← Back

Wire · regulatory

Proposed EDPB Guidelines set out a five-step test for GDPR administrative fines

Published

16 October 2026

Topic

regulatory

◆ Sectors

Cybersecurity

◆ Geography

Europe

◆ Source

Read at twobirds.com →

◆ Verified

Fusion42 · 17 October 2026 · Fusion42 review

The European Data Protection Board published draft Guidelines setting a five-step test for when GDPR administrative fines should be imposed, aiming to harmonise enforcement practices across EU Member States. The methodology clarifies legal preconditions for fines, distinguishes when fines versus other corrective measures apply, and is open for public consultation until 13 November 2026.

This Wire brief sits within Fusion42's coverage of Cybersecurity, and 5 sources have reported it between 23 Sep 2026 and 16 Oct 2026.

◆ ◆ The Wire takeaway

You need to factor in a new EU-wide test for GDPR fines that prioritises whether fines are appropriate over other penalties. This harmonised approach means your risk assessments must adjust for clearer, more predictable enforcement across multiple countries.

◆ Coverage

5 sources · first reported 23 Sep 2026 · latest 16 Oct 2026

◆ Related on Wire

◆ Topics

Cybersecuritygdprdata-protectionedpbadministrative-finesregulatory-guidelines