EUGDPREnforcement PenaltiesEASYFree question
When determining the amount of a fine, supervisory authorities must consider:
- A.Only the controller's revenue
- B.The nature, gravity, and duration of the infringement, the intentional or negligent character, actions taken to mitigate damage, and degree of cooperation
- C.Only the number of affected data subjects
- D.Only whether it is a first offense
Why B is correct
Article 83(2) lists comprehensive factors including nature/gravity/duration, intent/negligence, mitigation actions, cooperation, data categories, previous infringements, and certification adherence.
Know someone studying for GDPR? Send them this one.