According to the GDPR, infringements of the obligations of the controller and the processor pursuant to Articles 37, 38 and 39 shall be subject to administrative fines up to 10 000 000 EUR, or in the case of an undertaking, up to 2 % of the total worldwide annual turnover of the preceding financial year, whichever is higher.
Article 37 - Designation of the data protection officer
Article 38 - Position of the data protection officer
Article 39 - Tasks of the data protection officer
The content herein is provided for your convenience and does not constitute legal advice.
Compliance Technology Solutions B.V. 2018