Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions
Mail Us support@pass4success.com
Location US
Mob_nav_barsMENU

Exin PDPF Exam - Topic 8 Question 104 Discussion

According to Article.33 of the GDPR the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority. What is the maximum penalty for non-compliance with this notification obligation?
A) 10.000.000 or 2% of the annual global turnover, whichever is higher
B) 20.000.000 or 4% of the annual global turnover, whichever is higher
C) Up to 500.000 with a minimum of 120.000
D) Up to 820.000 with a minimum of 350.000

Exin PDPF Exam - Topic 8 Question 104 Discussion

Actual exam question for Exin's PDPF exam
Question #: 104
Topic #: 8
[All PDPF Questions]

According to Article.33 of the GDPR the controller shall without undue delay and, where feasible, not later than 72 hours after having become aware of it, notify the personal data breach to the supervisory authority. What is the maximum penalty for non-compliance with this notification obligation?

Show Suggested Answer Hide Answer
Suggested Answer: A

10.000.000 or 2% of the annual global turnover, whichever is higher. Correct. This is the maximum according to the GDPR for infringement of the personal data breach notification obligation. (Literature: A, Chapter 7; GDPR Article 33)

20.000.000 or 4% of the annual global turnover, whichever is higher. Incorrect. This fine is given for non- compliance or non-conformity to the basic principles for processing, including conditions for consent.

Up to 500.000 with a minimum of 120.000. Incorrect. This is an outdated number based on the Dutch Penal code. GDPR rules specify higher fines.

Up to 820.000 with a minimum of 350.000. Incorrect. This is an outdated number based on the Dutch Penal code. GDPR rules specify higher fines.


by Ashanti at Aug 12, 2026, 09:36 PM

Limited Time Offer

25%

Off

Get Premium PDPF Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

0/2000 characters
Submit Cancel
Benton
4 days ago
Definitely B, but I think some companies might still risk it.
upvoted 0 times
...
Tonette
9 days ago
Wow, I didn't realize the fines could be that high!
upvoted 0 times
...
Ahmed
14 days ago
Wait, are you sure it's not A? That sounds more reasonable.
upvoted 0 times
...
Noah
20 days ago
Totally agree, that's a huge penalty!
upvoted 0 times
...
Geoffrey
25 days ago
It's B, 20 million or 4% of turnover!
upvoted 0 times
...
Kip
30 days ago
I remember reading that the fines can be really high, but I can't recall if it's the 10 million or the 20 million option.
upvoted 0 times
...
Dyan
1 month ago
I'm not entirely sure, but I feel like the penalties are tiered based on the severity of the breach.
upvoted 0 times
...
Carman
1 month ago
I practiced a similar question, and I believe the maximum penalty is 20 million or 4% of global turnover.
upvoted 0 times
...
Willetta
2 months ago
I think the penalty for non-compliance is pretty severe, but I can't remember if it's 10 million or 20 million.
upvoted 0 times
...

Save Cancel