The General Data Protection Regulation (GDPR), applicable since May 2018, gives the European Data Protection Authorities, since then called the Supervisory Authorities, the power to serve administrative fines of up to €20 million or 4% of the global annual turnover of the precedent financial year, whichever is higher.
GDPR : Sanction (Administrative fine)
