Processing personal data in breach of the GDPR  may entail business, financial and reputational risks 

  • The supervisory authorities may carry out audit and issue warning or enforcement letter;
  • It may also serve fine of up to 20 million euros or 4% of the annual worldwide turnover whichever is higher.
  • Most of the Authorities' decisions and massive security breaches are reported in the media
  • Individuals must be notified of data breaches under certain circumstances
  • Customer relationship might suffer from non-compliance with data protection rules especially where  customer's data protection request is not handled properly (e.g. right of access, data portability etc.)
  • Customers' trust may be lost if customers' data is misused or lost

This post is also available in fr_FR.