GDPR Fine Estimate Calculator
Work out gdpr fine estimate instantly with clear inputs, formula shown and shareable results.
About GDPR Fine Estimate Calculator
GDPR caps administrative fines at the greater of a fixed amount and a percentage of worldwide annual turnover: 10 million euros or 2 percent for lower-tier infringements, and 20 million or 4 percent for higher-tier ones covering the core principles and data-subject rights. Actual fines are a fraction of the cap, set by the Article 83 factors including nature, gravity, duration, intent, mitigation and cooperation.
Formula
GDPR fine ceiling
cap = max(turnover x tier percentage, fixed tier amount); estimate = cap x severity factor x (1 - mitigation discount)
Worked example
With the default values below, GDPR Fine Estimate Calculator returns Illustrative fine estimate of $2,400,000. Change any input above and every figure here is recalculated in your browser.
Inputs used
- Annual global turnoverminimum 0
- 400,000,000
- Infringement tierone of Lower tier - 2% or 10 million EUR, Higher tier - 4% or 20 million EUR
- Higher tier - 4% or 20 million EUR
- Severity factor applied to the maximumaccepts 0.1–100 %
- 15 %
- Discount for cooperation and mitigationaccepts 0–80 %
- 20 %
Results
- Illustrative fine estimate
- $2,400,000
- Statutory maximum for this tier
- $20,000,000
- Turnover-based cap
- $16,000,000
- Estimate as a share of the maximum
- 12.00%
Step by step
- 1Values used
- 2GDPR fine ceiling
- 3Illustrative fine estimate= 2,400,000
- 4Statutory maximum for this tier= 20,000,000
- 5Turnover-based cap= 16,000,000
- 6Estimate as a share of the maximum= 12.00
Assumptions and limits
- The result is derived only from the 4 inputs listed above. Anything not among them is not part of the calculation.
- In particular, this calculator does not take inflation, tax or fees or charges into account.
- Figures are rounded for display to 2 decimal places, so totals built from several rounded parts can differ slightly from the unrounded arithmetic.
How these calculators are built and tested is described on the Methodology page. If a figure looks wrong, please report it.
Frequently Asked Questions
Which infringements fall in the higher tier?
Breaches of the basic principles including lawfulness and consent, data-subject rights, international transfer rules, and non-compliance with a supervisory authority order.
Is this a legal prediction?
No. It illustrates the statutory ceiling and the effect of mitigating factors. Actual outcomes depend on the regulator's assessment and vary widely between authorities.
Related Calculators
- Breach Exposure Estimate Calculator
- HIPAA Penalty Estimate Calculator
- Quantum Resistance Estimate Calculator
- Access Review Effort Calculator
- Alert Triage Capacity Calculator
- Annualised Loss Expectancy Calculator
- Argon2 Parameters Calculator
- Audit Sample Size Calculator
- Backup Encryption Time Calculator
- Base Encoding Size Calculator
You might also need
- Breach Exposure Estimate CalculatorAlso in Security, Cryptography & Risk
- HIPAA Penalty Estimate CalculatorAlso in Security, Cryptography & Risk
- Quantum Resistance Estimate CalculatorAlso in Security, Cryptography & Risk
- Argon2 Parameters CalculatorAlso in Security, Cryptography & Risk
- Checksum Verification CalculatorAlso in Security, Cryptography & Risk
- CRC Value CalculatorAlso in Security, Cryptography & Risk
