(148) In order to make enforcement of this Regulation more effective, sanctions, including administrative fines, should be imposed for violations of this Regulation - in addition to or instead of appropriate measures imposed under this Regulation by the supervisory authority. If the violation is minor or if the threatened fine would impose a disproportionate burden on the individual, a warning may be given instead. However, due consideration should be given to the nature, gravity and duration of the violation, whether the violation was not intentional, the steps taken to minimize harm, the degree of liability or any relevant prior violations, how the supervisory authority became aware of the violation, compliance with measures imposed on the controller or processor, the application of codes of conduct, and any other aggravating or mitigating factors. The imposition of sanctions, including administrative fines, should be subject to appropriate procedural safeguards consistent with the general principles of Union law and the Charter of Fundamental Rights, including effective legal protection and the right to a fair trial.
„GDPR covers one of our employees, it's just a few documents"
Are you sure about that?

