GDPR Fines

The less severe infringements could result in a fine of up to €10 million, or 2% of the firm’s worldwide annual revenue from the preceding financial year, whichever amount is higher.

The more serious infringements go against the very principles of the right to privacy and the right to be forgotten that are at the heart of the GDPR. These types of infringements could result in a fine of up to €20 million, or 4% of the firm’s worldwide annual revenue from the preceding financial year, whichever amount is higher. 

As a guide, Waterford Aero Club’s revenue for FY2020 was in excess of €230,000 – so the max limit would be either €10m or €20m for a less severe or more serious infringement respectively. This grossly exceeds the club’s revenue since its conception.