Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

The maximum GDPR fine is 4% of previous years revenue, or in the case of google $3Bn.


The maximum is 4% or €20M whichever is HIGHER.

So, for a one-person startup, €20M means game over.

https://danuker.go.ro/gdpranoia.html#fines


I wouldn't be surprised if that "or" clause was added specifically to kill one person post box companies that only exist to carry the risk. Big Tech is very good at throwing empty shell companies at problems that involve paying money, like taxes.


This has never been applied and will never be - GDPR enforcement is a joke.

The combined amount of fines across all companies over the GDPR's entire 4-year lifespan is just 1Bn.


there's a transition period. We can't start enforcement with the maximum available penalties.

If the lower don't suffice, we will get closer & closer to the maximum.


The transition period is getting a bit long now and companies are still making billions on violating the GDPR.




Consider applying for YC's Winter 2027 batch! Applications are open till November 2.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: