When it comes to the sanctions under the EU General Data
Protection Regulation, everybody speaks about the astronomic
penalties up to 10-20 Million Euros, however, it is only one of the
10 corrective measures of the data protection authority. And in
some case complying with non-financial corrective measures can be
much more painful than simply paying penalty. So, we present the 9
non-financial corrective measures in this article.
The Article 29 Working Party recently published guidelines on
setting administrative fines under the GDPR, in which it summarized
the circumstances to be taken into account before applying
penalties and other sanctions, so that the GDPR have equivalent
application throughout the EU, and in order to impose effective,
dissuasive and proportional sanctions.