Translations:De GDPR en archiefzorg: wat is er nog mogelijk?/25/en

The text provides more information about the fines and states that they must be effective, proportionate and dissuasive, and must take into account the nature, gravity and duration of the infringement. The nature, scope and purpose of the processing also need to be analysed. In determining the sanction, it is also considered whether the infringement is intentional or negligent, whether (technical and organisational) measures have been implemented to mitigate the damage suffered, and whether there have been relevant previous infringements. The degree of cooperation with the supervisory authority, in order to remedy the infringement and mitigate its possible adverse effects, is also considered. Finally, any financial benefits gained are also a factor in determining the sanction.