What is the maximum fine under GDPR for the most serious infringements?
- A.EUR 10 million or 2% of global annual turnover, under Article 84, which harmonises criminal penalties for GDPR infringements identically across every member state
- B.EUR 20 million or 4% of total worldwide annual turnover, whichever is higher
- C.EUR 50 million
- D.EUR 1 million, and it lapses on the fifth anniversary of the collection date
Why B is correct
Article 83(5) provides for fines up to EUR 20 million or 4% of total worldwide annual turnover of the preceding financial year, whichever is higher, for the most serious infringements such as violations of data processing principles, consent conditions, and data subject rights.
Know someone studying for GDPR? Send them this one.