EDPB Sets Five-Step Method for GDPR Fines & Finalizes DSA Privacy Guidelines
Europe’s data protection authorities have never lacked ways to punish a GDPR violation. They can warn an organization, reprimand it, order it to change what it is doing, restrict its processing or stop that processing altogether. And, of course, they can fine it. What has been less settled is how an authority should decide among those choices.
