What are the fines for violating GDPR?
The maximum penalty for GDPR violations is 4% of global revenue or €20 million, whichever is higher. Data protection authorities can also issue sanctions, such as bans on data processing or public reprimands.
Past GDPR fines
Some notable examples of GDPR fines so far:
- Google LLC fined €50m – Jan 2019 (source)
- British Airways fined £183m – July 2019 (source)
- Marriott International fined £99m – July 2019 (source)
Fines have been observed in Portugal, Germany, France, Poland, Italy, Norway, Lithuania, Belgium, Spain, Denmark, the UK, Romania, Turkey, Greece, Sweden, Hungary, Austria, and Latvia.