Everyone has latched onto this 4% number, like every breach of GDPR rules will incur a massive fine. It's not "you will be fined 4% for every breach". It's "yo

Everyone has latched onto this 4% number, like every breach of GDPR rules will incur a massive fine. It's not "you will be fined 4% for every breach". It's "you can be fined up to 4%", the GDPR actually states that the punishment should be proportional to the damage caused. Here's the specific language form the English language version of the GDPR [1] (I suggest you read the whole page): > Each supervisory authority shall ensure that the imposition of administrative fines pursuant to this Article in respect of infringements of this Regulation referred to in paragraphs 4, 5 and 6 shall in each individual case be effective, proportionate and dissuasive. If you accidentally send customer data to Google Analytics without their permission, and rectify the issue when it's discovered, you're not going to get slapped with a multi-million dollar fine. [1] https://gdpr-info.eu/art-83-gdpr/ https://gdpr-info.eu/art-83-gdpr/