Implementation of the GDPR and increased number of regulatory audits lead to ever higher fines.

High fine for German real estate group

Under the old BDSG, a maximum fine of 300,000 was possible. Now, under the GDPR, up to 20 million euros can be due – or up to four percent of annual global sales.

Even if the full fine framework has not yet been exhausted, the fines are rising sharply: The highest fine in Germany was imposed on the real estate company Deutsche Wohnen. The Berlin data protection authority issued a fine of 14.5 million euros here last November for the unauthorized storage of tenant data in the Group.

Fines imposed have quadrupled

Although spectacular fines such as those outlined above have been few and far between to date, one trend is discernible: the number of reported violations and fines has been rising sharply over the past six months. In 2018, the authorities had issued “only” 40 fines. In the past year, more than 185 fines were imposed.