Hacker News new | ask | show | jobs
by inetsee 2959 days ago
My reading of the GDPR says that the MINIMUM fine is 20,000,000 Euros, which I think would be a pretty big problem for an individual working on a side project.

I also think the 403 error page explaining that the GDPR is the reason the visitor can't access the page is a nice touch.
5 comments
dragonwriter 2959 days ago
> My reading of the GDPR says that the MINIMUM fine is 20,000,000 Euros.

€20M is the minimum value for the upper limit of an Article 83(5) or Article 83(6) administrative fine; it's not a minimum fine, and a lesser value (€10M) applies as the corresponding base upper limit for some other violations.

link
matthewmacleod 2959 days ago
Your reading of the GDPR is wrong. There is no minimum fine. There is a maximum fine of €20m or 4% of global turnover, whichever is greater.
link
olliej 2959 days ago
You’re misreading the fine is in the range 0..max(20 million, .04*revenue).

Basically if you’re a small business your maximum fine is likely 20 million, if you’re a large one it’s 4% of your global revenue. The global revenue is needed because companies are perfectly happy moving their money around to minimize the amount of money they make in places that will fine and tax them. They’re also super good at manufacturing reasons that profit does not actually get recorded as profit. Also it’s generally accepted that fines and settlements are an expense, so you’d get a situation where ome fine would effectively discount another.

link
icedchai 2959 days ago
It's only a problem if you are fined, and actually pay it. The odds of an individual, unknown, low traffic side project facing these problems are effectively zero. Go play the lottery.
link
Sohcahtoa82 2959 days ago
https://gdpr-info.eu/art-83-gdpr/

The wording says fines "up to 20,000,000 Euros"

"up to" usually implies a minimum, not a maximum.

link
dragonwriter 2959 days ago
> "up to" usually implies a minimum, not a maximum.

“Up to” literally means a maximum.

link
Sohcahtoa82 2959 days ago
Errr...I typoed my previous message and accidentally flipped them.

The previous commenter said the fine was a 20m "minimum" fine. The GDPR text says it's "up to" 20m. I meant to say that that means it's a maximum.

link
olliej 2959 days ago
Maybe they work in advertising ;)
link