As from May 2018 and the entry into force of the EU General Data Protection Regulation (GDPR), the supervisory authority will have various corrective powers, including the right to impose an administrative fine up to €10 million or 2 % of the total worldwide annual turnover of the preceding financial year, whichever is higher.
Bron: Lexgo