At Body of Knowledge depth, how are the GDPR's two administrative-fine tiers commonly described?
Select an answer to reveal the explanation.
Short Explanation
Two speed limits, not one: some breaches top out around the 2%/€10M band, the heavier ones around 4%/€20M—whichever figure is higher. It's a tiered stick, not a flat parking ticket.
Full Explanation
Article 83 establishes two fining tiers. Certain infringements are capped at the higher of €10 million or 2% of worldwide annual turnover; others—often involving core principles, rights, or transfer rules—at the higher of €20 million or 4%. There is no single global €500 fee, and the EDPB does not impose prison for typos.