GDPR Article 83 Fine 2027 Calculator
GDPR Article 83 two-tier fines (2027): Tier 1 max €10M or 2% global annual turnover (whichever HIGHER). Tier 2 max €20M or 4% (whichever higher). Tier 1 = records, breach notification, DPO. Tier 2 = lawful basis, consent, data subject rights, international transfers.
Art 83 Two-Tier Structure
Tier 1 (Art 83(4)) — administrative obligations: records, breach notification, DPO appointment, impact assessments. Lower cap. Tier 2 (Art 83(5)) — fundamental rights: lawful basis, consent, data subject rights, international transfers.
Calculation Method
Greater of: % of group global turnover OR euro amount. Multinationals capped by % (always higher for >€500M turnover). SMEs capped by euro amount.
Mitigating Factors
DPA cooperation, voluntary disclosure, swift remediation, victim mitigation reduce fine. Aggravating: prior breaches, intentional violation, large scope, vulnerable subjects.
Source and Disclaimer
GDPR Article 83, EDPB Guidelines on Administrative Fines, enforcement tracker. 2027 caps unchanged.
Source: eur-lex.europa.eu GDPR Art 83. Last updated: May 2026.