The implementation of the GDPR and the increased number of official audits are leading to ever higher fines.

Heavy fine for German real estate group

Under the old BDSG, a maximum fine of 300,000 was possible. Now, under the GDPR, fines of up to 20 million euros can be imposed - or up to four percent of annual global turnover.

Even if the full range of fines has not yet been exhausted, the fines are rising sharply: The highest fine in Germany was imposed on the real estate company Deutsche Wohnen. In November last year, the Berlin data protection authority imposed a fine of EUR 14.5 million for the unauthorized storage of tenant data within the Group.

Fines imposed have quadrupled

Even if spectacular fines such as those described above have hardly occurred so far, a trend can be seen: the number of reported infringements and fines has risen sharply in the last six months. In 2018, the authorities issued "only" 40 fines. Last year, more than 185 fines were imposed.