The enforcement procedures and fines depend on the specific articles of the GDPR that the organization has breached. A maximum fine for a GDPR violation is 4% of the total worldwide annual turnover of the preceding financial year or €20 million (whichever is greater).