What are the sanctions for non-compliance with the GDPR ?

Infringements to the GDPR (even for non-EU companies) may lead to fines of up to the greater of €20 million or 4% of worldwide turnover, without prejudice to individual and collective claims for damages that can be brought before the courts. The data protection authorities also have the power to impose temporary or indefinite bans on processing and to suspend data flows to recipients in third countries.

Pursuing to GDPR Art. 83 (4) (a), the sanctions for not appointing an EU Representative can go up to €10 million or 2% of total worldwide annual turnover, whichever is higher.

Click here if you want to learn more about GDPR fines and sanctions.