The GDPR enables regulatory authorities in each EU member state to issue sanctions and fines to organizations they find in violation of GDPR requirements. The maximum penalty is € 20,000,000 or 4 % of global revenue, whichever is higher. Regulators can also issue sanctions, such as bans on data processing or public reprimands.