Set by the law · GDPR Art. 83(1)
Administrative fine
In plain English
A money penalty a data protection authority can impose for GDPR infringements. It must be effective, proportionate and dissuasive; the highest tier is up to 20 million euro or 4% of worldwide annual turnover, if higher.
The official text
Each supervisory authority shall ensure that the imposition of administrative fines pursuant to this Article in respect of infringements of this Regulation referred to in paragraphs 4, 5 and 6 shall in each individual case be effective, proportionate and dissuasive.
up to 20 000 000 EUR, or in the case of an undertaking, up to 4 % of the total worldwide annual turnover of the preceding financial year, whichever is higher
94 decisions on Fino cite Article 83 GDPR. See them →
Related
The official text is quoted word for word from the English version of the source named under it; only the version published in the Official Journal of the EU is legally binding. The plain-English line is Fino’s own summary, not legal advice.