Skip to Primary Navigation

Inside EDPB’s ‘Imposition Guidelines’ on administrative fines under GDPR

Participants dressed in business casual attire working on laptop, phone at re:publica 22 on June 09, 2022 in Berlin
Photo: Till Rimmele/Getty Images

In addition to corrective powers, the EDPB suggests that Data Protection Authorities (DPAs) follow a five-step approach when deciding fines.

Newly proposed guidelines from the EDPB aim to harmonize the methodology for determining whether DPAs should impose an administrative fine, under GDPR, Article 83, instead of or in addition to other corrective measures, as foreseen under GDRP, Article 58 (2).

The “Imposition Guidelines” propose that when a deficiency in complying with GDPR is

Get full access, free for a month

This is a Premium article. Start your 28-day free trial to continue reading and access all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience