GDPR Fine Risk Simulator — Article 83 Enforcement Model

Violation Inputs

Annual global turnover €250M

Data subjects affected 50,000

Severity / culpability score 5.5 / 10

Cooperated with the DPAArt. 83(2)(f) — active cooperation cuts the fine ~30%

Enforcement Outcome

Infringement tier

Lower — Art. 83(4)

Statutory cap

€10.00M

max(€10M, 2% of turnover)

Estimated fine

€1.93M

0.77% of annual turnover

How it works

GDPR Article 83 sets two statutory ceilings for administrative fines. Which one applies depends on which provisions were breached — this model maps that choice onto a single 0–10 severity/culpability score, the same factors a Data Protection Authority actually weighs under Art. 83(2): nature, gravity and duration, intentional vs. negligent character, and the number of data subjects affected.

Lower tier  (Art. 83(4)): cap = max(€10M,  2% × global turnover)
Higher tier (Art. 83(5)/(6)): cap = max(€20M, 4% × global turnover)
tier = severity ≥ 6  →  Higher, else Lower

reach   = clamp( log10(subjects) / 7, 0.1, 1 )   // 10 subjects → low, 10M → saturates
weight  = severity/10 × (0.5 + 0.5 × reach)
cooperation multiplier = 0.7 if cooperated else 1.0

fine = cap × weight × cooperation multiplier

Turnover slider — sets the "4% / 2% of global annual turnover" side of each cap.
Data subjects slider — scales severity on a log axis: a breach touching 10M people weighs far more than one touching 100, but the marginal effect flattens (Art. 83(2)(a) — "number of data subjects" is one factor among several, not the only one).
Severity slider — a single 0–10 stand-in for nature/gravity/duration/intent; crossing 6 moves the case from Art. 83(4) to the tougher Art. 83(5)/(6) regime.
Cooperation toggle — Art. 83(2)(f): DPAs are directed to weigh the degree of cooperation with the supervisory authority when setting the final amount.

The bars show the statutory cap (amber) against the computed estimate (red); the ring of points is the affected-subjects population rendered on the same log scale used in the formula.

Statutory cap Estimated fine Data subjects (log scale)

⚠ Couldn't load the 3D engineThree.js failed to load from the CDN. Check your connection and reload.