Your contacts
Georg Krog
Lukas Bühlmann
The European Data Protection Board (hereafter ‘EDPB’) has published Guidelines for the calculation of fines under the General Data Protection Regulation (GDPR). In this part 3 of a series of six articles, we will go through how the EDPB identifies a harmonised starting point for the calculation of GDPR fines from which the further calculation should commence.
We have prepared a pdf for you with a graphic calculation guide – part 3 (14 pages) with the following points:
- Starting point for calculation
- Categorisation of infringements under Articles 83(4)–(6) GDPR
- Overview of infringements punishable under Article 83(4) GDPR
- Overview of infringements punishable under Article 83(5) and (6) GDPR
- Seriousness of the infringement
- Seriousness of the infringement with regard to nature, gravity and duration of the infringement, Article 83(2)(a) GDPR
- Seriousness of the infringement with regard to “The nature of the infringement”, Article 83(2)(a) GDPR
- Seriousness of the infringement with regard to “The gravity of the infringement”, Article 83(2)(a) GDPR
- Seriousness of the infringement with regard to “The gravity of the infringement” and the “nature” of processing, Article 83(2)(a) GDPR
- Seriousness of the infringement with regard to “The gravity of the infringement” and the “scope” of processing, Article 83(2)(a) GDPR
- Seriousness of the infringement with regard to “The gravity of the infringement” and the “purpose” of processing, Article 83(2)(a) GDPR
- Seriousness of the infringement with regard to “The gravity of the infringement” and “number of data subjects” of processing, Article 83(2)(a) GDPR
- Seriousness of the infringement with regard to “The gravity of the infringement” and “level of damage” suffered and the extent to which the conduct may affect individual rights and freedoms, Article 83 (2)(a) GDPR
- Seriousness of the infringement with regard to “The duration of the infringement”, Article 83 (2)(a) GDPR
- Seriousness of the infringement with regard to “The intentional or negligent character of the infringement”, Article 83(2)(b) GDPR
- Categories of personal data affected by the infringement, Article 83(2)(g) GDPR
- Classifying the seriousness of theinfringement and identifying the appropriate starting amount
- Turnover of the undertaking with a view to imposing an effective, dissuasive, and proportionate fine, Article 83(1) GDPR
- Starting points for calculating the fine.
Please click on the button below to download the pdf:
