The Article 29 Working Party has issued its guidelines in relation to the application of fines under the GDPR. The document is intended to be used by EU data protection authorities in order to ensure a consistent application and enforcement of the GDPR in Europe, and is helpful to understand the criteria which will be used by the authorities when issuing sanctions.
Read more: https://ec.europa.eu/newsroom/just/document.cfm?doc_id=47889