GDPR Article 83 — General conditions for imposing administrative fines
Enforced by: ICO (UK) / National DPAs
Current as of May 25, 2018
Plain Language Summary
Two-tier fines: up to €10M/2% turnover for administrative violations; up to €20M/4% turnover for fundamental violations (consent, data subject rights, transfers).
Infringements relating to basic principles for processing, conditions for consent, data subjects' rights, and transfers of personal data to a third country shall be subject to administrative fines up to €20,000,000, or in the case of an undertaking, up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher.
Infringements of other provisions shall be subject to administrative fines up to €10,000,000, or in the case of an undertaking, up to 2% of the total worldwide annual turnover of the preceding financial year, whichever is higher.