Guidelines 04/2019 – Article 25 GDPR Data Protection by Design and by Default

SECTION 5  ENFORCEMENT OF ARTICLE 25 AND CONSEQUENCES

83. Supervisory authorities may assess compliance with Article 25 according to the procedures listed in Article 58. The corrective powers are specified in Article 58 (2) and include the issuance of warnings, reprimands, orders to comply with data subjects’ rights, limitations on or ban of processing, administrative fines, etc..

84. DPbDD is further a factor in determining the level of monetary sanctions for breaches of the GDPR, see Article 83(4).