Guidelines on the calculation of fines under the General Data Protection Regulation

The EDPB (European Data Protection Board) adopted the Guidelines on the calculation of fines under the General Data Protection Regulation (Guidelines 04/2022 on the calculation of administrative fines under the GDPR) at the May plenary session.

The aim of the guidelines is to present methods for calculating administrative fines according to the General Data Protection Regulation, while focusing mainly on the requirements under Art. 83 of the General Data Protection Regulation, or translating the requirements of this provision into practice when imposing administrative fines by the supervisory authority. The guidelines also include an appendix, which is intended to help supervisory authorities with the calculation of administrative fines.

The guidelines are available in English at this link: