Businesses that do not abide by the General Data Protection Regulation’s (GDPR) rules regarding data processing, data security, and data protection run the risk of incurring hefty fines. The maximum fine for a lesser offense is $11.03 million, or the greater of 2 percent of the company’s annual global revenue or $11.03 million. For more serious offenses, the maximum fine is greater than $22.07 million or 4% of the annual global revenue.