Sure. Read sections 58 and 83 of the GDPR. http://www.privacy-regulation.eu/en/article-83-general-conditions-for-imposing-administrative-fines-GDPR.htm http://

Sure. Read sections 58 and 83 of the GDPR. http://www.privacy-regulation.eu/en/article-83-general-conditions-for-imposing-administrative-fines-GDPR.htm http://www.privacy-regulation.eu/en/article-83-general-condi... http://www.privacy-regulation.eu/en/article-58-powers-GDPR.htm http://www.privacy-regulation.eu/en/article-58-powers-GDPR.h... Section 58 is about EU powers under the GDPR. Section 83 gets into the spirit and purpose of fines levied. Being overly punitive would only invite judicial oversight.