GDPR Fine Estimator
Don't let data privacy fines catch you off guard. improved Estimate your potential liability under General Data Protection Regulation.
Higher severity suggests intentional misconduct, large scale data loss, or lack of cooperation.
- Nature, gravity, and duration of infringement.
- Intentional or negligent character of infringement.
- Actions taken to mitigate damage involved.
- Degree of cooperation with the supervisory authority.
Understanding the Tiers
GDPR fines are not random; they are categorized into two tiers based on the nature of the violation.
Lower Tier (Art. 83(4))
Or 2% of global turnover. Applies to technical measures (e.g., failure to appoint a DPO, poor vendor contracts).
Higher Tier (Art. 83(5))
Or 4% of global turnover. Applies to fundamental rights (e.g., consent violations, data subject rights, unlawful processing).
Mitigating Factors
Action: Did you take immediate steps to mitigate damage?
History: Do you have a clean track record?
Cooperation: Did you notify the DPA proactively?
Negligence: Was the breach intentional or due to laziness?
Category: Did it involve sensitive data (medical, political)?
Press ⌘K
