GDPR Fine Calculator (Maximum Fines under Article 83)
Work out the maximum GDPR or UK GDPR fine for a company — €10 million / 2% or €20 million / 4% of worldwide annual turnover, whichever is higher — and see how regulators weigh the factors that set the actual amount.
For general information only — not legal advice. Laws vary by location; consult a qualified lawyer.
How to use
- 1Enter the company's worldwide annual turnover (whole group, previous financial year).
- 2Choose the type of infringement.
- 3See the maximum fine and the factors that raise or lower it.
How it's calculated
Lower tier (e.g. security, records, processors, DPO, breach notification): up to €10M or 2% of worldwide annual turnover, whichever is higher. Upper tier (principles, lawful basis, consent, data subject rights, international transfers): up to €20M or 4%. UK: £8.7M / 2% and £17.5M / 4%.
Frequently asked questions
Is the maximum what companies actually pay?
Rarely. Regulators follow the EDPB's 2023 guidelines, starting from the seriousness of the infringement and adjusting for intent, duration, number of people affected, cooperation and previous infringements. Most fines are far below the cap.
Whose turnover counts?
The whole undertaking — usually the entire corporate group's worldwide turnover for the previous financial year.
What's the largest GDPR fine so far?
€1.2 billion, imposed on Meta by the Irish Data Protection Commission in 2023 for EU–US data transfers.