GDPR - Guidelines On Fines To Be Imposed By Supervisory Authorities

The Article 29 Working Party ("WP29") has published its guidelines on the application and setting of administrative fines for the purposes of General Data Protection Regulation 2016/679 ("GDPR") (the "Guidelines"). The Guidelines provide an insight into how supervisory authorities will determine whether an administrative fine must be imposed under the GDPR. 

Corrective Powers of Supervisory Authority

The WP29 explains that administrative sanctions constitute an important enforcement tool under the GDPR and that it is critical for fines to be applied in an equivalent manner throughout the EU. Under the GDPR, the power to impose fines will remain with the supervisory authorities of each Member State and the supervisory authorities must observe the principles set out in the Guidelines.