Fines

To enforce the GDPR in cases where organisations do not comply, DPAs impose appropriate, necessary and proportionate measures taking into account the circumstances of the case. Their powers range from warnings and reprimands to administrative fines and orders. Fines under the GDPR can reach up to €20 million or 4% of a company’s global annual turnover. The EDPB adopts guidance, opinions and binding decisions concerning the imposition of corrective measures where appropriate.