oh yes. a fine of 4 percent of 20 mil is something that can make small timers go completely out of business. I do understand that because i have sat with my organization's meeting to device better policies that are gdpr compliant. and it's not just us. when we sat down for that, we saw our competitors doing the same thing, huge brands and giants like facebook, twitter, google and others and even medium scale businesses like ivacy vpn and hotjar are turning things around. we're monitoring them and a dozen others just to make sure our team gets it right and come may 25th, we don't get hit by any mammoth penalty.
Here's a venture capital funded organisation who was handled sensitive personal data of many people. They had a legal requirement to register with the English Information Commisioner under existing DPA law. They didn't register.
> Infringments of the following provisions shall, in acccordance with paragraph 2, be subject to administrative fines up to 10 000 000 EUR, or in the case of an undertaking, up to 2% of the total worldwide annual turnover of the preceding financial year, whichever is higher:
Section 5:
> Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher:
5 comments
[ 3.0 ms ] story [ 25.5 ms ] threadWhat fine do you think they got?
(penultimate para) https://www.bloomberg.com/news/articles/2018-04-26/u-k-healt...
Big fines are reserved for the worst incompetent or deliberate repeated failure.
> Especially severe violations: 20,000,000€ or 4% of last year’s global turnover. Whichever is higher. Yes, higher!
This is the MAXIMUM POSSIBLE fine. This is not a minimum fine. It's not a typical fine.
From http://data.consilium.europa.eu/doc/document/ST-5419-2016-IN...
Article 83:
Section 4:
> Infringments of the following provisions shall, in acccordance with paragraph 2, be subject to administrative fines up to 10 000 000 EUR, or in the case of an undertaking, up to 2% of the total worldwide annual turnover of the preceding financial year, whichever is higher:
Section 5:
> Infringements of the following provisions shall, in accordance with paragraph 2, be subject to administrative fines up to 20 000 000 EUR, or in the case of an undertaking, up to 4% of the total worldwide annual turnover of the preceding financial year, whichever is higher:
> Infringments of the following provisions shall, in acccordance with paragraph 2, be subject to administrative fines up to 10 000 000 EUR,
> be subject to administrative fines up to 10 000 000 EUR,
> fines up to 10 000 000 EUR,
> up to
"Up to" means this is the maximum possible fine for the worst, flagrant, on-going, violation.