Art. 84 GDPR · Chapter VIII: Remedies, liability and penalties
Article 84 GDPR: Penalties
Text as of 28 October 2026 Reviewed by Sergio Maldonado Elvira on 29 October 2026
Summary (not the official text)
Member States must lay down the rules on other penalties for infringements of the Regulation, in particular for infringements not subject to administrative fines, and take all measures necessary to ensure they are implemented. Such penalties must be effective, proportionate and dissuasive.
Official text
Member States shall lay down the rules on other penalties applicable to infringements of this Regulation in particular for infringements which are not subject to administrative fines pursuant to Article 83, and shall take all measures necessary to ensure that they are implemented. Such penalties shall be effective, proportionate and dissuasive.
Each Member State shall notify to the Commission the provisions of its law which it adopts pursuant to paragraph 1, by 25 May 2018 and, without delay, any subsequent amendment affecting them.
Source: Regulation (EU) 2016/679, Official Journal L 119, 4.5.2016, as corrected. Only the text published in the Official Journal is authentic. © European Union, https://eur-lex.europa.eu
Text as of 28 October 2026.
This is reference material, not legal advice.
Related recitals
This list is under review.
Court of Justice judgments
- C-655/23, IP v Quirin Privatbank AG
Judgment of 4 September 2025ECLI:EU:C:2025:655
The GDPR does not itself give a right to a court order stopping future unlawful processing, though national law may; negative feelings from loss of control can be damage if proven; fault and any injunction cannot reduce compensation.