Art. 84 GDPR – Penalties
- 1Member States shall lay down the rules on other penalties applicable to infringements of this Regulation in particular for infringements which are not subject to administrative fines pursuant to Article 83, and shall take all measures necessary to ensure that they are implemented. 2Such penalties shall be effective, proportionate and dissuasive.
- Each Member State shall notify to the Commission the provisions of its law which it adopts pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them.
Frequently Asked Questions about Article 84
+What penalties exist beyond GDPR fines?
Article 84 requires member states to set additional penalties for infringements not covered by administrative fines, ensuring they are effective, proportionate, and dissuasive.
+Can GDPR breaches lead to criminal penalties?
Member states may provide for criminal or other penalties under national law for certain infringements, in addition to the administrative fines in the GDPR.
+ Do penalties vary between EU countries?
Yes. Because Article 84 leaves additional penalties to national law, the specific sanctions can differ from one member state to another.