How GDPR fines are calculated

Article 83 of the GDPR outlines how the fines will be calculated prior to assessing the penalties to violators. The ten major criteria that authorities will use to determine fines will include:

1. Did the offender meet the standards for data protection certifications?
2. Did the offender cooperate with authorities investigating the data breach?
3. What type of personal data was accessed due to the breach?
4. Did the offender have a history of allowing such data breaches?
5. Was the data breach due to the offender’s negligence or intentional action?
6. What actions did the offender take to mitigate the damage?
7. What was the nature and extent of the damage caused by the data breach?
8. When did the offender notify the regulatory authorities and the affected parties about the data breach?
9. What preventative measures did the offender take prior to the data breach?
10. What other mitigating circumstances were involved in the data breach?