Under the DPDI, breaches under PECR will fall under GDPR, resulting in higher fines. Currently, the highest fine for infringing on web cookies or direct marketing rules is £500k. This fine could increase to as much as 4% of global annual turnover.