On 16 May 2022, the European Data Protection Board (“EDPB“) published on its website the first version of Guidelines on the calculation of administrative fines under the GDPR, adopted during the May ’22 plenary.
In brief, the EDPB aims to harmonize the approach for calculating the amount of a fine by proposing a five-step methodology, which includes taking into consideration mitigating and aggravating circumstances.
These Guidelines are subject to public consultation, and the feedback should be sent by 27 June 2022 at the latest.
The consultation page is available here, and the Guidelines are available here.
The press release is available here (only in Romanian).
