The Netherlands DPA confirms its GDPR fining policy
The Netherlands’ Data Protection Authority has published its GDPR fining policy which divides breaches into four categories according to their severity.
There are 4 tiers of fines up to 1 million euro. A higher fine than 1 million euros is, of course, possible if the circumstances so require.
Source: The Netherlands DPA confirms its GDPR fining policy – Privacy Laws & Business