For severe breaches the maximum is actually €20 million or 4% of global revenue [1] whichever is higher. For smaller breaches it is 2%. [1] https://gdpr-info.

For severe breaches the maximum is actually €20 million or 4% of global revenue [1] whichever is higher. For smaller breaches it is 2%. [1] https://gdpr-info.eu/issues/fines-penalties/ https://gdpr-info.eu/issues/fines-penalties/