The Netherlands premieres the first GDPR fining policy in the EU
The Dutch Data Protection Authority just released its GDPR fining policy, being the first country to do so.
GDPR allows for a maximum fine of 4 percent of global revenue or €20 million, whichever is higher, but little has been said about how to determine the exact fine amount and what the scale is.
The new GDPR fining policy sheds light on this as it introduces a four category system, giving various examples depending on company size and maximum fine. For example, if a company’s maximum fine is €10 million, it might face the following fines for less severe violations:
Re: The Netherlands premieres the first GDPR fining policy in the EU
Yves, that being said, it is then a statement, that the 10 mio will not be fined ever, right? Or is another category above CatIV?
And also there are potential variations in "guiltiness" of the behaviors, wouldn't it? Will be interesting to see how GDPR certifications and assertions will proceed, same as with definition of fines...