4% of global turnover (Art. 83) (PrivacyProof). Source: EUR-Lex — Regulation (EU) 2016/679. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
$2,500/violation — $7,500 if intentional or a minor (CCPA Ready). Source: California AG — CCPA. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
up to $53,088 per email (FTC) (MailProof). Source: eCFR — 16 CFR Part 316 (CAN-SPAM Rule). This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
$500–$1,500 per text or call (TextProof). Source: TCPA on Cornell LII (47 U.S.C. 227). This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
card-network fines $5K–$100K/month (contractual) (PayProof). Source: PCI Security Standards Council. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
DOJ up to $118,225 (1st violation) + private-suit costs (ADA Ready). Source: ADA.gov — web accessibility guidance. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
up to $53,088 per violation (FTC) (KidProof). Source: eCFR — 16 CFR Part 312 (COPPA Rule). This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
EPR registration fees + member-state fines (PackProof). Source: EUR-Lex — Regulation (EU) 2025/40 (PPWR). This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
12-month extended withdrawal period for missing disclosures + fines up to 4% of annual turnover (Omnibus Dir. 2019/2161) (ContractProof). Source: EUR-Lex — Directive 2011/83/EU. This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.
fines up to 4% of annual turnover (Omnibus Dir. 2019/2161) — or €2M where turnover is unknown (PriceProof). Source: EUR-Lex — Directive 98/6/EC (Art. 6a). This is the maximum statutory ceiling, not a prediction — real-world enforcement is discretionary and usually far lower.