EDPB harmonises fining methodology and adopts final DSA-GDPR guidelines

Brussels, 21 September – During its latest plenary, the EDPB has adopted guidelines on the application of the power to impose administrative fines in relation to other corrective powers under the GDPR and the final version of its guidelines on interplay between the Digital Service Act (DSA) and the GDPR.The new EDPB guidelines are a major step in further aligning how Data Protection Authorities decide whether an administrative fine should be imposed, either on its own or alongside other corrective measures.The GDPR significantly increased the corrective powers of DPAs, with fines serving as an important instrument for effective enforcement. The guidelines reaffirm our commitment to providing greater clarity and ensuring the consistent application of the GDPR across Europe.EDPB Deputy Chair, Jelena Virant BurnikData Protection Authorities (DPAs) should follow a five-step methodology when deciding whether to impose an administrative fine:the DPA checks if the infringement can lead to a f