thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Governance, Risk, Audit & Privacy · Intermediate

GDPR Administrative Fines

Two-tier GDPR penalty structure: up to 10 million euros or 2 percent, or up to 20 million euros or 4 percent of global annual turnover.

Definition

The lower tier covers obligations such as controller and processor duties, security, and DPIAs; the higher tier covers principles, lawful basis, data subject rights, and transfers. Authorities consider nature, gravity, duration, intent, mitigation, and cooperation. The largest fine to date is 1.2 billion euros against Meta in 2023 for transfers.

Example

Meta was fined 1.2 billion euros by the Irish DPC for unlawful transfers to the US.

Exam tip

The cap is the higher of the fixed amount or the turnover percentage.

Related terms