← Back

Wire · regulatory

To fine or not to fine? What the EDPB's new GDPR Guidelines mean for organizations

Published

15 October 2026

Topic

regulatory

◆ Sectors

Cybersecurity

◆ Geography

Europe

◆ Source

Read at reedsmith.com →

◆ Verified

Fusion42 · 15 October 2026 · Fusion42 review

The European Data Protection Board has issued new guidelines shifting focus to whether fines should be imposed at all for GDPR breaches, introducing a structured five-step test for supervisory authorities to decide on administrative fines beyond just calculating amounts.

This Wire brief sits within Fusion42's coverage of Cybersecurity, and 5 sources have reported it between 23 Sep 2026 and 16 Oct 2026.

◆ ◆ The Wire takeaway

You need to rethink your compliance strategy now that European data regulators have a clear test to decide if fines apply, not just how big they are. This low bar for fault means your company’s actions and its vendors’ mistakes can trigger fines more easily than before.

◆ Coverage

5 sources · first reported 23 Sep 2026 · latest 16 Oct 2026

◆ Related on Wire

◆ Topics

Cybersecuritygdpredpbdata-protectionregulatory-guidelinescompliance