If the GDPR is not complied with, the Swedish Privacy Protection Authority can issue warnings, reprimands, injunctions, restrictions, prohibitions and administrative penalty fees. For authorities, the maximum amount of penalty fees is SEK 10 million. For non-authorities, the maximum amount is EUR 20 million or, in the case of a company, four percent of global annual turnover, whichever is higher.