Member States shall establish rules on other penalties (beyond administrative fines) for GDPR infringements, particularly those not subject to Article 83 fines. Penalties must be effective, proportionate, and dissuasive. Member States must notify the Commission of penalty provisions.
Article 84
Penalties
Understanding This Article
Article 84 allows Member States to supplement GDPR's administrative fine regime with additional penalties, including criminal sanctions, professional sanctions, or other enforcement mechanisms suited to national legal systems. This enables comprehensive enforcement addressing all types of GDPR violations.
Key Points
- Member States establish additional penalties beyond fines
- Must be effective, proportionate, dissuasive
- Covers violations not subject to administrative fines
- Notification requirement to Commission